$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ac08e71-43f5-3b13-bc23-af90a4539dc4.roa File: 8ac08e71-43f5-3b13-bc23-af90a4539dc4.roa (raw, json) Hash identifier: KjeRnP/9yvERbs4WQad8MSKTfXctwjXm3FRkbc6Tuio= Subject key identifier: 7A:73:41:55:AC:15:A2:AE:CD:32:B7:5B:49:F6:D6:48:CD:EE:C2:E9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0D4246DF5098D56372938200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ac08e71-43f5-3b13-bc23-af90a4539dc4.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 29182 IP address blocks: 108.171.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:46:df:50:98:d5:63:72:93:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=43cf8c7a-6495-4f27-9f80-572fcc32a41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:d6:9f:3a:17:c1:45:95:38:f7:d9:99:b7: bb:96:19:96:0c:ee:3f:2c:97:cd:aa:eb:c8:f3:d0: 01:12:62:75:da:f3:e9:52:05:06:56:0c:8b:0d:55: a7:ff:54:56:48:b7:36:fa:28:52:33:47:b6:72:89: ec:3e:5c:3e:22:a3:c8:0b:4f:08:89:be:b5:c0:a8: bd:45:67:58:ba:07:30:75:9b:94:a7:91:12:d6:70: 88:05:d5:59:17:f1:d9:db:f6:7e:02:f3:fe:42:cb: 7e:e5:3a:49:e1:52:01:48:73:5f:f9:c6:f2:5c:9a: 9f:46:db:aa:6c:87:92:e5:52:42:a4:96:a8:6b:7b: b9:38:ea:29:2f:0e:35:66:20:de:24:e4:da:29:af: 17:c5:92:a2:93:a5:1c:ea:26:fa:70:0f:d6:95:b9: e6:04:3f:0b:c6:a2:0c:e4:46:61:32:ec:aa:ae:3f: 19:44:20:27:08:81:9b:1a:cb:b9:0a:eb:29:45:e2: de:42:a9:e7:a9:64:5f:51:d6:65:15:21:bb:81:84: dc:68:36:f4:90:95:ff:9e:ba:bb:90:46:b5:63:f1: be:c3:54:e2:cf:5c:7c:d5:b1:9c:bb:ad:e2:a7:c3: e8:21:f7:ab:c5:07:e1:cb:6f:59:f4:41:83:a1:29: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:73:41:55:AC:15:A2:AE:CD:32:B7:5B:49:F6:D6:48:CD:EE:C2:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ac08e71-43f5-3b13-bc23-af90a4539dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fe:ef:29:6c:19:d2:c8:09:39:3f:de:80:29:ac:9a:8c:df: a2:c4:1e:a8:2f:8c:1d:9d:28:cc:80:3d:46:9b:ba:14:c9:ca: 4e:6c:21:ec:12:cc:f2:b4:2b:ca:05:06:a9:81:68:0c:23:14: be:0f:d3:24:ef:5a:58:eb:5c:ff:a6:27:49:87:84:e9:f5:ed: dc:94:50:e5:e5:4c:3d:7b:ee:f8:bd:9a:5a:00:c3:06:28:5c: 0a:af:c8:9b:77:af:d5:88:6e:59:c5:72:d5:9e:99:a8:32:01: 61:8e:f9:fd:72:5e:02:f3:6a:35:1a:6c:3f:08:95:ce:17:a1: ef:d3:f1:68:3f:5a:37:42:1a:6e:97:e2:59:05:c1:77:4d:33: 9f:49:a0:02:a0:19:3d:2a:39:16:a3:3b:79:ce:c8:3f:7a:d3: 95:3d:3c:27:b7:2b:9d:0f:d1:ae:36:58:f3:85:d2:58:6d:94: 08:43:c8:61:88:5e:08:ea:98:0f:04:d1:3c:91:d9:4d:ad:02: 12:72:30:f1:3c:16:28:4d:cb:35:16:83:0f:70:ea:33:b8:0f: 70:d6:02:80:87:94:29:b5:e2:e6:55:1e:3d:c3:79:3a:a5:ca: ef:75:5a:68:64:b8:1e:21:1f:92:be:a5:49:e1:f8:b0:23:4b: be:8b:5e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQkbfUJjVY3KTggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDNjZjhjN2EtNjQ5NS00ZjI3LTlmODAtNTcyZmNjMzJhNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor7WnzoXwUWVOPfZmbe7lhmWDO4/LJfNquvI 89ABEmJ12vPpUgUGVgyLDVWn/1RWSLc2+ihSM0e2consPlw+IqPIC08Iib61wKi9 RWdYugcwdZuUp5ES1nCIBdVZF/HZ2/Z+AvP+Qst+5TpJ4VIBSHNf+cbyXJqfRtuq bIeS5VJCpJaoa3u5OOopLw41ZiDeJOTaKa8XxZKik6Uc6ib6cA/WlbnmBD8LxqIM 5EZhMuyqrj8ZRCAnCIGbGsu5CuspReLeQqnnqWRfUdZlFSG7gYTcaDb0kJX/nrq7 kEa1Y/G+w1Tiz1x81bGcu63ip8PoIferxQfhy29Z9EGDoSkiQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpzQVWsFaKuzTK3W0n21kjN7sLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGFjMDhlNzEtNDNmNS0z YjEzLWJjMjMtYWY5MGE0NTM5ZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/+7ylsGdLICTk/3oAprJqM36LEHqgvjB2dKMyAPUabuhTJyk5sIewS zPK0K8oFBqmBaAwjFL4P0yTvWljrXP+mJ0mHhOn17dyUUOXlTD177vi9mloAwwYo XAqvyJt3r9WIblnFctWemagyAWGO+f1yXgLzajUabD8Ilc4Xoe/T8Wg/WjdCGm6X 4lkFwXdNM59JoAKgGT0qORajO3nOyD9605U9PCe3K50P0a42WPOF0lhtlAhDyGGI XgjqmA8E0TyR2U2tAhJyMPE8FihNyzUWgw9w6jO4D3DWAoCHlCm14uZVHj3DeTql yu91WmhkuB4hH5K+pUnh+LAjS76LXhk= -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:52 2026 by rpki-client