$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa File: 2671e19e-be91-3e20-b41a-4a59d6d80866.roa (raw, json) Hash identifier: pP9O3gA5Y0iIca0oouTcE1pxcYYY5dBLk6dzoke4lgk= Subject key identifier: D5:A1:6D:B3:A7:15:96:E3:12:CE:1F:F5:AE:2B:BE:34:E2:7E:7F:E9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD32B1488330D1068EE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 108.177.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d3:2b:14:88:33:0d:10:68:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a00325e9-4901-444b-b73a-b9c16daf64b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:39:05:67:63:3b:a0:5f:7b:b1:02:a1:ce: 86:87:0f:7b:2d:35:d5:b2:6e:53:ed:72:0b:ba:0c: 6a:8d:a4:b5:3c:8c:f7:9f:10:59:57:ac:d2:7e:8f: d9:bf:54:87:13:ad:ba:5e:2c:26:37:94:8c:f7:77: b1:6d:aa:10:8e:5f:7e:de:99:8a:81:83:73:b6:62: bf:47:86:91:1e:24:33:19:e5:09:21:ac:8a:a1:24: 3c:19:a7:c7:f8:71:82:ba:e5:4e:fb:3f:29:14:0a: e7:7d:00:a1:08:d2:48:f1:96:74:30:59:10:db:d6: e3:dc:02:bb:8e:45:63:01:98:5b:7b:1a:df:5e:95: 89:61:c5:c9:77:10:1e:6b:dd:f0:6f:51:e5:23:85: 53:8b:7f:87:98:e6:55:aa:e3:84:0f:53:bc:8f:14: f4:c5:42:c7:f2:77:87:74:f3:39:54:44:e5:d6:5c: 9b:da:dd:ff:c9:49:b0:77:a3:70:f2:36:9e:75:31: bc:23:3d:73:f9:49:d2:41:31:ba:48:75:1f:03:90: cd:be:32:23:b9:8c:3e:8f:c8:5b:85:c5:39:4a:fd: 5b:38:ed:4c:0c:ad:d8:da:5a:ff:c9:79:b4:57:08: 1c:81:cc:97:d8:0b:9a:38:60:6a:b6:d1:6a:f1:5a: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A1:6D:B3:A7:15:96:E3:12:CE:1F:F5:AE:2B:BE:34:E2:7E:7F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2671e19e-be91-3e20-b41a-4a59d6d80866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:37:9f:23:4b:8b:1e:b4:b8:29:43:97:ff:4d:94:99:a8:b5: 4d:89:78:d0:c0:f4:33:34:65:2d:ce:7a:c3:86:ed:ed:c0:0d: 2c:79:cb:39:85:02:12:93:bd:2b:16:c1:e7:11:9d:13:02:ab: e8:ce:76:48:2c:fd:9a:42:48:73:3a:81:2b:e0:ef:c2:1e:23: a8:89:fd:8e:83:a1:88:f5:1a:00:0e:1c:c3:64:98:a0:4b:71: 3f:3a:09:84:56:d0:03:f8:b8:f8:a6:97:8b:ea:f4:f5:e5:42: 95:94:61:81:8f:89:8e:b2:de:40:8d:fc:77:d8:1b:82:93:cd: 0d:7e:69:8d:f0:d3:fb:d9:f8:91:9f:7a:4d:d4:60:2b:fe:9d: f7:a8:b4:7d:8c:ed:94:53:e2:e1:17:42:5b:87:39:91:54:65: 81:ea:fd:5f:53:6b:33:3e:9d:86:1b:34:f6:46:a8:d6:83:b2: 76:17:ba:43:dd:50:28:0f:ab:9d:f5:ad:b4:7f:ef:e1:f5:7d: 5f:20:5f:fb:91:62:ac:74:71:07:d9:23:d8:a7:88:59:ce:e2: 92:a9:82:3a:be:b5:59:c1:2c:1c:a1:40:ac:32:b9:2e:be:c8: ce:aa:cb:26:0b:b1:50:2c:a1:b4:80:b7:59:41:d7:cd:6a:16: 49:02:28:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9MrFIgzDRBo7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTAwMzI1ZTktNDkwMS00NDRiLWI3M2EtYjljMTZkYWY2NGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMo5BWdjO6Bfe7ECoc6Ghw97LTXVsm5T7XIL ugxqjaS1PIz3nxBZV6zSfo/Zv1SHE626XiwmN5SM93exbaoQjl9+3pmKgYNztmK/ R4aRHiQzGeUJIayKoSQ8GafH+HGCuuVO+z8pFArnfQChCNJI8ZZ0MFkQ29bj3AK7 jkVjAZhbexrfXpWJYcXJdxAea93wb1HlI4VTi3+HmOZVquOED1O8jxT0xULH8neH dPM5VETl1lyb2t3/yUmwd6Nw8jaedTG8Iz1z+UnSQTG6SHUfA5DNvjIjuYw+j8hb hcU5Sv1bOO1MDK3Y2lr/yXm0VwgcgcyX2AuaOGBqttFq8VpPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWhbbOnFZbjEs4f9a4rvjTifn/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjY3MWUxOWUtYmU5MS0z ZTIwLWI0MWEtNGE1OWQ2ZDgwODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC43nyNLix60uClDl/9NlJmotU2JeNDA9DM0ZS3OesOG7e3ADSx5yzmF AhKTvSsWwecRnRMCq+jOdkgs/ZpCSHM6gSvg78IeI6iJ/Y6DoYj1GgAOHMNkmKBL cT86CYRW0AP4uPiml4vq9PXlQpWUYYGPiY6y3kCN/HfYG4KTzQ1+aY3w0/vZ+JGf ek3UYCv+nfeotH2M7ZRT4uEXQluHOZFUZYHq/V9TazM+nYYbNPZGqNaDsnYXukPd UCgPq531rbR/7+H1fV8gX/uRYqx0cQfZI9iniFnO4pKpgjq+tVnBLByhQKwyuS6+ yM6qyyYLsVAsobSAt1lB181qFkkCKIE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:05 2026 by rpki-client