$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4624e650-1c06-3565-b5b5-8e37660cd5f3.roa File: 4624e650-1c06-3565-b5b5-8e37660cd5f3.roa (raw, json) Hash identifier: Lcqmw+1vosdRVn3ah2ndo6/DYViWKh+avCmdzoVnOG8= Subject key identifier: A8:E8:91:EA:57:59:8E:0B:D9:3D:DC:25:18:21:9A:47:4A:39:DB:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCF9157319C633CD1C9D26180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4624e650-1c06-3565-b5b5-8e37660cd5f3.roa Signing time: Thu 12 Nov 2026 02:00:12 +0000 ROA not before: Thu 12 Nov 2026 02:00:12 +0000 ROA not after: Wed 10 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 108.177.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cf:91:57:31:9c:63:3c:d1:c9:d2:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 12 02:00:12 2026 GMT Not After : Feb 10 02:00:12 2027 GMT Subject: CN=78a5a90d-e559-4322-aad9-db2dbbfb666e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:91:8a:e2:7c:9d:e7:b3:25:e2:5e:2a:c8:88: e0:c0:46:38:43:41:87:d3:fb:7d:f2:37:f4:7e:f7: e1:7b:ff:48:b6:59:78:70:fb:ac:4d:43:17:fd:7a: 13:9d:59:97:ce:cf:e4:b5:0f:ae:a4:df:1b:21:01: c1:78:bf:d8:26:90:6e:97:c9:fb:60:84:0e:0d:97: 23:3e:7b:e0:bf:7e:4b:fd:19:f9:91:59:af:a4:67: 8a:1a:a7:d1:6c:23:f6:04:c4:da:d9:5a:d7:24:7e: 6a:eb:a4:b4:07:ac:88:d9:7a:b8:6d:a1:c7:5b:22: 23:5a:ea:2e:04:9c:73:b3:91:dc:76:8c:ae:b2:98: 9b:c8:1c:5c:05:d3:37:91:19:51:56:b7:fc:2f:96: c0:4b:2f:4f:b7:a7:ea:35:60:6e:d3:2f:ff:7e:d9: f2:db:ca:5e:7c:b6:1e:7a:d3:2b:f1:e4:f3:c4:e7: 93:4e:43:0c:19:bb:a2:6f:f7:53:5c:b6:0e:2d:21: e2:cd:85:1e:89:9b:15:d6:a9:51:0f:ba:e3:b3:2c: 78:88:05:2f:7b:bb:27:23:ac:b5:45:ce:98:b3:80: 0c:b1:44:72:64:f4:80:38:c5:db:c3:d7:18:bb:78: 43:57:5b:d9:20:20:dd:2c:cd:bc:d5:ac:13:fc:a0: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E8:91:EA:57:59:8E:0B:D9:3D:DC:25:18:21:9A:47:4A:39:DB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4624e650-1c06-3565-b5b5-8e37660cd5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0f:d9:44:c5:53:60:b2:b9:b4:f6:39:e3:eb:2b:d7:86:d4: 10:f9:98:d6:a4:09:c7:50:d9:1a:72:31:ec:9e:f7:b3:bf:05: fa:9b:75:3d:31:01:2c:ae:0a:4e:5b:65:2f:b4:19:1b:02:ba: 3c:b5:e7:8b:e2:c8:ee:0e:62:b2:a0:3f:01:6c:37:01:7a:9b: fe:40:54:95:47:1a:d1:90:c9:58:cc:db:62:04:51:8d:b4:71: 3d:4f:05:23:49:d7:32:37:9d:fe:56:89:68:9d:ba:2a:50:6d: bd:26:ab:8f:8d:1d:ee:d1:54:45:55:80:59:93:c5:54:52:2a: 2c:1b:8b:f9:32:f4:4c:8b:90:2f:f7:83:0f:52:37:d1:dd:8f: 1d:c4:9d:fd:e6:79:a7:f2:7d:87:a7:66:e6:a3:33:ee:a9:0e: d5:39:8a:29:9e:83:5d:a2:5d:d1:98:12:ae:6a:1a:ec:1a:ac: 1c:02:15:1f:86:e8:80:5f:dc:c6:91:ab:5f:9a:54:6a:c3:94: d3:2e:a2:a9:c3:18:cc:46:33:8c:45:30:0e:a4:72:48:23:87: fa:8f:ec:65:48:70:21:f3:6d:56:c3:c8:d1:2a:c9:07:6e:cf: 28:d1:c0:d3:5c:bc:fc:5d:ab:74:04:a9:4d:a2:91:d0:38:8f: c3:78:a4:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/PkVcxnGM80cnSYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMjAyMDAxMloXDTI3MDIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NzhhNWE5MGQtZTU1OS00MzIyLWFhZDktZGIyZGJiZmI2NjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJGK4nyd57Ml4l4qyIjgwEY4Q0GH0/t98jf0 fvfhe/9Itll4cPusTUMX/XoTnVmXzs/ktQ+upN8bIQHBeL/YJpBul8n7YIQODZcj Pnvgv35L/Rn5kVmvpGeKGqfRbCP2BMTa2VrXJH5q66S0B6yI2Xq4baHHWyIjWuou BJxzs5HcdoyuspibyBxcBdM3kRlRVrf8L5bASy9Pt6fqNWBu0y//ftny28pefLYe etMr8eTzxOeTTkMMGbuib/dTXLYOLSHizYUeiZsV1qlRD7rjsyx4iAUve7snI6y1 Rc6Ys4AMsURyZPSAOMXbw9cYu3hDV1vZICDdLM281awT/KBujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjokepXWY4L2T3cJRghmkdKOdvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDYyNGU2NTAtMWMwNi0z NTY1LWI1YjUtOGUzNzY2MGNkNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkP2UTFU2CyubT2OePrK9eG1BD5mNakCcdQ2RpyMeye97O/BfqbdT0x ASyuCk5bZS+0GRsCujy154viyO4OYrKgPwFsNwF6m/5AVJVHGtGQyVjM22IEUY20 cT1PBSNJ1zI3nf5WiWiduipQbb0mq4+NHe7RVEVVgFmTxVRSKiwbi/ky9EyLkC/3 gw9SN9Hdjx3Enf3meafyfYenZuajM+6pDtU5iimeg12iXdGYEq5qGuwarBwCFR+G 6IBf3MaRq1+aVGrDlNMuoqnDGMxGM4xFMA6kckgjh/qP7GVIcCHzbVbDyNEqyQdu zyjRwNNcvPxdq3QEqU2ikdA4j8N4pMA= -----END CERTIFICATE-----Generated at Sat Nov 14 20:42:24 2026 by rpki-client