$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa File: 3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa (raw, json) Hash identifier: aASz/0knN9dug6vBtuPlWNOICrjLthJpLUwhUAaUrWY= Subject key identifier: C2:15:81:FA:E0:72:3F:9F:51:88:8F:BF:CB:4A:EE:C2:33:71:D6:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984DDFC9C7D883F24101040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:dd:fc:9c:7d:88:3f:24:10:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f10960a7-f070-454b-9ec2-e324b93f4f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:e3:f6:ae:1c:ab:75:29:26:c5:cb:e3:1d: 7f:ff:bb:6a:a3:08:c6:72:d4:95:55:03:f3:2a:f2: d8:12:c0:4e:14:d7:ac:87:80:3d:79:25:8d:4b:4a: fd:cc:02:31:9e:34:86:5c:e8:4c:81:14:17:2f:9e: 40:1d:cb:d9:a7:de:64:92:5b:81:13:0a:ae:0d:ff: a7:a6:ac:4b:49:67:7d:fe:36:5c:8e:47:4c:f2:22: 2d:70:b1:cf:7b:1e:19:50:44:ae:75:ac:03:cb:ee: db:ff:db:16:45:da:c2:af:67:02:f1:43:fc:4a:27: 2b:09:c4:d3:30:ac:93:51:5c:ba:c0:5b:b5:3f:fe: 17:e9:3e:a4:b9:44:c7:a3:fa:73:a3:4c:0f:7a:75: 1d:37:fa:43:54:2a:8f:d0:df:6f:96:29:75:8e:40: 7f:9e:80:c6:d9:97:d5:7b:2c:62:8a:ce:66:eb:3e: 38:01:74:2a:4a:70:28:94:6e:d8:76:99:07:96:e8: 07:d2:5f:d4:56:30:9b:6e:87:58:c0:72:85:03:6a: 72:74:84:07:c9:a7:ec:ba:6e:eb:d8:75:a5:36:b4: 7d:ed:44:4d:52:e7:5b:5d:36:08:14:8f:a4:98:10: d4:4e:63:ae:14:7d:b5:7f:03:17:7f:ae:f7:d0:f0: 92:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:15:81:FA:E0:72:3F:9F:51:88:8F:BF:CB:4A:EE:C2:33:71:D6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:95:28:ec:41:0f:8a:1b:7c:d6:13:cd:e5:a6:7f:47:47:3d: 6b:51:e7:89:a3:f3:18:a1:ab:54:71:3e:81:60:e7:8c:b0:7b: e2:e7:3d:d0:38:25:cc:8a:57:59:a9:ef:58:9d:11:d1:93:41: 81:05:aa:b9:7b:2f:f8:ce:38:2e:22:5b:1f:c6:9d:10:b7:a3: 04:55:f4:b9:c9:85:69:80:4c:6a:f6:31:8d:52:a8:60:cd:00: 54:2f:3f:4c:bf:6b:38:4a:d8:38:50:f3:1a:62:3e:78:7d:41: 74:e0:8c:39:5a:ff:e4:d4:e9:1b:44:48:84:de:f0:24:a0:5d: a2:e7:47:5e:11:27:f2:93:fb:dc:27:53:6e:88:69:d2:b9:65: 6b:9e:6b:33:16:c0:46:f2:aa:60:d2:4f:bb:ab:56:1f:d4:44: 2c:43:29:52:2c:06:4a:c4:0c:62:37:08:aa:43:0a:c1:c2:a7: 03:7d:ff:6c:9d:4f:14:3f:d2:3e:fe:cd:2b:a9:75:69:07:f3: f4:48:26:1a:23:82:f2:98:fc:8e:70:c6:67:09:50:65:89:b9: cc:02:d5:0f:6d:3e:88:a8:d9:0b:c3:f5:f6:cd:b0:66:df:c8: 08:9f:22:42:07:a0:43:2b:ad:98:55:17:90:12:d4:27:a7:06: 77:93:4a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhN38nH2IPyQQEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjEwOTYwYTctZjA3MC00NTRiLTllYzItZTMyNGI5M2Y0Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5/j9q4cq3UpJsXL4x1//7tqowjGctSVVQPz KvLYEsBOFNesh4A9eSWNS0r9zAIxnjSGXOhMgRQXL55AHcvZp95kkluBEwquDf+n pqxLSWd9/jZcjkdM8iItcLHPex4ZUESudawDy+7b/9sWRdrCr2cC8UP8SicrCcTT MKyTUVy6wFu1P/4X6T6kuUTHo/pzo0wPenUdN/pDVCqP0N9vlil1jkB/noDG2ZfV eyxiis5m6z44AXQqSnAolG7YdpkHlugH0l/UVjCbbodYwHKFA2pydIQHyafsum7r 2HWlNrR97URNUudbXTYIFI+kmBDUTmOuFH21fwMXf6730PCSOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIVgfrgcj+fUYiPv8tK7sIzcdapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2JiOThiMGUtOTFiZi0z NWE3LWFkODgtZjUzYmExNDEzYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuVKOxBD4obfNYTzeWmf0dHPWtR54mj8xihq1RxPoFg54ywe+LnPdA4 JcyKV1mp71idEdGTQYEFqrl7L/jOOC4iWx/GnRC3owRV9LnJhWmATGr2MY1SqGDN AFQvP0y/azhK2DhQ8xpiPnh9QXTgjDla/+TU6RtESITe8CSgXaLnR14RJ/KT+9wn U26IadK5ZWueazMWwEbyqmDST7urVh/URCxDKVIsBkrEDGI3CKpDCsHCpwN9/2yd TxQ/0j7+zSupdWkH8/RIJhojgvKY/I5wxmcJUGWJucwC1Q9tPoio2QvD9fbNsGbf yAifIkIHoEMrrZhVF5AS1CenBneTSug= -----END CERTIFICATE-----Generated at Fri Sep 25 23:44:25 2026 by rpki-client