$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/c1cde13a-59e5-367d-b803-37082be1c6c7.roa File: c1cde13a-59e5-367d-b803-37082be1c6c7.roa (raw, json) Hash identifier: v6wYpvN2J4+1bLeMA8yhjelkyW+0/X79sLNy78H3LiI= Subject key identifier: 6B:43:19:D0:B3:28:09:9D:06:BA:27:FE:A2:42:14:BF:88:81:C6:2B Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584D19B49E7513F209C7BB070900 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/c1cde13a-59e5-367d-b803-37082be1c6c7.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 21581 IP address blocks: 108.161.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9e:75:13:f2:09:c7:bb:07:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=4a15f144-c89a-4bb2-bff1-b932298630a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9f:0a:e9:2f:7e:7c:af:a0:84:c4:8a:91:69: 86:fd:8a:26:f4:59:4a:96:dc:4b:7b:9b:03:d8:6f: 67:a8:1c:a9:8a:70:81:c0:06:27:b5:43:bf:24:4e: 23:38:96:ea:11:68:1b:9e:a8:2d:ad:e1:a4:fc:c7: e5:bb:fe:9e:66:6e:6f:bc:f5:b9:c8:3c:a0:fa:e0: 63:c9:da:ba:f0:5f:9a:d2:ed:86:20:1f:1d:80:52: 63:f7:07:97:a6:e3:08:59:bc:51:a9:79:d9:19:a6: c4:eb:55:63:82:45:51:1a:8d:46:ff:3c:52:5d:53: c8:2e:fd:a8:f4:f9:ab:1c:2e:e6:ba:a6:23:d8:86: 3d:1d:a4:19:dc:1f:9a:d8:8c:19:d6:e1:1e:e8:b6: 70:9b:30:b0:14:f9:2b:36:80:b7:ab:bf:5e:a1:ca: f1:6c:e9:10:8c:24:88:53:63:b1:b0:ca:f4:e5:3c: 50:e0:c0:c7:ce:cd:6f:2c:75:ee:1e:8f:4d:6b:a0: fc:1f:91:5f:7e:cd:ce:28:2d:b2:a2:a7:cc:c1:be: 71:e8:0b:5c:7f:ce:3d:7d:78:9f:89:e3:5c:1e:f8: bf:66:0f:87:06:91:3d:5d:1d:5d:af:a1:ea:67:bb: 42:f5:98:29:91:a2:b4:17:10:ba:90:1b:27:b9:61: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:43:19:D0:B3:28:09:9D:06:BA:27:FE:A2:42:14:BF:88:81:C6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/c1cde13a-59e5-367d-b803-37082be1c6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9d:02:d4:72:f7:f7:33:4a:86:09:bd:e9:6a:36:c5:4a:9f: 27:14:db:3f:eb:d7:13:d0:2b:34:95:94:03:40:b1:d6:b6:b2: 63:4f:f6:99:fb:a8:a1:e8:b2:bf:8a:f0:95:b6:45:c0:09:11: a4:ab:da:90:06:75:6b:0f:0b:38:d7:e7:22:7d:93:2b:1d:e7: ee:ff:11:a8:a7:be:95:13:74:91:a8:33:12:73:1c:77:06:34: d7:22:71:49:30:8d:d1:d6:e5:40:3f:b8:4b:a2:42:e6:c7:2d: 8f:7f:2c:fb:6f:92:e0:8e:18:02:db:3d:de:40:97:19:fc:1f: 84:88:47:9a:2b:ae:d5:33:c9:86:b2:27:8d:c5:9d:8f:43:49: 02:65:ac:92:aa:65:6e:d9:49:35:4e:89:98:50:05:da:08:e8: 21:22:20:fe:a6:4b:b8:fb:29:6d:fd:c5:8b:85:f4:51:9f:5e: 4d:81:7d:5d:42:2d:cb:a7:99:91:44:70:17:5c:ab:58:4d:20: a9:46:30:a9:d7:7d:eb:21:c3:67:a4:c2:4a:fa:63:b1:37:9b: 42:8b:2e:3c:a7:ac:0d:3b:69:19:d1:ce:25:ce:f9:3b:71:02: 22:84:b9:0f:8f:ee:e6:e4:0c:aa:a8:0d:87:a4:fc:71:0c:38: 8e:e4:d8:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJ51E/IJx7sHCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NGExNWYxNDQtYzg5YS00YmIyLWJmZjEtYjkzMjI5ODYzMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ8K6S9+fK+ghMSKkWmG/Yom9FlKltxLe5sD 2G9nqBypinCBwAYntUO/JE4jOJbqEWgbnqgtreGk/Mflu/6eZm5vvPW5yDyg+uBj ydq68F+a0u2GIB8dgFJj9weXpuMIWbxRqXnZGabE61VjgkVRGo1G/zxSXVPILv2o 9PmrHC7muqYj2IY9HaQZ3B+a2IwZ1uEe6LZwmzCwFPkrNoC3q79eocrxbOkQjCSI U2OxsMr05TxQ4MDHzs1vLHXuHo9Na6D8H5Fffs3OKC2yoqfMwb5x6Atcf849fXif ieNcHvi/Zg+HBpE9XR1dr6HqZ7tC9ZgpkaK0FxC6kBsnuWEVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtDGdCzKAmdBron/qJCFL+IgcYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYzFjZGUxM2EtNTllNS0z NjdkLWI4MDMtMzcwODJiZTFjNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCdAtRy9/czSoYJvelqNsVKnycU2z/r1xPQKzSVlANAsda2smNP9pn7 qKHosr+K8JW2RcAJEaSr2pAGdWsPCzjX5yJ9kysd5+7/EainvpUTdJGoMxJzHHcG NNcicUkwjdHW5UA/uEuiQubHLY9/LPtvkuCOGALbPd5Alxn8H4SIR5orrtUzyYay J43FnY9DSQJlrJKqZW7ZSTVOiZhQBdoI6CEiIP6mS7j7KW39xYuF9FGfXk2BfV1C LcunmZFEcBdcq1hNIKlGMKnXfeshw2ekwkr6Y7E3m0KLLjynrA07aRnRziXO+Ttx AiKEuQ+P7ubkDKqoDYek/HEMOI7k2I4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:03 2026 by rpki-client