$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa File: 9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa (raw, json) Hash identifier: WHd6gK0Onik7hTsyjRfkkU9sehr1buvmu2Rchaz89PI= Subject key identifier: CE:01:2B:98:17:87:5D:E1:44:F8:82:C4:57:95:CB:98:F8:92:8D:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293065FBDF6A49745886A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 108.177.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:06:5f:bd:f6:a4:97:45:88:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9abcbc21-be50-4585-a6fe-f7234255d1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:01:5f:3b:7b:83:ef:0c:38:c5:74:f1:be: 80:f7:90:4d:72:6b:b2:b0:00:c3:47:6d:41:0e:77: 2f:3a:db:48:3a:96:41:ac:12:0d:6f:5c:e5:9b:6c: be:b5:53:5d:2f:85:9a:96:7e:75:2c:f1:9a:ec:71: dd:64:a0:a9:5b:01:a9:30:e2:68:ed:c9:de:a7:5b: 66:ed:9f:24:76:4a:0d:2b:d7:3d:77:02:0c:69:82: f6:8e:32:39:fb:f9:97:57:f0:fc:5c:30:40:73:d1: 63:d4:e1:08:7c:2e:b3:11:c1:93:87:d0:75:84:2f: fb:f1:8f:b4:cf:c2:21:36:5d:96:3d:2a:4e:7d:71: 33:4a:1e:66:95:02:67:7b:0e:ab:3d:29:4c:d9:56: 33:c6:6c:02:e0:b7:1c:05:be:c8:06:d7:0d:27:38: fe:fd:c7:01:c7:11:cc:19:ab:45:b8:59:7f:28:27: ee:33:d3:4b:bd:e5:1c:d9:1d:84:1f:ab:e1:af:79: 84:23:b1:c1:ef:52:d3:48:7e:76:77:aa:3f:8b:5b: ee:c0:17:2a:6d:d6:68:db:b5:a0:37:12:4e:67:e1: 33:06:e6:5c:14:00:be:20:28:98:09:b0:21:fd:36: 24:65:84:e5:a5:ec:ec:0e:c3:c5:06:37:13:df:bc: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:01:2B:98:17:87:5D:E1:44:F8:82:C4:57:95:CB:98:F8:92:8D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d5d0e6b-ec68-3781-9902-b93c0e624ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:0e:34:4e:b6:65:58:04:72:8f:62:8e:9d:31:fa:4c:6b:d0: 8b:16:a7:02:80:1c:17:3b:e8:0c:46:26:79:cd:a1:9f:43:06: 4b:1a:12:5c:8e:42:9f:69:ba:7d:cd:e8:ac:f7:79:99:e0:1a: 37:2b:e9:1a:03:31:3e:e2:19:0e:87:b7:c8:42:d0:fb:92:ec: af:65:28:c9:08:be:a1:86:ce:e5:13:c1:7d:53:4d:63:56:67: cf:57:40:25:e4:89:b9:3e:5c:c9:ae:0e:76:69:98:63:d9:82: 32:ff:1c:c1:01:01:63:21:c4:67:3c:ac:fd:18:36:fa:a8:29: fd:61:98:9a:55:3a:06:33:da:4a:40:1a:94:8f:9c:a8:56:38: 13:2c:f0:8c:bd:e6:72:c9:dd:c0:bb:0a:95:48:8b:0c:24:b8: 76:b8:e8:e9:40:2f:26:9f:84:d0:3d:53:fe:20:7c:e3:6f:8e: 4c:d3:16:1e:b1:2f:02:cb:8f:17:93:da:50:cd:cc:4b:2b:27: 55:ce:af:50:7f:5e:aa:f1:2d:7d:44:c6:94:4a:56:c8:1b:52: d9:4c:1e:b1:b1:48:a6:0a:29:00:de:d4:d4:80:83:96:39:5e: cd:b7:4a:be:92:50:c7:0d:48:a9:6a:be:34:a3:ba:63:33:8a: 04:30:60:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwZfvfakl0WIagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWFiY2JjMjEtYmU1MC00NTg1LWE2ZmUtZjcyMzQyNTVkMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjABXzt7g+8MOMV08b6A95BNcmuysADDR21B DncvOttIOpZBrBINb1zlm2y+tVNdL4Waln51LPGa7HHdZKCpWwGpMOJo7cnep1tm 7Z8kdkoNK9c9dwIMaYL2jjI5+/mXV/D8XDBAc9Fj1OEIfC6zEcGTh9B1hC/78Y+0 z8IhNl2WPSpOfXEzSh5mlQJnew6rPSlM2VYzxmwC4LccBb7IBtcNJzj+/ccBxxHM GatFuFl/KCfuM9NLveUc2R2EH6vhr3mEI7HB71LTSH52d6o/i1vuwBcqbdZo27Wg NxJOZ+EzBuZcFAC+ICiYCbAh/TYkZYTlpezsDsPFBjcT37xDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4BK5gXh13hRPiCxFeVy5j4ko1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWQ1ZDBlNmItZWM2OC0z NzgxLTk5MDItYjkzYzBlNjI0YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEONE62ZVgEco9ijp0x+kxr0IsWpwKAHBc76AxGJnnNoZ9DBksaElyO Qp9pun3N6Kz3eZngGjcr6RoDMT7iGQ6Ht8hC0PuS7K9lKMkIvqGGzuUTwX1TTWNW Z89XQCXkibk+XMmuDnZpmGPZgjL/HMEBAWMhxGc8rP0YNvqoKf1hmJpVOgYz2kpA GpSPnKhWOBMs8Iy95nLJ3cC7CpVIiwwkuHa46OlALyafhNA9U/4gfONvjkzTFh6x LwLLjxeT2lDNzEsrJ1XOr1B/XqrxLX1ExpRKVsgbUtlMHrGxSKYKKQDe1NSAg5Y5 Xs23Sr6SUMcNSKlqvjSjumMzigQwYOQ= -----END CERTIFICATE-----Generated at Sun Nov 15 10:42:14 2026 by rpki-client