$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json) Hash identifier: 6oBmrrZC1RJiwcChOiVWMtRqzpmzTzXA6AroCUmRSys= Subject key identifier: AE:B8:F7:40:6C:75:FC:A3:A7:04:6E:AC:74:91:28:20:B4:F5:9C:7E Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F4328584DB07578320F93552C33864B80 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 108.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:78:32:0f:93:55:2c:33:86:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=27ce0531-418a-4029-8efc-20c5ccf777ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:1e:e5:46:67:6a:2c:d0:c8:aa:f1:c5:17: 23:8b:13:cb:68:e6:46:19:7b:a3:54:d3:6c:6e:a4: c4:ca:ca:76:bf:6d:1d:29:19:a9:39:7d:35:a8:ae: 85:80:10:ce:fb:0c:e0:11:b6:94:7a:b0:89:16:db: d6:99:38:b2:bb:d7:67:e2:57:94:d4:b9:8e:48:aa: 2b:9b:a0:e0:f4:bd:fe:37:b7:e3:eb:5f:2b:78:06: a1:cf:4f:10:11:20:d6:30:36:92:59:f6:4a:31:05: b0:e3:1a:a7:54:a9:5e:25:9f:76:c0:32:ab:79:9f: 1c:e1:ae:0d:c5:67:12:83:50:d9:f9:9d:a1:79:7c: 8e:f9:f7:f2:85:e1:46:68:f8:22:46:45:bb:09:4a: 70:c2:25:22:bf:3e:16:b6:50:cd:0f:3a:4e:fe:02: 4d:ad:e9:3f:7f:1a:d7:6d:bf:a2:e0:7a:4f:1a:84: eb:0b:66:e5:5d:ee:5a:19:3e:e7:2e:94:d3:8e:af: 37:1b:fc:ea:37:6b:09:a4:29:02:c7:71:19:da:9a: b5:0b:e8:af:53:ac:aa:ae:04:c2:ce:e4:67:8f:dd: 6b:ad:6e:41:9d:b3:3c:6d:31:76:d9:85:dd:f2:db: d5:f6:dc:55:5d:02:b5:fd:14:fd:51:e2:31:d5:98: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B8:F7:40:6C:75:FC:A3:A7:04:6E:AC:74:91:28:20:B4:F5:9C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ff:32:77:1b:97:ae:50:d7:7e:b9:0c:e9:ee:ec:74:19:e0: 29:4f:17:65:f9:b5:b7:36:30:ad:ef:f4:8d:67:75:ce:f5:1e: 94:a9:89:5c:37:2b:59:c2:06:cc:e5:88:10:f3:c1:8c:02:52: 19:26:e2:01:38:d2:3d:08:c9:6b:57:ea:02:8b:a6:a5:2e:51: d1:0b:2c:2f:29:e7:e6:23:1f:91:15:16:a2:e3:06:10:40:d2: e9:13:68:5f:8e:44:a3:c6:1f:65:b5:b6:46:23:17:a9:45:90: fa:c0:03:b8:da:84:67:14:2f:4f:bd:4d:04:eb:cc:f2:2b:1d: 7b:30:11:06:50:34:fe:0e:60:b5:90:5e:f4:b0:ef:95:c4:fc: cc:0e:e3:ad:d9:b7:2b:9b:7a:45:ec:7d:48:26:01:33:39:06: c7:05:c2:e9:1b:28:56:cb:c4:6a:d6:4e:8f:40:5b:f3:8f:ea: 8b:79:df:56:d2:cc:d5:8d:3d:e2:cd:d3:7a:47:08:75:49:a8: 82:bf:8c:97:12:83:bc:45:df:c0:29:23:5c:a5:29:c8:d3:23: c5:ea:17:da:05:ec:cd:19:f1:3e:00:1a:c5:ec:ca:96:b0:16: dc:18:96:76:7d:fd:fc:33:4e:3c:aa:2a:73:42:bf:5d:d2:3d: 5a:00:2a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdXgyD5NVLDOGS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk MjdjZTA1MzEtNDE4YS00MDI5LThlZmMtMjBjNWNjZjc3N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Ye5UZnaizQyKrxxRcjixPLaOZGGXujVNNs bqTEysp2v20dKRmpOX01qK6FgBDO+wzgEbaUerCJFtvWmTiyu9dn4leU1LmOSKor m6Dg9L3+N7fj618reAahz08QESDWMDaSWfZKMQWw4xqnVKleJZ92wDKreZ8c4a4N xWcSg1DZ+Z2heXyO+ffyheFGaPgiRkW7CUpwwiUivz4WtlDNDzpO/gJNrek/fxrX bb+i4HpPGoTrC2blXe5aGT7nLpTTjq83G/zqN2sJpCkCx3EZ2pq1C+ivU6yqrgTC zuRnj91rrW5BnbM8bTF22YXd8tvV9txVXQK1/RT9UeIx1ZgidQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6490BsdfyjpwRurHSRKCC09Zx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvNDNmMGMzMmEtNGMxOC0z OTI0LWIzY2MtMDEzYTU0Y2QxODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET/Mncbl65Q1365DOnu7HQZ4ClPF2X5tbc2MK3v9I1ndc71HpSpiVw3 K1nCBszliBDzwYwCUhkm4gE40j0IyWtX6gKLpqUuUdELLC8p5+YjH5EVFqLjBhBA 0ukTaF+ORKPGH2W1tkYjF6lFkPrAA7jahGcUL0+9TQTrzPIrHXswEQZQNP4OYLWQ XvSw75XE/MwO463ZtyubekXsfUgmATM5BscFwukbKFbLxGrWTo9AW/OP6ot531bS zNWNPeLN03pHCHVJqIK/jJcSg7xF38ApI1ylKcjTI8XqF9oF7M0Z8T4AGsXsypaw FtwYlnZ9/fwzTjyqKnNCv13SPVoAKhQ= -----END CERTIFICATE-----Generated at Wed May 13 05:06:07 2026 by rpki-client