$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa File: 33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa (raw, json) Hash identifier: RcEh3QlFjoFcNx8gv3nouAKihO1WWMc9o3TJGAE3K/4= Subject key identifier: 58:E4:55:D8:4A:5E:DF:73:BC:B9:08:16:2E:E3:AF:3B:82:79:53:BF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629308A2231A2FFC61E964D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 108.177.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:08:a2:23:1a:2f:fc:61:e9:64:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=484d2c24-dcab-455d-a5e4-af4b9273c211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:37:d5:ec:f3:ba:03:92:3e:f4:27:3c:09: 1d:aa:9b:6f:ae:08:d3:4c:df:3e:b5:77:d1:87:36: 55:3d:98:db:ac:53:ba:b6:bb:77:96:74:83:27:fe: 8e:95:d8:70:40:bb:58:6d:49:dd:54:a6:a4:f3:0a: 2b:ee:38:b2:22:85:d4:9c:fa:1c:80:19:fc:83:f1: ba:02:74:47:2e:3e:ce:1a:9f:27:09:e1:7c:63:3e: 6c:3b:4e:0f:30:83:e2:9a:0b:d9:1d:7a:22:be:95: 49:84:ee:17:a1:af:0a:c0:86:f6:f8:d5:86:ee:df: dd:3e:15:4a:d7:d1:a6:8e:4d:61:c0:68:34:dc:c0: 97:a3:22:7b:49:ac:de:89:b2:71:d8:05:40:a1:ef: 22:56:5a:89:6d:e8:9c:0f:05:21:36:58:76:7a:0e: b1:8a:96:33:2d:c7:69:45:0b:d6:70:30:41:bd:99: dd:99:3e:13:93:4b:b9:88:e3:36:a1:2f:ce:a5:0a: 2d:80:f5:1a:13:6b:2f:01:ab:58:a7:56:72:7f:6d: 9f:de:3c:31:8a:b5:0d:66:37:92:4e:24:7c:1b:f9: 8c:63:3b:96:db:33:69:e2:4d:63:3b:29:8c:46:d2: be:62:22:72:d4:8e:79:e5:b2:56:d6:a9:03:5a:bb: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E4:55:D8:4A:5E:DF:73:BC:B9:08:16:2E:E3:AF:3B:82:79:53:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d7:c7:07:7f:b4:f7:06:2e:76:bf:7f:e7:5a:91:c4:64:92: ec:45:e4:a0:72:2d:d8:28:27:a4:4f:05:de:38:34:e5:27:b1: 59:ce:8c:9f:fe:c9:96:72:7f:c4:6e:69:44:de:e2:6e:96:17: 66:60:75:03:6b:c5:73:ad:16:5e:19:33:29:ea:46:5d:df:53: cf:2f:91:b3:2f:7f:04:cf:be:b2:b1:0c:4b:90:96:96:86:c4: 8c:d3:cb:df:0a:67:4e:04:91:cb:9f:65:e4:9a:1c:3c:a6:2e: c5:02:cc:1f:26:b9:97:66:f5:3a:4f:a5:55:df:62:29:55:68: 3b:3c:43:b5:39:8e:9c:c3:d5:1e:a6:b3:8b:35:59:5a:d1:08: 46:12:99:97:ee:4e:6c:3a:3e:f9:70:4f:20:92:3e:ba:70:1b: 03:18:9f:6c:40:79:65:c4:5e:b6:c0:c2:da:a2:57:44:45:45: 00:15:78:fd:c0:1a:98:d9:4d:36:f6:db:6a:32:aa:a9:e8:1f: 73:3f:37:a9:2e:1c:88:c1:72:36:65:f9:9b:48:e4:74:07:54: c8:62:8a:d4:92:a2:07:13:2e:9d:ae:c6:82:48:46:80:8f:3b: f9:42:c0:7c:88:b9:4d:12:eb:a2:a4:dd:31:2a:66:d9:af:ad: 48:67:af:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwiiIxov/GHpZNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NDg0ZDJjMjQtZGNhYi00NTVkLWE1ZTQtYWY0YjkyNzNjMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5I31ezzugOSPvQnPAkdqptvrgjTTN8+tXfR hzZVPZjbrFO6trt3lnSDJ/6OldhwQLtYbUndVKak8wor7jiyIoXUnPocgBn8g/G6 AnRHLj7OGp8nCeF8Yz5sO04PMIPimgvZHXoivpVJhO4Xoa8KwIb2+NWG7t/dPhVK 19Gmjk1hwGg03MCXoyJ7SazeibJx2AVAoe8iVlqJbeicDwUhNlh2eg6xipYzLcdp RQvWcDBBvZndmT4Tk0u5iOM2oS/OpQotgPUaE2svAatYp1Zyf22f3jwxirUNZjeS TiR8G/mMYzuW2zNp4k1jOymMRtK+YiJy1I555bJW1qkDWrviswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjkVdhKXt9zvLkIFi7jrzuCeVO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzNmNThhODctODFmNi0z ZTVhLThmZGQtMDA5N2VjMTk2ZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLXxwd/tPcGLna/f+dakcRkkuxF5KByLdgoJ6RPBd44NOUnsVnOjJ/+ yZZyf8RuaUTe4m6WF2ZgdQNrxXOtFl4ZMynqRl3fU88vkbMvfwTPvrKxDEuQlpaG xIzTy98KZ04EkcufZeSaHDymLsUCzB8muZdm9TpPpVXfYilVaDs8Q7U5jpzD1R6m s4s1WVrRCEYSmZfuTmw6PvlwTyCSPrpwGwMYn2xAeWXEXrbAwtqiV0RFRQAVeP3A GpjZTTb222oyqqnoH3M/N6kuHIjBcjZl+ZtI5HQHVMhiitSSogcTLp2uxoJIRoCP O/lCwHyIuU0S66Kk3TEqZtmvrUhnr2M= -----END CERTIFICATE-----Generated at Sun Nov 15 12:20:58 2026 by rpki-client