$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa File: bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa (raw, json) Hash identifier: Mb+9rwqynwybebfbF3BNrANfP6R5Wn+CF5PjBMrQzFI= Subject key identifier: FC:6B:9F:3D:08:63:3C:31:C3:30:8A:5A:2A:85:64:4A:9D:82:B4:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984C46897AA4CC26288D800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:c4:68:97:aa:4c:c2:62:88:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2114510b-6ada-4d57-9bd3-bbb09c6b2cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:b7:10:7b:b8:14:d1:34:09:41:89:97:9f: e2:05:d5:25:62:5f:f5:a8:df:e9:44:6e:1e:b5:ad: 0c:05:d7:c8:41:00:25:94:b1:71:62:86:dd:85:d9: 03:bd:b5:33:3d:36:8f:3a:cc:70:66:2a:22:cd:4a: 72:08:31:39:fe:b2:5b:5b:63:98:a4:48:0e:57:13: 7f:ea:f7:31:c9:36:77:8b:69:52:4c:76:16:4b:e7: d3:54:00:9b:57:73:89:3d:b0:e8:b0:48:af:b6:bf: d0:e0:59:22:48:96:a8:80:32:f6:ab:18:0d:c9:87: 60:82:4a:14:cb:55:09:0f:79:a3:e1:15:f3:1a:cb: 6e:df:3b:53:ff:ce:03:07:3a:53:bb:89:bf:9c:3d: b2:ac:b4:0c:86:e3:4b:25:23:36:4c:41:8c:54:c2: 69:b8:e1:6b:e8:88:9d:1f:99:5a:d0:b9:bf:9e:32: 1d:b8:a7:89:89:2b:b9:60:c4:ef:35:fe:84:3d:1b: dd:22:32:b7:ef:0a:01:54:77:41:06:80:5b:b2:13: 76:f1:3c:58:b6:37:2d:bb:54:9c:f1:65:50:44:9f: dd:c0:0e:08:62:4b:36:75:27:37:88:9b:02:b9:97: ef:4a:62:e4:17:87:f9:40:82:e4:b3:9a:55:3f:1b: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6B:9F:3D:08:63:3C:31:C3:30:8A:5A:2A:85:64:4A:9D:82:B4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d2:be:af:53:a2:36:f5:1a:56:4f:3a:64:8e:e9:a4:75:7f: 47:41:ad:c1:7d:c0:14:1e:47:54:7a:ca:d4:07:6c:2f:4c:63: b2:28:51:79:93:5d:2b:90:7f:3a:c1:b3:cf:4e:02:fd:b3:c8: d0:4e:c8:1c:33:cb:0d:77:64:da:d0:b8:aa:1c:56:31:09:92: 3f:09:02:b2:f8:92:0a:e4:77:be:98:4b:b4:de:ab:9b:c0:80: a4:f4:0d:57:16:02:26:5c:47:ac:82:70:1d:c5:26:ff:50:f2: 6d:68:18:90:ac:a1:bc:7d:0a:0e:00:4c:69:73:f0:aa:5a:6c: 57:49:34:e8:02:1c:8f:0c:53:f1:cf:3d:f5:da:ff:04:1b:6e: 3d:07:af:bc:24:92:3d:f9:7a:50:b7:d6:4f:ce:d8:fa:3c:79: 22:a8:3f:d3:50:61:29:9e:01:24:81:a7:46:5c:b7:54:ae:8b: ba:e9:73:90:72:9a:3d:cc:81:f2:82:bc:3b:01:d5:f5:94:74: 8e:1a:bb:a0:27:ad:78:94:e7:75:55:e2:45:69:78:e9:db:d6: 9b:b8:a2:d3:da:4a:58:52:d2:1f:db:e6:61:6a:8e:2a:ad:4f: b4:04:c5:69:34:41:ca:15:ab:18:30:dc:ba:ae:48:a6:70:72: 19:cf:b6:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMRol6pMwmKI2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjExNDUxMGItNmFkYS00ZDU3LTliZDMtYmJiMDljNmIyY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMe3EHu4FNE0CUGJl5/iBdUlYl/1qN/pRG4e ta0MBdfIQQAllLFxYobdhdkDvbUzPTaPOsxwZioizUpyCDE5/rJbW2OYpEgOVxN/ 6vcxyTZ3i2lSTHYWS+fTVACbV3OJPbDosEivtr/Q4FkiSJaogDL2qxgNyYdggkoU y1UJD3mj4RXzGstu3ztT/84DBzpTu4m/nD2yrLQMhuNLJSM2TEGMVMJpuOFr6Iid H5la0Lm/njIduKeJiSu5YMTvNf6EPRvdIjK37woBVHdBBoBbshN28TxYtjctu1Sc 8WVQRJ/dwA4IYks2dSc3iJsCuZfvSmLkF4f5QILks5pVPxuLqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxrnz0IYzwxwzCKWiqFZEqdgrRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmZhNjY4YjAtYjViMC0z OGE2LWI2Y2UtNTIwYzRhOWQwZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPSvq9Tojb1GlZPOmSO6aR1f0dBrcF9wBQeR1R6ytQHbC9MY7IoUXmT XSuQfzrBs89OAv2zyNBOyBwzyw13ZNrQuKocVjEJkj8JArL4kgrkd76YS7Teq5vA gKT0DVcWAiZcR6yCcB3FJv9Q8m1oGJCsobx9Cg4ATGlz8KpabFdJNOgCHI8MU/HP PfXa/wQbbj0Hr7wkkj35elC31k/O2Po8eSKoP9NQYSmeASSBp0Zct1Sui7rpc5By mj3MgfKCvDsB1fWUdI4au6AnrXiU53VV4kVpeOnb1pu4otPaSlhS0h/b5mFqjiqt T7QExWk0QcoVqxgw3LquSKZwchnPtt4= -----END CERTIFICATE-----Generated at Fri Sep 25 20:37:03 2026 by rpki-client