$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa File: d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json) Hash identifier: eHdd5PiqXn8f6r110kl6O2UWIIm0MXETVZD+e6ldnOY= Subject key identifier: 32:8B:E6:F4:36:91:95:57:37:9E:EB:65:DA:FE:E9:12:E9:D4:81:05 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CCCBE180A3A281B7E67A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.170.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:cc:be:18:0a:3a:28:1b:7e:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aa81f173-2b3f-4476-9401-45958daa5d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:ef:36:ce:71:ce:09:cc:9a:5a:11:e2:80: 7f:48:0e:83:d2:9c:9c:7a:d7:c2:62:09:e3:b9:f7: 8d:a9:1f:22:66:ac:82:8f:d9:91:ca:ac:6a:ce:06: 86:2a:e3:1f:4d:53:cc:96:ad:f2:7f:17:3a:25:ac: 1a:63:21:ec:6d:f0:a0:16:98:33:24:3e:0e:1b:90: 85:dc:02:20:71:c1:e6:11:55:27:32:22:c5:0c:3c: 18:3f:97:44:e2:55:1f:f8:c6:f3:4c:3f:39:ae:29: 93:1d:cb:db:48:43:33:f7:63:cf:8d:5c:a3:14:5a: ab:4d:e0:69:75:ff:ed:d7:d6:25:64:f6:02:cc:0c: b3:aa:49:0f:33:c1:31:2b:63:f4:07:c1:41:1a:6e: 54:b7:1f:6c:c5:f7:38:24:7b:7d:9c:33:ea:ac:98: de:6f:14:90:54:64:71:09:09:a3:86:fe:93:4d:2b: 76:c4:b4:b9:9b:e1:d4:78:8a:a5:c6:71:d6:81:07: 3d:98:0c:43:0b:43:e3:8d:e2:8b:e3:c7:e2:08:2f: b1:bf:f9:3c:56:fd:03:8c:f9:c8:09:6a:90:e6:00: dd:d9:51:ca:10:21:3d:aa:97:60:a6:85:d4:cc:bb: 3e:2e:d1:5b:71:7d:2a:16:47:fd:9c:53:6f:7a:ae: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:E6:F4:36:91:95:57:37:9E:EB:65:DA:FE:E9:12:E9:D4:81:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c6:f0:ea:91:38:bc:01:ff:d9:07:5c:4f:ea:b6:a0:c0:53: 6c:77:a3:d7:2e:d4:23:9f:88:be:e8:e8:f1:46:f8:27:88:ab: a6:e8:32:b0:f9:93:2e:ee:a8:ed:d4:76:9a:88:5f:b0:2b:e8: 0b:59:c0:4a:29:ad:88:6d:a7:e1:97:47:b8:d9:d8:a9:36:e2: 8b:64:61:7b:65:b5:5e:81:5b:a7:17:c6:6b:f7:cf:d8:0e:f5: 89:bf:40:f4:e9:f0:39:bb:2e:23:c7:ed:b5:40:ca:c8:06:1b: 62:95:e8:5c:78:a9:7e:ed:2f:c8:b7:8e:c1:63:cf:31:b1:4f: 3a:fc:bc:6d:e7:bc:7f:d6:04:31:8a:d7:34:62:5e:e4:ab:bf: f9:00:90:13:b4:70:d1:1a:77:08:e2:24:cc:8e:42:f4:65:a6: a9:f9:ed:25:15:c7:53:c7:f6:ba:69:08:4b:68:82:4a:37:44: 61:f9:5a:d4:df:48:6f:4b:d2:1a:96:51:87:af:b1:fa:23:94: 5a:8b:a2:a5:14:10:b4:38:5b:3c:13:ea:db:3f:e0:31:6d:71: d0:1e:e9:23:5a:29:0f:81:5c:ed:b0:bc:da:e6:b0:fd:8d:d3: 29:fc:34:49:9b:fe:11:b8:7a:fa:cd:95:9e:e6:48:c2:8e:bd: 21:6a:17:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMy+GAo6KBt+Z6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWE4MWYxNzMtMmIzZi00NDc2LTk0MDEtNDU5NThkYWE1ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQLvNs5xzgnMmloR4oB/SA6D0pycetfCYgnj ufeNqR8iZqyCj9mRyqxqzgaGKuMfTVPMlq3yfxc6JawaYyHsbfCgFpgzJD4OG5CF 3AIgccHmEVUnMiLFDDwYP5dE4lUf+MbzTD85rimTHcvbSEMz92PPjVyjFFqrTeBp df/t19YlZPYCzAyzqkkPM8ExK2P0B8FBGm5Utx9sxfc4JHt9nDPqrJjebxSQVGRx CQmjhv6TTSt2xLS5m+HUeIqlxnHWgQc9mAxDC0PjjeKL48fiCC+xv/k8Vv0DjPnI CWqQ5gDd2VHKECE9qpdgpoXUzLs+LtFbcX0qFkf9nFNveq5WhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKL5vQ2kZVXN57rZdr+6RLp1IEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRmZDlhOTEtZWRiMi0z MDI1LWJjNzQtMWEwNTRkNmM2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3G8OqROLwB/9kHXE/qtqDAU2x3o9cu1COfiL7o6PFG+CeIq6boMrD5 ky7uqO3UdpqIX7Ar6AtZwEoprYhtp+GXR7jZ2Kk24otkYXtltV6BW6cXxmv3z9gO 9Ym/QPTp8Dm7LiPH7bVAysgGG2KV6Fx4qX7tL8i3jsFjzzGxTzr8vG3nvH/WBDGK 1zRiXuSrv/kAkBO0cNEadwjiJMyOQvRlpqn57SUVx1PH9rppCEtogko3RGH5WtTf SG9L0hqWUYevsfojlFqLoqUUELQ4WzwT6ts/4DFtcdAe6SNaKQ+BXO2wvNrmsP2N 0yn8NEmb/hG4evrNlZ7mSMKOvSFqF3o= -----END CERTIFICATE-----Generated at Fri Sep 25 14:52:12 2026 by rpki-client