$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa File: c5348b71-f872-3312-b8b7-af9e5854fe26.roa (raw, json) Hash identifier: J8fcOYdvE/PHkOSaz9v5cHseOqVNh6T1n+yxZ7/aJHs= Subject key identifier: B3:81:62:A3:69:73:F2:37:8F:F7:03:C5:D1:74:94:64:82:87:42:00 Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F4328584F1467AC06CEC36DFCB273D300 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396982 IP address blocks: 108.174.252.0/24 maxlen: 24 108.174.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ac:06:ce:c3:6d:fc:b2:73:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=7658a1f8-d21a-45bb-a9d6-e87f016d806b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:89:bf:3e:a4:66:6e:0e:5f:80:4c:cf:90: b8:e8:87:20:c5:23:66:a6:2b:c5:80:cb:d7:ac:eb: 40:eb:99:66:2b:f2:28:d4:0e:77:eb:50:0b:93:8c: f5:99:98:ed:46:22:12:b2:72:34:92:bf:c1:31:76: ca:b6:3b:91:e6:58:45:e1:24:23:16:8d:9d:39:95: a7:99:07:2d:78:a8:22:09:76:5e:ef:af:a5:10:dd: e0:b6:37:94:63:f7:75:d0:c7:c6:d0:16:1c:19:bb: a5:d0:fd:10:b9:a7:a9:5d:30:ab:c2:a7:f0:61:bf: df:a9:5a:26:a4:a1:cc:fe:50:1b:7c:cd:a4:68:bb: fe:2f:36:ec:c0:6c:5c:0b:c2:b5:c1:e9:d0:d4:ee: 86:68:02:c0:30:cb:0f:35:a7:9f:67:d9:c6:30:f9: 8d:b1:c9:73:b4:ee:4e:05:b4:45:5c:b2:fd:09:21: 90:e4:88:75:ae:65:25:bd:87:f6:ec:d3:8e:6a:92: 6e:90:24:89:3f:ea:0a:4d:a3:57:52:cc:fb:f4:ae: 23:84:cf:78:b5:2e:d9:1b:d4:89:09:8a:6c:5f:15: 29:2d:63:00:a7:54:d1:12:59:58:55:4c:82:19:f8: 71:a3:8b:d3:74:2f:53:df:4c:0c:e1:3e:d5:94:4c: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:81:62:A3:69:73:F2:37:8F:F7:03:C5:D1:74:94:64:82:87:42:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ca:43:42:ad:c8:75:0c:d5:88:e7:00:8a:86:67:0a:44:b2: cf:4d:8b:20:0a:f7:19:80:b8:10:50:2a:27:f9:7f:de:5c:19: 74:e3:46:61:a7:e9:05:8e:a3:b6:a3:80:a7:22:b1:87:00:d6: 04:14:0c:4f:85:51:63:70:96:ce:3e:42:a1:e3:4e:48:76:d8: 98:cc:03:63:6a:e1:5d:00:df:84:c9:ef:fe:1f:aa:a5:d5:0f: 5d:60:2c:b0:4d:3f:fa:4c:22:2a:04:c1:2d:8e:f6:42:a8:b7: 82:ca:e5:3a:b1:02:70:87:4f:82:35:d4:ac:35:46:8d:62:3a: ee:6a:15:e0:e8:ff:fb:b8:aa:25:56:44:c1:9d:4f:db:38:b5: ad:1f:e5:c6:8f:ca:2d:d5:e1:47:4a:4e:82:c4:35:64:13:fe: 3a:49:0d:55:c9:48:cf:e2:f9:ca:f5:96:69:6b:12:e1:13:30: 3c:09:0b:9d:ac:ac:6f:82:51:14:ba:fe:a7:7f:47:71:39:e1: 17:79:2f:62:a5:ea:5f:f3:ea:b2:19:83:a0:42:5b:a5:b3:1a: 53:03:2c:05:e4:42:04:f0:aa:47:22:89:37:1d:61:6b:99:31: 00:52:0f:e0:68:aa:f0:96:e7:01:2b:d9:4e:9b:85:9b:d2:1f: 0d:d0:a3:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6wGzsNt/LJz0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NzY1OGExZjgtZDIxYS00NWJiLWE5ZDYtZTg3ZjAxNmQ4MDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb6Jvz6kZm4OX4BMz5C46IcgxSNmpivFgMvX rOtA65lmK/Io1A5361ALk4z1mZjtRiISsnI0kr/BMXbKtjuR5lhF4SQjFo2dOZWn mQcteKgiCXZe76+lEN3gtjeUY/d10MfG0BYcGbul0P0QuaepXTCrwqfwYb/fqVom pKHM/lAbfM2kaLv+LzbswGxcC8K1wenQ1O6GaALAMMsPNaefZ9nGMPmNsclztO5O BbRFXLL9CSGQ5Ih1rmUlvYf27NOOapJukCSJP+oKTaNXUsz79K4jhM94tS7ZG9SJ CYpsXxUpLWMAp1TREllYVUyCGfhxo4vTdC9T30wM4T7VlEy5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOBYqNpc/I3j/cDxdF0lGSCh0IAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvYzUzNDhiNzEtZjg3Mi0z MzEyLWI4YjctYWY5ZTU4NTRmZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbK78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDKQ0KtyHUM1YjnAIqGZwpEss9NiyAK9xmAuBBQKif5f95cGXTjRmGn 6QWOo7ajgKcisYcA1gQUDE+FUWNwls4+QqHjTkh22JjMA2Nq4V0A34TJ7/4fqqXV D11gLLBNP/pMIioEwS2O9kKot4LK5TqxAnCHT4I11Kw1Ro1iOu5qFeDo//u4qiVW RMGdT9s4ta0f5caPyi3V4UdKToLENWQT/jpJDVXJSM/i+cr1lmlrEuETMDwJC52s rG+CURS6/qd/R3E54Rd5L2Kl6l/z6rIZg6BCW6WzGlMDLAXkQgTwqkciiTcdYWuZ MQBSD+BoqvCW5wEr2U6bhZvSHw3Qo6s= -----END CERTIFICATE-----Generated at Thu Sep 24 01:46:09 2026 by rpki-client