$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json) Hash identifier: PXhoeC2nRJfOj5ZxThM3tLT0CKhEO25IOgZYfUGbOkU= Subject key identifier: AA:A6:28:48:D8:9E:EC:F7:7D:2B:58:17:AA:35:BD:39:57:13:C4:C5 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584DBBA05005F2222C7F94D0A040 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 40788 IP address blocks: 108.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:50:05:f2:22:2c:7f:94:d0:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=930aace8-d01c-4996-95b4-611a4993893f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:10:b6:8c:d6:39:bc:26:f2:0e:04:9e:00: 1c:4b:b1:50:b7:9e:2b:ac:e1:a4:b7:2d:27:0c:54: 34:33:c4:ef:ed:3d:11:09:8c:6e:99:1e:65:b5:40: cd:b1:92:46:eb:51:7d:a8:75:50:dd:21:5d:3d:15: 78:23:d3:76:0b:f4:a4:92:30:4c:e9:f8:56:52:a9: d6:5f:73:ea:ec:59:77:3d:81:df:bf:5a:c7:b2:cb: c9:6f:eb:c5:8f:81:fd:08:d8:37:23:33:96:2e:7b: 36:48:b5:44:0a:39:e0:47:3c:7b:96:cb:62:f1:71: ea:55:e8:9b:f4:06:fe:ae:50:a0:5b:f9:72:28:47: 9c:b7:16:f5:b1:48:ea:0b:d3:04:8f:7f:2e:9d:de: 3b:cd:48:4a:54:9b:d8:2f:66:35:82:2a:0a:f1:2f: c0:01:64:55:39:f0:66:02:30:58:4f:b8:03:2a:c8: d4:64:e2:84:e7:79:2f:79:e5:3a:9d:7e:3b:c2:a9: c1:b8:1d:6a:0f:d2:c0:45:45:2d:5c:ef:d6:85:b7: 62:10:bf:4c:7b:63:76:a3:a9:12:36:f2:b1:01:cb: 65:31:72:fb:a5:35:c4:2c:5a:29:40:8e:e6:16:c4: c1:aa:41:ad:2e:9b:f2:a7:e6:a0:0c:67:72:f6:8a: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:28:48:D8:9E:EC:F7:7D:2B:58:17:AA:35:BD:39:57:13:C4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 108.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8f:fa:e7:ac:04:f5:92:41:6e:04:91:ce:6e:51:8b:45:55: a9:f0:7a:88:bc:4d:a0:a2:59:79:40:87:35:53:67:c8:f7:4a: ea:6e:f1:21:69:26:cb:58:64:94:32:f0:93:fe:71:ef:14:c0: 66:9b:bd:b6:ec:9b:69:86:32:b4:f7:90:1c:92:ab:4c:d5:4b: 41:ad:8a:16:79:6d:9e:c7:aa:1e:b1:cf:a0:61:04:41:54:5b: b4:32:dd:e3:a2:0d:0a:c3:e1:32:60:c7:8b:42:71:16:51:5e: 57:71:26:db:e0:ce:77:c9:6c:f5:df:89:95:dd:bb:a1:28:31: 32:e1:66:0f:b8:ba:9c:8d:49:4e:9e:77:c2:bc:a9:a7:47:c5: 73:bb:d6:6a:ed:12:63:c4:6b:1a:31:ca:c9:26:59:10:d3:77: 94:9b:ca:aa:99:4e:41:40:be:98:ce:62:70:9e:21:5f:f1:99: ea:aa:de:88:d9:fe:8f:b2:b3:75:94:ad:6f:f5:80:0c:cc:00: d5:e3:8f:01:88:f6:25:90:fc:01:f9:49:f4:92:55:4e:2d:50: 12:1c:e7:8f:a0:27:74:f1:34:11:6f:13:a1:d6:81:92:3b:77: de:12:79:78:7d:c0:51:62:71:a0:50:83:64:9e:a1:0e:f5:9e: cd:0b:49:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFAF8iIsf5TQoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk OTMwYWFjZTgtZDAxYy00OTk2LTk1YjQtNjExYTQ5OTM4OTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaEQtozWObwm8g4EngAcS7FQt54rrOGkty0n DFQ0M8Tv7T0RCYxumR5ltUDNsZJG61F9qHVQ3SFdPRV4I9N2C/SkkjBM6fhWUqnW X3Pq7Fl3PYHfv1rHssvJb+vFj4H9CNg3IzOWLns2SLVECjngRzx7lsti8XHqVeib 9Ab+rlCgW/lyKEectxb1sUjqC9MEj38und47zUhKVJvYL2Y1gioK8S/AAWRVOfBm AjBYT7gDKsjUZOKE53kveeU6nX47wqnBuB1qD9LARUUtXO/WhbdiEL9Me2N2o6kS NvKxActlMXL7pTXELFopQI7mFsTBqkGtLpvyp+agDGdy9opQywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqmKEjYnuz3fStYF6o1vTlXE8TFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWP+uesBPWSQW4Ekc5uUYtFVanweoi8TaCiWXlAhzVTZ8j3Supu8SFp JstYZJQy8JP+ce8UwGabvbbsm2mGMrT3kBySq0zVS0GtihZ5bZ7Hqh6xz6BhBEFU W7Qy3eOiDQrD4TJgx4tCcRZRXldxJtvgznfJbPXfiZXdu6EoMTLhZg+4upyNSU6e d8K8qadHxXO71mrtEmPEaxoxyskmWRDTd5SbyqqZTkFAvpjOYnCeIV/xmeqq3ojZ /o+ys3WUrW/1gAzMANXjjwGI9iWQ/AH5SfSSVU4tUBIc54+gJ3TxNBFvE6HWgZI7 d94SeXh9wFFicaBQg2SeoQ71ns0LSXs= -----END CERTIFICATE-----Generated at Wed May 13 11:07:17 2026 by rpki-client