$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa File: cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa (raw, json) Hash identifier: 8hKM6URckT4I1plMzMl4i9u6PxwCHCm5buSnixa0mGM= Subject key identifier: 5B:24:6F:28:A0:20:A1:84:1C:16:67:0D:E9:5E:DB:97:95:6F:76:71 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584F4973434D2D90AD37AF3DF900 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21581 IP address blocks: 108.161.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:43:4d:2d:90:ad:37:af:3d:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6748e816-d492-415e-ac8e-92205cea5e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:16:24:4c:cf:bb:c9:24:2d:f0:94:b4:38: cc:0a:e5:3e:4d:e9:09:81:43:77:6f:68:aa:8f:6b: 1b:bb:87:3c:ce:0f:5b:dc:ce:d1:16:1b:e7:e6:3a: 73:bc:50:f6:36:58:3e:d3:46:36:60:f6:3d:57:82: 46:68:01:dc:f1:21:a1:6e:32:41:23:59:4e:39:ff: 54:71:2b:c3:52:f4:aa:27:5d:d3:8e:75:aa:6e:13: 61:b9:b2:4e:43:cf:cb:08:15:8b:32:ae:25:5d:9d: db:37:98:8a:53:ee:cb:41:d3:86:14:bc:ba:4d:0c: bc:c9:e9:c7:4f:93:1c:c2:06:e2:86:e1:87:0a:65: 6e:50:b8:80:12:32:11:db:02:5e:1e:23:41:d6:d1: 9a:de:30:36:b1:98:4b:be:f8:e4:fe:49:94:84:4d: e7:d1:04:a9:35:bd:af:e9:d6:50:10:1c:e7:ac:9d: 78:d0:dc:d4:9f:3f:f4:5a:45:61:08:52:d2:fa:2c: c8:a7:9b:b1:ad:8e:f5:ca:09:8d:29:af:56:8f:f9: 06:14:d8:b9:81:7d:ad:be:c2:bc:4d:1e:81:b2:96: 3a:57:eb:2d:b2:a9:a5:a7:e0:ec:c3:a0:e9:6b:55: 9b:bd:34:2b:a4:46:5d:e9:f9:69:77:79:88:29:96: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:24:6F:28:A0:20:A1:84:1C:16:67:0D:E9:5E:DB:97:95:6F:76:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:90:cc:f3:b3:6d:ab:ee:1c:fd:dd:77:27:8b:bc:61:41:c3: 6a:13:6e:de:8c:c5:ef:c5:3f:6c:07:4c:79:18:89:36:d3:26: eb:d0:c3:6f:99:39:45:53:8e:a3:f4:c8:bb:65:ac:30:da:8b: 1b:6e:ea:e1:68:9d:40:38:c7:52:05:c6:f4:3f:51:98:b2:61: 79:2e:d8:db:04:fa:c4:66:02:ec:df:87:a5:b6:2b:b9:5b:87: 06:fe:73:df:b2:07:97:25:c7:41:50:8b:8e:6d:ce:b9:6e:52: 2e:a5:da:8e:25:70:fc:5c:71:6c:e9:91:3a:e4:b6:fe:1a:fc: eb:2b:5a:e6:7a:74:47:ba:fa:30:30:10:0c:32:02:ad:95:04: ff:f9:6a:fa:f5:52:57:91:79:53:2f:13:38:f2:95:cc:23:f8: c0:11:d5:31:cf:ba:60:a0:56:f6:ba:81:44:92:3f:00:09:01: a4:e5:ed:ef:32:49:22:6c:a1:0c:95:47:30:d0:b4:18:e7:91: c8:ca:20:e7:b2:94:3b:10:84:30:71:fc:29:a8:2a:b1:1a:13: 71:30:c2:c4:e9:fa:62:85:84:cc:2d:11:dd:d1:d5:48:37:f5: 06:16:01:58:bc:ab:bc:40:68:99:01:2d:5c:cb:55:cb:68:f2: 45:4c:9a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0NNLZCtN689+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Njc0OGU4MTYtZDQ5Mi00MTVlLWFjOGUtOTIyMDVjZWE1ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPsWJEzPu8kkLfCUtDjMCuU+TekJgUN3b2iq j2sbu4c8zg9b3M7RFhvn5jpzvFD2Nlg+00Y2YPY9V4JGaAHc8SGhbjJBI1lOOf9U cSvDUvSqJ13TjnWqbhNhubJOQ8/LCBWLMq4lXZ3bN5iKU+7LQdOGFLy6TQy8yenH T5McwgbihuGHCmVuULiAEjIR2wJeHiNB1tGa3jA2sZhLvvjk/kmUhE3n0QSpNb2v 6dZQEBznrJ140NzUnz/0WkVhCFLS+izIp5uxrY71ygmNKa9Wj/kGFNi5gX2tvsK8 TR6BspY6V+stsqmlp+Dsw6Dpa1WbvTQrpEZd6flpd3mIKZZSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFskbyigIKGEHBZnDele25eVb3ZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvY2YxMmU2NTgtOWRkNS0z OWYyLWJmNzAtYzBhNDgzNzVkOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiQzPOzbavuHP3ddyeLvGFBw2oTbt6Mxe/FP2wHTHkYiTbTJuvQw2+Z OUVTjqP0yLtlrDDaixtu6uFonUA4x1IFxvQ/UZiyYXku2NsE+sRmAuzfh6W2K7lb hwb+c9+yB5clx0FQi45tzrluUi6l2o4lcPxccWzpkTrktv4a/OsrWuZ6dEe6+jAw EAwyAq2VBP/5avr1UleReVMvEzjylcwj+MAR1THPumCgVva6gUSSPwAJAaTl7e8y SSJsoQyVRzDQtBjnkcjKIOeylDsQhDBx/CmoKrEaE3EwwsTp+mKFhMwtEd3R1Ug3 9QYWAVi8q7xAaJkBLVzLVcto8kVMmmk= -----END CERTIFICATE-----Generated at Sun Sep 27 17:14:08 2026 by rpki-client