$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa File: 2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa (raw, json) Hash identifier: Ztw+tEEQEMLghTdS2CCcUlh0f/8PAkhpmteNdSk1A2o= Subject key identifier: A3:34:EC:4F:E6:47:BB:7F:96:78:E3:EB:51:D4:06:84:BF:F5:C2:C8 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F4976D5ECEA457653D6B4CE80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62651 IP address blocks: 108.171.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:d5:ec:ea:45:76:53:d6:b4:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=239185ad-7db2-49bc-a477-ccb6a928e0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:80:bc:65:6c:64:66:1d:8a:92:61:e4:98:c0: dd:e7:8b:d8:b4:4c:df:93:22:6d:01:35:7a:ad:42: 6b:ee:fb:a3:2c:be:21:46:a4:d5:a8:d5:f5:12:3f: db:62:d8:cf:53:b1:36:00:14:39:f5:a0:54:08:8b: de:86:52:00:ed:fc:6d:d9:3c:23:19:85:f5:7f:5b: e3:48:79:ef:d1:f9:ee:9e:3e:b6:02:3e:b7:57:14: bd:d7:bc:98:c6:04:a0:e7:c8:db:09:69:0f:56:23: 05:1f:ab:90:a4:99:0a:25:ef:86:75:03:19:9e:6b: 92:43:a7:18:8d:6e:bd:ab:88:bc:ed:12:ce:61:c4: ef:e8:28:f5:bc:fa:e5:8f:92:43:6b:a0:03:e3:78: a1:74:1e:5f:33:65:68:99:be:c1:a1:80:00:4d:8b: 72:e5:75:13:7e:49:9a:bd:03:32:3a:d1:d1:aa:2c: 86:42:b5:34:eb:d6:c5:bc:5c:ec:92:5a:28:77:ff: 26:c2:3a:18:f1:e6:3f:c3:b0:46:4f:f9:f9:5b:c7: 62:a2:01:a2:9f:35:a1:c7:e8:48:b9:77:48:34:ec: f5:78:47:9c:ca:f1:52:b4:7d:e4:7a:ff:11:bc:73: cf:8c:e1:5b:c0:b5:84:1e:d2:f6:11:d0:d6:a8:2a: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:34:EC:4F:E6:47:BB:7F:96:78:E3:EB:51:D4:06:84:BF:F5:C2:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:17:17:5f:ad:b3:66:60:24:d5:5a:93:54:dd:5c:41:67:74: a7:ea:6b:47:c3:ed:86:f6:49:7a:8c:71:0e:33:ba:84:8d:d9: 40:1d:10:b6:84:7f:fe:40:14:0f:d8:c6:20:88:f5:ef:0e:5c: e3:ab:2e:77:0f:80:71:83:ce:80:27:b1:b3:65:42:b5:e1:8d: 77:37:df:33:03:f4:2c:4e:3f:2f:7e:d2:47:59:20:a4:4e:5c: 8b:4e:3a:4a:ad:62:f7:56:cb:a2:34:f8:a5:68:14:89:49:e2: 27:ad:51:55:1b:d9:46:01:a0:b5:e8:ee:d1:43:85:97:0f:ee: b9:ab:1b:eb:50:56:dc:0e:9e:0f:c9:f8:5b:8c:c0:42:fa:9c: 40:ec:71:ee:a8:0e:bf:77:f4:df:4e:7b:96:6e:f9:0e:3e:17: f4:3f:02:87:09:a6:34:6b:87:e6:c4:9d:d9:af:cc:f3:82:a7: c3:96:37:50:00:9a:05:1a:65:b1:15:17:24:24:cc:bb:c8:50: ee:80:73:5e:70:c0:3a:6a:cd:2c:b9:e9:69:ca:ae:04:dd:ee: 28:ee:4f:4c:46:30:8f:b0:be:9b:6f:d6:3c:5a:f9:35:43:0e: 32:15:2a:44:e0:58:41:d5:a2:ea:df:eb:40:dd:43:6a:9e:89: 76:81:d0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtXs6kV2U9a0zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjM5MTg1YWQtN2RiMi00OWJjLWE0NzctY2NiNmE5MjhlMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYC8ZWxkZh2KkmHkmMDd54vYtEzfkyJtATV6 rUJr7vujLL4hRqTVqNX1Ej/bYtjPU7E2ABQ59aBUCIvehlIA7fxt2TwjGYX1f1vj SHnv0fnunj62Aj63VxS917yYxgSg58jbCWkPViMFH6uQpJkKJe+GdQMZnmuSQ6cY jW69q4i87RLOYcTv6Cj1vPrlj5JDa6AD43ihdB5fM2Vomb7BoYAATYty5XUTfkma vQMyOtHRqiyGQrU069bFvFzsklood/8mwjoY8eY/w7BGT/n5W8diogGinzWhx+hI uXdINOz1eEecyvFStH3kev8RvHPPjOFbwLWEHtL2EdDWqCpAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM07E/mR7t/lnjj61HUBoS/9cLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMmIxODRjYmMtZmRkZi0z MWUzLWEwZjAtZTk5YWM0YjI0M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMXF1+ts2ZgJNVak1TdXEFndKfqa0fD7Yb2SXqMcQ4zuoSN2UAdELaE f/5AFA/YxiCI9e8OXOOrLncPgHGDzoAnsbNlQrXhjXc33zMD9CxOPy9+0kdZIKRO XItOOkqtYvdWy6I0+KVoFIlJ4ietUVUb2UYBoLXo7tFDhZcP7rmrG+tQVtwOng/J +FuMwEL6nEDsce6oDr939N9Oe5Zu+Q4+F/Q/AocJpjRrh+bEndmvzPOCp8OWN1AA mgUaZbEVFyQkzLvIUO6Ac15wwDpqzSy56WnKrgTd7ijuT0xGMI+wvptv1jxa+TVD DjIVKkTgWEHVourf60DdQ2qeiXaB0Hg= -----END CERTIFICATE-----Generated at Mon Sep 28 10:40:53 2026 by rpki-client