$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa File: aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa (raw, json) Hash identifier: jVfAT0FPX5FHtKttnOw2wjCrOu/8mn8DKiW/AnWhFm0= Subject key identifier: F2:B8:B9:43:4B:6C:73:1A:F6:A1:BF:F1:B9:49:F3:6D:D8:21:B0:0D Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584D19B4D7249B4DF80D8C5EA080 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 21581 IP address blocks: 108.161.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d7:24:9b:4d:f8:0d:8c:5e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=77d4f4cc-b191-4dd8-9d18-503d5e160cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:84:a5:1d:49:6b:03:34:bb:ed:df:c4:79:23: fe:5a:22:35:18:94:59:20:57:50:55:c4:a1:ed:8d: 81:a2:89:33:85:84:d9:0e:d3:f1:5d:12:05:c7:1d: 15:4e:63:9e:43:41:c0:94:22:4d:4f:26:2d:90:4c: 07:76:6d:d5:2e:00:76:24:7e:6d:61:e3:dd:cb:5b: 0d:0a:f0:82:d2:ca:77:88:e7:d0:34:55:c8:81:00: ce:1b:09:3b:a2:a8:7b:38:3c:cf:0a:70:37:73:8f: d4:f3:64:ff:3d:5f:66:2b:04:f1:0e:cd:48:1c:2c: ea:84:db:1d:71:f9:c9:0e:97:55:1e:b9:57:27:fa: f1:74:ea:86:1f:e6:cc:fa:fa:a9:3b:1e:ca:92:a8: 77:38:62:68:b8:8e:9f:9d:a8:65:0a:76:56:21:f6: de:96:f3:9e:5b:f2:8d:3b:9a:a6:79:7f:76:20:fe: 4b:47:d8:ff:b6:c7:95:6a:75:e7:79:28:4b:fc:67: 2e:69:da:59:db:26:8c:e0:80:87:b5:d6:26:ad:4f: ad:d4:10:76:35:cc:a1:ea:f0:4c:8f:38:94:18:45: 4d:7c:f3:ef:97:3d:d6:f4:ce:a1:76:73:d0:fe:7c: c6:a4:73:df:2d:6c:61:43:13:07:e8:47:b1:40:eb: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:B9:43:4B:6C:73:1A:F6:A1:BF:F1:B9:49:F3:6D:D8:21:B0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3c:80:74:72:11:c5:53:83:ad:92:ed:4e:be:46:f1:77:e6: e7:18:c2:13:3b:e8:8f:b4:38:80:17:c1:2c:17:82:f2:04:38: 86:29:5c:9a:f0:14:c5:98:cf:3e:8f:16:ce:ae:51:9e:fc:ba: 83:43:f3:45:f9:b3:eb:35:de:d5:d2:8b:61:3c:50:4e:81:7c: b1:5f:b1:89:62:95:89:60:3f:14:a5:2b:96:d1:16:7c:6b:4e: 90:bb:bc:39:1a:01:52:3a:76:7f:f0:26:59:70:bd:5c:db:94: 82:84:d9:6b:7b:36:65:7a:d3:11:de:73:82:d1:5b:26:17:1e: a5:b7:af:97:a1:fa:16:c8:e2:64:e5:54:bd:1b:20:a3:79:1d: f5:51:3c:06:a4:4c:ec:fc:3e:14:e4:0d:63:5a:43:e9:3c:1f: 77:ac:fa:36:ed:fd:be:1e:75:f1:db:14:11:41:01:45:33:a4: 19:14:c3:0d:49:73:6a:24:bc:e0:cd:11:c1:a6:40:c8:90:6e: b8:c0:60:12:10:a5:83:bf:85:d6:a3:e9:44:5c:9f:98:6c:9a: 30:5e:eb:4d:de:0f:a2:38:e4:99:fc:5a:c1:f9:23:fd:f9:64: 86:d1:92:9b:24:49:dd:ed:56:29:77:47:72:ec:22:f7:d6:44: fe:5f:f0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNckm034DYxeoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NzdkNGY0Y2MtYjE5MS00ZGQ4LTlkMTgtNTAzZDVlMTYwY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4SlHUlrAzS77d/EeSP+WiI1GJRZIFdQVcSh 7Y2BookzhYTZDtPxXRIFxx0VTmOeQ0HAlCJNTyYtkEwHdm3VLgB2JH5tYePdy1sN CvCC0sp3iOfQNFXIgQDOGwk7oqh7ODzPCnA3c4/U82T/PV9mKwTxDs1IHCzqhNsd cfnJDpdVHrlXJ/rxdOqGH+bM+vqpOx7Kkqh3OGJouI6fnahlCnZWIfbelvOeW/KN O5qmeX92IP5LR9j/tseVanXneShL/GcuadpZ2yaM4ICHtdYmrU+t1BB2Ncyh6vBM jziUGEVNfPPvlz3W9M6hdnPQ/nzGpHPfLWxhQxMH6EexQOtCVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK4uUNLbHMa9qG/8blJ823YIbANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYWVkOTNiZmEtOTY4Mi0z NzdiLWIyYjYtZDczYzFkMDlmMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg8gHRyEcVTg62S7U6+RvF35ucYwhM76I+0OIAXwSwXgvIEOIYpXJrw FMWYzz6PFs6uUZ78uoND80X5s+s13tXSi2E8UE6BfLFfsYlilYlgPxSlK5bRFnxr TpC7vDkaAVI6dn/wJllwvVzblIKE2Wt7NmV60xHec4LRWyYXHqW3r5eh+hbI4mTl VL0bIKN5HfVRPAakTOz8PhTkDWNaQ+k8H3es+jbt/b4edfHbFBFBAUUzpBkUww1J c2okvODNEcGmQMiQbrjAYBIQpYO/hdaj6URcn5hsmjBe603eD6I45Jn8WsH5I/35 ZIbRkpskSd3tVil3R3LsIvfWRP5f8Ew= -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:10 2026 by rpki-client