$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa File: cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa (raw, json) Hash identifier: tG5phZ4vve1v1db1tIE6nHmKiL2j0D2oYbhyRfZKBTs= Subject key identifier: 2D:8B:DE:A4:70:D7:94:96:05:C6:CC:9B:22:C9:E7:45:F8:44:19:9A Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584D19B4A0B92124D44EF9E3AF00 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 21581 IP address blocks: 108.161.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a0:b9:21:24:d4:4e:f9:e3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f32881f6-696e-4b1f-94b5-6afc9bf6382b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:10:5e:de:51:77:32:00:7c:12:be:c1:50: f1:ad:84:60:6c:eb:bf:2c:97:43:5a:d3:b2:1e:06: fa:c0:a6:3f:a5:22:ea:7b:92:52:fa:66:22:2b:22: a6:d7:d4:5e:a5:da:7c:95:37:70:70:2f:92:23:db: bb:d8:58:97:36:cd:0c:8c:29:c9:91:03:0a:98:93: 79:c1:09:44:b3:2d:59:17:96:f4:04:69:4a:3e:6b: 6e:fa:3d:cd:80:c7:b8:42:25:b1:e8:50:a7:80:ba: c9:1e:17:26:d0:69:7a:79:6e:2d:55:5e:f4:56:20: b0:61:57:a8:98:56:9d:32:92:cd:7a:99:d2:11:14: 64:5f:de:c9:fc:01:f0:31:2b:3b:12:0d:8c:c7:c0: 4f:2b:f1:c5:09:5a:c0:6e:c8:fc:f3:8a:c5:74:e1: df:d8:c7:9d:d9:ba:3a:87:d1:6f:f7:01:18:9a:af: 6d:67:30:b8:1a:04:d0:34:83:49:fa:da:53:4d:7f: d9:19:f7:92:c0:7b:4f:ca:c4:2b:70:96:5f:ab:33: d3:ff:6d:63:d1:96:59:f0:1f:d9:a7:ac:b6:d0:64: 9d:b3:3b:36:e8:8c:44:f7:c3:d4:3b:59:ee:ef:76: 57:d8:05:b4:00:b0:56:3f:21:9b:5f:e8:06:f0:2b: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:DE:A4:70:D7:94:96:05:C6:CC:9B:22:C9:E7:45:F8:44:19:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7d:3f:27:af:2f:de:66:50:a0:69:40:cf:82:9a:36:c3:59: 05:22:ee:53:d0:e8:66:80:e5:97:13:5c:a2:01:4a:46:5c:20: db:58:48:67:36:bc:b6:93:5c:6d:58:b7:07:fa:32:88:45:2d: 50:26:70:d9:4a:29:53:8f:f3:4b:49:8f:80:20:10:3a:55:a8: e6:07:92:a1:3d:b8:d8:f8:82:47:fe:4e:76:d5:e4:90:29:12: 89:11:c6:2b:d1:97:39:1b:26:07:1b:a8:b6:e0:19:6c:50:2e: b5:4c:34:20:a9:e2:44:15:50:90:72:53:5e:19:13:32:ac:1f: 0b:bc:e3:15:82:40:92:57:80:66:bf:ae:36:ac:ab:f3:4c:cd: a3:c5:16:d0:21:3f:36:bb:c8:84:03:fb:c7:3e:91:6f:81:61: c8:b1:f0:96:39:ef:08:3d:3c:ae:25:2e:06:2a:a7:53:e1:fd: 25:57:c7:ce:87:92:a4:5d:6c:9f:ad:e0:a8:2d:27:4f:10:ed: 9e:ea:6c:a8:8d:b5:e1:1f:49:c3:a2:11:2c:4b:d2:29:fc:a7: db:c0:19:11:60:39:6a:67:15:7b:e6:79:13:ba:22:71:f0:cf: 08:42:bd:26:3a:f2:67:b8:fa:cd:24:40:5e:26:37:d5:8e:5a: 86:3b:0d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKC5ISTUTvnjrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjMyODgxZjYtNjk2ZS00YjFmLTk0YjUtNmFmYzliZjYzODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCUQXt5RdzIAfBK+wVDxrYRgbOu/LJdDWtOy Hgb6wKY/pSLqe5JS+mYiKyKm19Repdp8lTdwcC+SI9u72FiXNs0MjCnJkQMKmJN5 wQlEsy1ZF5b0BGlKPmtu+j3NgMe4QiWx6FCngLrJHhcm0Gl6eW4tVV70ViCwYVeo mFadMpLNepnSERRkX97J/AHwMSs7Eg2Mx8BPK/HFCVrAbsj884rFdOHf2Med2bo6 h9Fv9wEYmq9tZzC4GgTQNINJ+tpTTX/ZGfeSwHtPysQrcJZfqzPT/21j0ZZZ8B/Z p6y20GSdszs26IxE98PUO1nu73ZX2AW0ALBWPyGbX+gG8Cs2qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2L3qRw15SWBcbMmyLJ50X4RBmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvY2YxMmU2NTgtOWRkNS0z OWYyLWJmNzAtYzBhNDgzNzVkOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH59PyevL95mUKBpQM+CmjbDWQUi7lPQ6GaA5ZcTXKIBSkZcINtYSGc2 vLaTXG1Ytwf6MohFLVAmcNlKKVOP80tJj4AgEDpVqOYHkqE9uNj4gkf+TnbV5JAp EokRxivRlzkbJgcbqLbgGWxQLrVMNCCp4kQVUJByU14ZEzKsHwu84xWCQJJXgGa/ rjasq/NMzaPFFtAhPza7yIQD+8c+kW+BYcix8JY57wg9PK4lLgYqp1Ph/SVXx86H kqRdbJ+t4KgtJ08Q7Z7qbKiNteEfScOiESxL0in8p9vAGRFgOWpnFXvmeRO6InHw zwhCvSY68me4+s0kQF4mN9WOWoY7DVw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:56:33 2026 by rpki-client