$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa File: 97424350-496c-3039-8021-28cda3631346.roa (raw, json) Hash identifier: 3LtjtsOwQub4PqVIcMvPwxM1y3QSVTMl9bf2x1fDRgM= Subject key identifier: C4:F3:DD:55:4D:E0:02:0B:06:60:EA:47:22:07:0D:E6:51:C5:AF:2E Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584F4974DA11EDC8BD2CC7E55700 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21581 IP address blocks: 108.161.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:da:11:ed:c8:bd:2c:c7:e5:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e982d324-4cbb-43d1-8c78-af8de58d5f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:8f:ac:ea:20:cd:68:7c:e1:8d:1b:52:aa: a2:04:bd:37:15:c7:c8:3a:53:8b:3a:02:23:5d:bf: 67:4e:b3:26:bd:7a:f6:95:ac:03:f4:9a:47:a2:e7: 14:6f:94:98:f4:c2:e6:f9:ca:c7:d6:6a:10:c1:90: eb:24:11:b5:34:29:c3:52:55:20:e8:d7:02:cd:cf: f5:f3:f4:36:0a:46:33:e1:fb:7c:13:a3:ed:ec:99: fa:6a:a6:c1:5f:a0:cf:2f:cc:6d:64:92:bb:88:ad: 00:da:0a:9e:fb:94:32:ff:a3:63:56:b4:70:bf:77: b9:37:49:55:5f:45:39:f7:7d:c6:fc:b0:85:3f:1d: 1d:7e:c2:c5:28:f3:46:e4:ab:bd:2c:53:44:dd:eb: 86:7a:4f:c5:ec:67:66:87:32:ba:65:2f:1b:9d:cf: b9:98:22:51:f0:cc:ae:7f:cf:26:83:a9:02:b6:5f: 17:a8:1c:c2:ce:65:10:5a:13:b3:dd:61:f9:6c:e1: 45:e2:7c:18:a3:fe:f5:0a:ae:2a:8d:b7:66:e1:b9: 5d:81:3e:c8:97:4e:1e:00:73:f9:f0:a2:e5:f1:dd: d7:d9:76:ef:87:7d:64:c6:0f:09:4f:5f:1f:70:94: d1:02:25:ff:34:10:44:27:3a:67:e4:b1:17:59:df: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F3:DD:55:4D:E0:02:0B:06:60:EA:47:22:07:0D:E6:51:C5:AF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d1:0f:09:3b:74:22:89:d2:9f:d8:31:b1:52:3e:9c:7e:21: ba:8b:94:46:51:b8:3d:bf:4d:31:d6:ca:e4:90:8a:c8:e8:a3: c6:12:ba:c3:67:50:8a:ca:19:d2:a9:fc:70:99:84:d8:c8:92: 8f:98:dc:47:38:7d:16:f5:ae:1a:3c:5d:0c:23:b0:bd:f3:a8: a8:88:6e:75:38:85:4c:26:ca:c2:f3:b2:64:7e:a2:e9:85:1d: f0:a4:28:bf:3f:4c:32:63:13:fe:ca:aa:95:60:57:0c:6d:aa: 0e:56:7f:6d:e3:13:a1:3d:c5:41:05:80:30:31:79:d4:ce:07: 48:02:1c:98:71:37:34:ad:b7:ff:73:a5:cd:16:38:92:15:55: f7:6f:f1:06:a6:b3:0d:d2:3d:9e:05:2e:79:91:bc:3c:01:07: ec:95:d0:71:e2:c0:cc:3b:dd:2d:c9:94:0d:fa:7a:e1:03:2e: 6c:b6:a0:90:2f:a1:26:4d:dd:c2:57:be:df:be:c5:a6:9f:df: a8:c6:f4:7f:38:ae:7b:d3:53:c3:bb:18:03:de:4a:83:1b:be: 7b:22:ca:44:db:d2:0b:30:58:e4:c9:fe:ce:16:11:8e:e0:72: ef:a4:ae:eb:3d:50:f1:af:ae:28:cf:a7:d8:84:56:ef:e6:f9: 32:4b:d0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNoR7ci9LMflVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTk4MmQzMjQtNGNiYi00M2QxLThjNzgtYWY4ZGU1OGQ1Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMePrOogzWh84Y0bUqqiBL03FcfIOlOLOgIj Xb9nTrMmvXr2lawD9JpHoucUb5SY9MLm+crH1moQwZDrJBG1NCnDUlUg6NcCzc/1 8/Q2CkYz4ft8E6Pt7Jn6aqbBX6DPL8xtZJK7iK0A2gqe+5Qy/6NjVrRwv3e5N0lV X0U5933G/LCFPx0dfsLFKPNG5Ku9LFNE3euGek/F7GdmhzK6ZS8bnc+5mCJR8Myu f88mg6kCtl8XqBzCzmUQWhOz3WH5bOFF4nwYo/71Cq4qjbdm4bldgT7Il04eAHP5 8KLl8d3X2Xbvh31kxg8JT18fcJTRAiX/NBBEJzpn5LEXWd8kyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTz3VVN4AILBmDqRyIHDeZRxa8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvOTc0MjQzNTAtNDk2Yy0z MDM5LTgwMjEtMjhjZGEzNjMxMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7RDwk7dCKJ0p/YMbFSPpx+IbqLlEZRuD2/TTHWyuSQisjoo8YSusNn UIrKGdKp/HCZhNjIko+Y3Ec4fRb1rho8XQwjsL3zqKiIbnU4hUwmysLzsmR+oumF HfCkKL8/TDJjE/7KqpVgVwxtqg5Wf23jE6E9xUEFgDAxedTOB0gCHJhxNzStt/9z pc0WOJIVVfdv8Qamsw3SPZ4FLnmRvDwBB+yV0HHiwMw73S3JlA36euEDLmy2oJAv oSZN3cJXvt++xaaf36jG9H84rnvTU8O7GAPeSoMbvnsiykTb0gswWOTJ/s4WEY7g cu+krus9UPGvrijPp9iEVu/m+TJL0D0= -----END CERTIFICATE-----Generated at Fri Sep 25 19:37:50 2026 by rpki-client