$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json) Hash identifier: 1MQAT/QB0GaDpLtGdfToSR+RzyEYAMlUWgZ/zTFZl80= Subject key identifier: 68:B4:A0:67:5A:7C:EF:5A:EF:7D:B7:0B:AF:28:97:A6:B1:24:B0:0F Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F4328584FD52691A4587FE2B1F50DC840 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa Signing time: Sat 14 Nov 2026 02:00:13 +0000 ROA not before: Sat 14 Nov 2026 02:00:13 +0000 ROA not after: Fri 12 Feb 2027 02:00:13 +0000 asID: 396982 IP address blocks: 108.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d5:26:91:a4:58:7f:e2:b1:f5:0d:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Nov 14 02:00:13 2026 GMT Not After : Feb 12 02:00:13 2027 GMT Subject: CN=3d2b1139-496c-4537-81f3-98bd0c92e028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:60:9c:33:a2:cb:bc:26:b8:bb:4a:6b:59: ff:bb:75:03:3a:f9:6a:a1:df:1b:f7:5c:2b:1e:3d: 82:9e:9c:fa:3c:19:ba:8c:1d:9f:00:3b:5e:c0:79: 1c:d3:82:98:4e:04:62:90:b6:b0:f0:fb:8f:2b:e0: 6d:5e:a7:9b:69:19:77:f1:d0:4b:08:3a:ea:38:94: dd:77:b7:e5:b3:34:23:d3:e5:3e:ef:dc:25:5e:dd: 71:eb:b8:cb:eb:31:82:83:0a:c7:75:c5:17:ce:d2: 49:d4:60:95:c8:39:fb:c9:21:df:f7:9c:bb:dd:3f: cd:90:ee:1f:3d:18:d3:c8:0a:c6:95:ab:c4:09:bd: 4e:c6:95:57:13:41:91:e5:20:79:ee:e9:8c:4a:81: 1d:8f:c0:f7:11:a6:f9:29:77:2f:8b:76:b2:77:01: 9d:7c:c7:af:1d:bb:ac:8e:a7:69:b0:28:cf:a3:38: 65:d3:1e:f8:de:4a:21:81:0f:b9:3e:fe:1f:7b:7a: a1:3f:e7:3c:8c:b8:ee:b0:df:07:65:40:87:5a:6e: 56:2b:ab:b0:58:89:79:76:30:6d:c3:cc:4e:8f:5f: 39:d5:4e:a7:b1:9a:d6:3d:07:86:80:a3:73:8c:2f: b8:3a:89:96:5a:95:08:2b:53:62:6e:4b:da:d8:d5: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B4:A0:67:5A:7C:EF:5A:EF:7D:B7:0B:AF:28:97:A6:B1:24:B0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a8:31:57:41:cf:b8:bf:f6:9a:5d:cb:4a:c3:7f:72:ce:ff: 04:08:ec:df:9e:22:78:73:fb:90:80:76:a2:fd:57:e2:00:e1: 1e:c0:4e:e9:bd:76:f7:76:6c:41:32:c7:fc:ce:85:00:bc:b7: 80:a4:ba:b7:8d:a9:cd:37:ec:0f:a9:2a:ed:ce:25:dc:87:38: 08:96:64:13:04:3b:f9:f3:af:35:69:41:fb:f6:90:94:97:2c: e5:b3:8f:2b:34:20:8f:bf:d1:c6:29:04:f2:23:e8:b2:57:83: b2:24:0b:1f:3f:fa:8f:c7:93:be:eb:74:1f:7f:da:7e:b5:64: df:c7:71:f6:ac:2d:37:63:65:bf:bd:ce:d6:99:59:71:ab:69: 0c:e2:e5:d0:e1:35:50:18:54:d7:ea:4a:f4:9d:76:16:6e:ea: b3:bd:96:20:9e:d4:02:79:f9:da:f9:e6:4a:10:76:50:39:4b: 94:f4:0f:89:e0:96:e2:7b:49:0f:5a:c2:32:53:3e:d9:d2:e1: 74:20:b9:bc:2c:64:29:f3:4b:ac:f1:6b:8a:c1:77:52:2e:6e: dd:36:94:99:bf:ef:5d:2a:db:0c:ef:05:d7:d3:74:3a:88:43: af:5e:51:1a:73:20:e8:34:09:59:f2:21:0f:6f:45:9d:8d:65: e1:57:7c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/VJpGkWH/isfUNyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI2MTExNDAyMDAxM1oXDTI3MDIxMjAyMDAxM1owLzEtMCsGA1UEAxMk M2QyYjExMzktNDk2Yy00NTM3LTgxZjMtOThiZDBjOTJlMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4RgnDOiy7wmuLtKa1n/u3UDOvlqod8b91wr Hj2Cnpz6PBm6jB2fADtewHkc04KYTgRikLaw8PuPK+BtXqebaRl38dBLCDrqOJTd d7flszQj0+U+79wlXt1x67jL6zGCgwrHdcUXztJJ1GCVyDn7ySHf95y73T/NkO4f PRjTyArGlavECb1OxpVXE0GR5SB57umMSoEdj8D3Eab5KXcvi3aydwGdfMevHbus jqdpsCjPozhl0x743kohgQ+5Pv4fe3qhP+c8jLjusN8HZUCHWm5WK6uwWIl5djBt w8xOj1851U6nsZrWPQeGgKNzjC+4OomWWpUIK1Nibkva2NWrUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi0oGdafO9a7323C68ol6axJLAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvNDNmMGMzMmEtNGMxOC0z OTI0LWIzY2MtMDEzYTU0Y2QxODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqoMVdBz7i/9ppdy0rDf3LO/wQI7N+eInhz+5CAdqL9V+IA4R7ATum9 dvd2bEEyx/zOhQC8t4CkureNqc037A+pKu3OJdyHOAiWZBMEO/nzrzVpQfv2kJSX LOWzjys0II+/0cYpBPIj6LJXg7IkCx8/+o/Hk77rdB9/2n61ZN/HcfasLTdjZb+9 ztaZWXGraQzi5dDhNVAYVNfqSvSddhZu6rO9liCe1AJ5+dr55koQdlA5S5T0D4ng luJ7SQ9awjJTPtnS4XQgubwsZCnzS6zxa4rBd1Iubt02lJm/710q2wzvBdfTdDqI Q69eURpzIOg0CVnyIQ9vRZ2NZeFXfJc= -----END CERTIFICATE-----Generated at Sun Nov 15 17:09:04 2026 by rpki-client