$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa File: 9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa (raw, json) Hash identifier: G2xw+9rTP0j98J4/j4DMajxp439T0eXHtsOmcpycyjY= Subject key identifier: A9:58:69:D6:A6:4B:B3:54:B5:9A:F1:7B:74:03:14:CB:DB:51:D8:56 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584D19B4D5A5DE372395185F2100 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 21581 IP address blocks: 108.161.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d5:a5:de:37:23:95:18:5f:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=88a2d95b-20fc-44a7-8ce8-5aafae3da658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:e6:32:f5:a9:d3:5d:a7:6d:9a:9f:bd:c3: be:f6:1f:b0:66:bf:2e:f1:9d:81:33:8d:b8:ae:4e: 5c:c8:84:9b:ad:a3:2d:40:e0:c7:66:6f:94:6c:c2: 56:05:31:2f:db:e0:41:ee:68:2c:38:64:6e:d7:c2: be:75:27:b9:6a:31:5d:7d:ef:43:0d:54:42:03:45: af:05:e2:f5:5b:f2:c7:37:37:30:35:40:2c:00:d3: 67:af:d4:de:24:7a:27:86:ab:16:50:82:5e:91:8a: 87:0a:7f:cc:e4:d8:21:7c:e7:5d:f8:e2:c7:d7:ad: 52:b8:b2:3a:6c:bd:38:a8:68:8b:84:84:2d:6f:1f: 15:7f:e7:d1:b4:39:25:96:83:b2:12:c3:b2:2a:ad: 72:95:dd:94:02:94:8c:28:44:19:0a:cf:7d:31:12: 51:92:14:98:e8:0c:8a:f5:0a:0a:03:49:97:cd:61: 03:01:e8:c7:6b:fe:51:eb:cf:a1:61:af:44:b6:d2: d0:ad:8c:5c:bc:db:ea:06:9c:47:f5:df:ac:77:d1: 2e:39:2e:f7:59:4e:ba:c5:95:03:4f:fb:39:da:93: 82:14:0f:59:2c:f6:e9:7c:17:e4:13:a2:f1:96:cd: 8b:bb:73:18:15:e7:5a:5f:29:59:73:75:5c:05:f2: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:69:D6:A6:4B:B3:54:B5:9A:F1:7B:74:03:14:CB:DB:51:D8:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d6:4e:0d:a6:e9:cc:04:88:23:ad:05:ea:64:61:83:d8:ea: de:c5:ba:f1:39:38:8e:32:6f:6b:3d:08:15:55:fc:f0:5f:71: e6:44:76:27:17:4c:16:c1:71:b7:2d:15:2d:7f:74:99:1d:4d: 48:bd:6f:71:94:c7:b9:c3:57:93:27:bc:11:34:19:c7:89:63: ea:70:2a:50:99:85:bb:7b:a2:90:0e:92:49:13:96:ce:88:ff: 4e:08:f5:36:4d:40:b7:e5:99:52:e1:76:1e:d2:f1:b5:cd:f6: e0:0f:5c:f1:09:f4:09:a5:6e:67:12:7e:55:6e:13:70:86:b4: 89:83:36:fb:00:25:0b:03:22:e0:c2:fb:cc:7f:17:67:01:24: fd:63:c4:d7:61:8a:6d:79:ae:ca:1b:fe:8f:1e:9e:e8:1f:4c: c3:4a:a9:d6:51:32:2c:bd:3d:1e:9a:3e:b6:d9:12:0b:53:3b: 82:42:1a:5a:a5:35:18:6a:c6:cd:50:e2:ab:36:9a:12:ab:09: 06:c7:2a:ac:eb:f4:13:7c:e6:5b:99:45:dd:4d:c0:e3:70:2c: 88:1c:a7:44:b8:5c:4f:af:18:fe:78:29:29:96:9b:d1:14:87: 2b:10:b9:3d:e2:50:f1:20:f2:9b:a3:d9:32:60:3b:64:e2:e9: fa:31:db:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNWl3jcjlRhfIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ODhhMmQ5NWItMjBmYy00NGE3LThjZTgtNWFhZmFlM2RhNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCTmMvWp012nbZqfvcO+9h+wZr8u8Z2BM424 rk5cyISbraMtQODHZm+UbMJWBTEv2+BB7mgsOGRu18K+dSe5ajFdfe9DDVRCA0Wv BeL1W/LHNzcwNUAsANNnr9TeJHonhqsWUIJekYqHCn/M5NghfOdd+OLH161SuLI6 bL04qGiLhIQtbx8Vf+fRtDklloOyEsOyKq1yld2UApSMKEQZCs99MRJRkhSY6AyK 9QoKA0mXzWEDAejHa/5R68+hYa9EttLQrYxcvNvqBpxH9d+sd9EuOS73WU66xZUD T/s52pOCFA9ZLPbpfBfkE6Lxls2Lu3MYFedaXylZc3VcBfIcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlYadamS7NUtZrxe3QDFMvbUdhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvOWU0MWUzYzYtNGIwMS0z NzZkLWJjOGMtOGQ2ZjU5MTg0NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXWTg2m6cwEiCOtBepkYYPY6t7FuvE5OI4yb2s9CBVV/PBfceZEdicX TBbBcbctFS1/dJkdTUi9b3GUx7nDV5MnvBE0GceJY+pwKlCZhbt7opAOkkkTls6I /04I9TZNQLflmVLhdh7S8bXN9uAPXPEJ9AmlbmcSflVuE3CGtImDNvsAJQsDIuDC +8x/F2cBJP1jxNdhim15rsob/o8enugfTMNKqdZRMiy9PR6aPrbZEgtTO4JCGlql NRhqxs1Q4qs2mhKrCQbHKqzr9BN85luZRd1NwONwLIgcp0S4XE+vGP54KSmWm9EU hysQuT3iUPEg8puj2TJgO2Ti6fox29c= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:00 2026 by rpki-client