$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa File: d0fa683f-b54a-312d-a1bb-62021883e18a.roa (raw, json) Hash identifier: /S1BIf/Ki/7v/TXXHyDOWyXyGVW0nAa5g4oBLl011WY= Subject key identifier: AC:F4:0C:C5:1A:1E:69:9D:ED:50:76:E5:3F:B6:A9:62:0B:08:58:C0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984B9EF55E340E334AC1BA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.170.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b9:ef:55:e3:40:e3:34:ac:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dad57c0c-f6cb-4e6e-a229-9a17e16ce6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:95:88:de:5a:71:81:c1:29:b8:30:ff:aa:cc: 5c:a1:b4:b5:0f:78:39:2b:38:13:b3:7d:b8:b5:2c: bc:f4:13:61:c2:b1:07:23:82:31:68:c5:bb:c5:52: 52:1b:26:0e:ef:96:d9:0f:77:6d:de:dc:e1:d5:47: 43:f8:ce:b0:19:81:e8:85:81:a0:72:d3:52:64:07: 66:c5:bb:dc:72:e9:75:be:57:fa:58:98:c8:f3:41: a7:12:bb:68:43:9a:73:42:aa:4a:63:e7:6c:63:b0: 3e:9c:0f:dc:63:03:4b:c3:df:2a:58:dc:04:f2:e2: eb:4b:5d:f6:a2:b8:2c:db:df:51:2f:e5:78:6e:6e: c9:56:bd:33:3b:c1:f6:65:c1:ce:0e:64:36:f2:7c: 44:3a:ec:1c:89:76:cb:5b:76:3e:1e:4c:9a:49:71: ec:ba:d9:55:e1:1f:ec:b2:18:bc:24:a5:06:57:21: 8d:08:ab:86:56:22:ea:79:b1:4a:36:fb:a8:19:b1: cd:18:ff:ad:12:a7:b7:a8:bf:c1:f4:6d:80:31:ce: ad:55:2a:09:c1:4d:33:92:97:af:76:18:ce:8e:7d: ad:32:fe:13:4c:ff:d5:87:3f:c2:0d:08:b0:79:98: 5f:73:82:73:01:0f:5a:ee:11:e7:52:ad:f7:d3:c6: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:0C:C5:1A:1E:69:9D:ED:50:76:E5:3F:B6:A9:62:0B:08:58:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:77:f8:a4:e0:2b:e7:a2:de:eb:d8:b2:43:5d:82:a3:88:90: 2b:77:16:ed:06:df:d2:d4:7d:9b:cf:3a:bf:9b:a0:38:e4:73: 27:19:1a:9d:30:07:7f:90:a7:03:00:ef:16:5c:0e:d3:08:8f: ff:04:a9:8f:6e:f2:f0:60:a5:c6:bc:cd:8b:72:bd:63:21:3d: 77:91:92:aa:4c:34:2e:88:fa:f0:fe:b5:07:2a:25:17:cf:df: d5:47:f2:cc:43:ee:a8:01:e2:94:ed:a4:0c:6b:a3:7f:d3:99: 4b:97:b5:2a:a3:94:b5:3f:9c:19:07:e5:9f:4d:73:aa:94:5b: bc:00:7a:f9:1c:58:aa:1e:fd:3d:bd:34:11:ea:c3:47:ba:9f: bf:e4:ef:1f:f0:82:2f:6e:1f:33:fb:60:0a:24:a1:05:19:d3: ca:58:a3:7d:7e:b7:c6:c1:2b:ef:df:5c:3a:13:42:e0:3c:c8: ec:e7:01:8c:b7:d7:72:59:fb:08:bc:de:c5:bd:fb:4c:7d:41: c8:16:3d:f3:cd:68:f4:98:2e:9a:d7:46:18:1c:aa:1c:86:4e: b9:ff:18:2e:68:8a:5a:d0:97:3f:33:98:97:a9:0c:e0:21:65: c8:58:94:2e:d7:b3:8d:dc:79:70:86:b8:e6:89:ce:83:76:54: b6:ea:0b:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLnvVeNA4zSsG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFkNTdjMGMtZjZjYi00ZTZlLWEyMjktOWExN2UxNmNlNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5WI3lpxgcEpuDD/qsxcobS1D3g5KzgTs324 tSy89BNhwrEHI4IxaMW7xVJSGyYO75bZD3dt3tzh1UdD+M6wGYHohYGgctNSZAdm xbvccul1vlf6WJjI80GnErtoQ5pzQqpKY+dsY7A+nA/cYwNLw98qWNwE8uLrS132 orgs299RL+V4bm7JVr0zO8H2ZcHODmQ28nxEOuwciXbLW3Y+HkyaSXHsutlV4R/s shi8JKUGVyGNCKuGViLqebFKNvuoGbHNGP+tEqe3qL/B9G2AMc6tVSoJwU0zkpev dhjOjn2tMv4TTP/Vhz/CDQiweZhfc4JzAQ9a7hHnUq3308ZL9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz0DMUaHmmd7VB25T+2qWILCFjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDBmYTY4M2YtYjU0YS0z MTJkLWExYmItNjIwMjE4ODNlMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA93+KTgK+ei3uvYskNdgqOIkCt3Fu0G39LUfZvPOr+boDjkcycZGp0w B3+QpwMA7xZcDtMIj/8EqY9u8vBgpca8zYtyvWMhPXeRkqpMNC6I+vD+tQcqJRfP 39VH8sxD7qgB4pTtpAxro3/TmUuXtSqjlLU/nBkH5Z9Nc6qUW7wAevkcWKoe/T29 NBHqw0e6n7/k7x/wgi9uHzP7YAokoQUZ08pYo31+t8bBK+/fXDoTQuA8yOznAYy3 13JZ+wi83sW9+0x9QcgWPfPNaPSYLprXRhgcqhyGTrn/GC5oilrQlz8zmJepDOAh ZchYlC7Xs43ceXCGuOaJzoN2VLbqCxE= -----END CERTIFICATE-----Generated at Sat Sep 26 03:24:54 2026 by rpki-client