$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/566629a7-3529-3587-a936-ca614965d4a7.roa File: 566629a7-3529-3587-a936-ca614965d4a7.roa (raw, json) Hash identifier: 3MW9+kgxMAdLPXzAUpJ/59NBOQQoFQ6+hur5hLlxPTg= Subject key identifier: 79:0C:79:70:30:8F:C6:75:0E:5D:06:82:5B:B5:5D:B4:E6:07:77:8D Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584F4C3D4BE999F9A58BBEE84480 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/566629a7-3529-3587-a936-ca614965d4a7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23316 IP address blocks: 108.60.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4b:e9:99:f9:a5:8b:be:e8:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=9997e50d-eec7-46b6-b7af-e4635603a128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:b3:9d:e2:63:00:80:4a:8e:ca:11:b7:37: a3:d4:8a:38:68:73:aa:ca:eb:2b:9d:5c:76:86:7f: 8b:67:4a:96:f2:76:1b:a4:60:a6:6f:bf:43:d3:28: bf:d1:ae:ab:d2:cd:04:34:3d:ae:d7:a3:5f:1c:c2: 80:96:fc:b5:82:a7:63:a0:33:f0:bf:6d:ad:61:ed: 5d:c6:3a:be:9a:c5:47:40:9e:19:99:1e:90:f9:74: cd:46:08:29:10:17:6c:ec:1c:fc:62:2f:b9:05:f6: 06:98:4e:18:c6:67:41:3d:93:d1:53:00:26:d6:75: 8b:66:b9:64:f7:c3:6d:98:e7:98:f7:45:c8:e5:af: 70:f7:3d:95:17:86:e0:81:1d:7a:d0:59:34:b4:5b: e2:79:1e:1f:35:e3:ee:6e:03:46:85:7e:77:15:f1: 3f:e7:e9:b0:22:5f:41:80:34:cd:d7:ac:f8:46:da: 0f:46:43:33:7a:a2:6e:f5:d1:f4:84:79:cb:d2:db: 7c:4b:72:e6:d4:db:0e:c4:37:75:1e:9e:d6:37:39: 3d:d2:18:b1:fc:e9:7b:86:b9:1a:c3:50:7f:51:ba: 8b:c2:7a:87:d8:36:1b:fb:39:b6:a0:71:be:ca:12: f3:16:aa:8f:30:aa:b5:ab:ce:23:94:88:c0:84:39: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0C:79:70:30:8F:C6:75:0E:5D:06:82:5B:B5:5D:B4:E6:07:77:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/566629a7-3529-3587-a936-ca614965d4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 108.60.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fc:af:a3:27:9d:d6:ed:a4:98:b9:00:b0:0c:bd:71:4c:59: 3b:b5:fd:97:07:c9:b4:ff:3c:25:3e:fb:cb:62:51:d0:fc:24: 37:23:4c:9a:f6:d2:0e:73:33:1b:b7:62:85:26:c7:c0:79:1b: 57:6e:cd:1a:e1:1b:a9:42:53:20:e9:ff:48:36:e3:c5:bf:9b: 69:58:82:90:fd:43:39:5c:58:ad:db:6c:ab:2d:7d:09:84:f6: 1f:f5:a3:08:bd:af:02:e6:cb:95:9d:bc:74:0f:90:d4:10:00: c6:6a:7a:80:79:ec:f4:68:b7:73:f1:3b:ef:69:d3:75:aa:71: 56:6e:30:b8:af:a7:e6:ca:3e:d2:23:ac:50:ea:45:66:63:c5: 76:e7:b7:6f:38:67:98:05:fb:13:06:d5:3a:bc:ef:3a:60:28: 9a:7d:68:e1:77:4a:82:48:fb:13:80:50:7c:45:0b:6e:43:44: 41:80:a5:d2:ec:9c:d4:df:3b:19:a3:de:65:e8:99:3b:31:5d: 8c:0c:a9:5c:01:be:26:1b:d7:8f:3e:c3:28:9f:5a:7a:38:ad: 3a:a2:80:ea:a3:6b:80:b2:40:73:43:58:2f:49:39:bb:55:04: 04:06:f1:32:67:eb:9b:b9:e5:78:1c:ab:48:f3:3c:61:2e:a0: 49:11:88:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUvpmfmli77oRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTk5N2U1MGQtZWVjNy00NmI2LWI3YWYtZTQ2MzU2MDNhMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKzneJjAIBKjsoRtzej1Io4aHOqyusrnVx2 hn+LZ0qW8nYbpGCmb79D0yi/0a6r0s0END2u16NfHMKAlvy1gqdjoDPwv22tYe1d xjq+msVHQJ4ZmR6Q+XTNRggpEBds7Bz8Yi+5BfYGmE4YxmdBPZPRUwAm1nWLZrlk 98NtmOeY90XI5a9w9z2VF4bggR160Fk0tFvieR4fNePubgNGhX53FfE/5+mwIl9B gDTN16z4RtoPRkMzeqJu9dH0hHnL0tt8S3Lm1NsOxDd1Hp7WNzk90hix/Ol7hrka w1B/UbqLwnqH2DYb+zm2oHG+yhLzFqqPMKq1q84jlIjAhDn6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkMeXAwj8Z1Dl0Gglu1XbTmB3eNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvNTY2NjI5YTctMzUyOS0z NTg3LWE5MzYtY2E2MTQ5NjVkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbDwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP8r6MnndbtpJi5ALAMvXFMWTu1/ZcHybT/PCU++8tiUdD8JDcjTJr2 0g5zMxu3YoUmx8B5G1duzRrhG6lCUyDp/0g248W/m2lYgpD9QzlcWK3bbKstfQmE 9h/1owi9rwLmy5WdvHQPkNQQAMZqeoB57PRot3PxO+9p03WqcVZuMLivp+bKPtIj rFDqRWZjxXbnt284Z5gF+xMG1Tq87zpgKJp9aOF3SoJI+xOAUHxFC25DREGApdLs nNTfOxmj3mXomTsxXYwMqVwBviYb148+wyifWno4rTqigOqja4CyQHNDWC9JObtV BAQG8TJn65u55Xgcq0jzPGEuoEkRiKE= -----END CERTIFICATE-----Generated at Sun Oct 4 10:23:26 2026 by rpki-client