$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd1d8c60-e3ef-3dbf-a143-a64cf88ac09c.roa File: cd1d8c60-e3ef-3dbf-a143-a64cf88ac09c.roa (raw, json) Hash identifier: z5k6rzbnMAaTU9LIMI8eT0crYWpbbURdreUTvcEWa2Y= Subject key identifier: 64:4A:7C:4A:51:99:02:C7:50:D5:E0:EC:23:4C:97:B8:04:3C:A9:F4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0D4246C28F0037B5E351D5E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd1d8c60-e3ef-3dbf-a143-a64cf88ac09c.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 29182 IP address blocks: 108.171.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:46:c2:8f:00:37:b5:e3:51:d5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=464ed638-9df3-4bbd-9ca1-6d1b5afdbf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:f4:87:aa:77:f8:de:61:44:38:1b:24:e6: f5:c8:60:c1:c6:de:52:d9:77:00:d2:e7:11:6a:67: 5c:bc:36:3d:b6:b0:5a:96:e1:61:27:a3:29:7f:04: ca:bd:33:23:51:e6:69:fa:c8:28:f2:c2:bf:f2:d8: 98:8d:33:c1:60:3c:4b:38:34:25:f4:1b:19:19:c1: bc:c3:c1:31:0f:e8:97:30:e3:c2:85:07:57:9b:a8: d5:70:45:2b:bb:d3:25:28:86:59:94:c7:41:f8:6e: a1:d3:25:2d:b8:1c:e9:10:05:7a:50:61:e7:c9:10: ee:19:00:8e:90:49:87:cd:cd:b4:48:ac:f8:34:9f: 91:ea:06:28:d4:60:1b:52:a0:d6:51:29:bc:9e:4f: 88:55:cf:ed:09:ff:b6:eb:6f:a6:ca:be:4b:70:00: 15:2f:de:ae:e1:4e:8d:4c:4b:07:c8:19:c2:b0:75: d1:21:e6:2d:37:66:56:61:70:08:cb:d4:29:ac:3e: 7c:ae:7a:67:8d:03:b3:db:6a:2a:30:0d:ab:15:61: 92:ec:99:1f:27:5c:45:18:2f:4a:ce:f1:58:2c:73: 99:df:e5:12:5d:52:1d:5e:bf:1f:ed:fd:71:f6:83: 76:15:d8:d0:9f:af:b1:d8:c6:7e:cc:da:e8:ff:02: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:7C:4A:51:99:02:C7:50:D5:E0:EC:23:4C:97:B8:04:3C:A9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd1d8c60-e3ef-3dbf-a143-a64cf88ac09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:42:c9:67:92:5d:23:d8:d1:dc:61:01:04:42:2f:a3:8c:80: 4e:42:8c:54:0a:c3:98:1c:f6:34:9b:8c:c0:bd:7f:61:9d:82: fc:24:cb:ca:fb:d7:48:27:68:20:47:09:de:02:61:c1:cb:26: b6:46:a7:de:85:ef:1a:88:6e:9e:43:d3:4d:1c:5a:52:6d:5c: 0e:d4:d0:fa:03:df:81:41:26:cf:94:be:5b:cc:b8:7a:e2:b4: 33:9e:e6:31:3d:51:2b:53:0f:54:b2:b6:05:6e:8b:85:66:d5: 1c:7a:be:2e:57:3e:8e:73:b7:dc:95:40:2e:09:24:da:2c:f0: 2f:29:f8:72:1d:f1:e1:69:28:6d:b4:58:48:1d:fd:5e:c1:7a: f8:cd:8e:f9:60:63:65:77:de:71:bd:72:c3:c6:95:79:ef:67: 35:ce:db:5b:80:a1:0d:ac:de:17:66:9b:8e:cd:64:99:7f:a5: 81:01:9a:d2:46:50:ce:5b:5f:e4:5d:ab:37:52:e5:ae:ed:0a: 77:65:3e:f1:8d:1f:ff:f8:6e:f1:54:1c:48:1d:22:d7:0d:2b: 83:6d:ad:00:6e:71:97:2f:7d:b6:38:31:a8:c3:56:ee:a4:65: ed:fe:7e:8a:b5:c2:13:a1:67:ed:38:84:49:10:ab:d3:b2:5b: cf:1a:8a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQkbCjwA3teNR1eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDY0ZWQ2MzgtOWRmMy00YmJkLTljYTEtNmQxYjVhZmRiZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGT0h6p3+N5hRDgbJOb1yGDBxt5S2XcA0ucR amdcvDY9trBaluFhJ6MpfwTKvTMjUeZp+sgo8sK/8tiYjTPBYDxLODQl9BsZGcG8 w8ExD+iXMOPChQdXm6jVcEUru9MlKIZZlMdB+G6h0yUtuBzpEAV6UGHnyRDuGQCO kEmHzc20SKz4NJ+R6gYo1GAbUqDWUSm8nk+IVc/tCf+262+myr5LcAAVL96u4U6N TEsHyBnCsHXRIeYtN2ZWYXAIy9QprD58rnpnjQOz22oqMA2rFWGS7JkfJ1xFGC9K zvFYLHOZ3+USXVIdXr8f7f1x9oN2FdjQn6+x2MZ+zNro/wJP/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRKfEpRmQLHUNXg7CNMl7gEPKn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2QxZDhjNjAtZTNlZi0z ZGJmLWExNDMtYTY0Y2Y4OGFjMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERCyWeSXSPY0dxhAQRCL6OMgE5CjFQKw5gc9jSbjMC9f2Gdgvwky8r7 10gnaCBHCd4CYcHLJrZGp96F7xqIbp5D000cWlJtXA7U0PoD34FBJs+UvlvMuHri tDOe5jE9UStTD1SytgVui4Vm1Rx6vi5XPo5zt9yVQC4JJNos8C8p+HId8eFpKG20 WEgd/V7BevjNjvlgY2V33nG9csPGlXnvZzXO21uAoQ2s3hdmm47NZJl/pYEBmtJG UM5bX+RdqzdS5a7tCndlPvGNH//4bvFUHEgdItcNK4NtrQBucZcvfbY4MajDVu6k Ze3+foq1whOhZ+04hEkQq9OyW88ait0= -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:20 2026 by rpki-client