$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa File: f4147287-cce9-3a3f-9251-9b92391a0868.roa (raw, json) Hash identifier: YVlfzx0sJRNq1589aVu2YLl9reMUoey7ExwtdaObkPg= Subject key identifier: 5E:87:14:7D:0B:59:75:82:9F:1F:E1:BD:59:50:B3:42:2B:57:20:3B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629308C5F32D4642B85DD680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 108.177.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:08:c5:f3:2d:46:42:b8:5d:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=eea89543-d2d5-4f77-a02d-c9679927c79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:07:7a:0e:cf:ab:11:be:f5:f6:83:a9:ed: 78:5a:23:0f:75:ce:bb:5b:9f:ec:b5:c1:ac:d9:cf: cf:43:2a:34:2d:0b:5e:4a:ab:53:80:dd:10:3b:54: 59:9f:2b:01:e4:ad:0a:07:09:07:14:a1:2f:14:d4: 6d:f8:f8:7c:13:69:16:62:e1:bb:d8:7d:76:de:7d: fd:1f:cd:1e:ab:b0:f4:09:04:d9:5f:f3:b6:e7:9a: 36:62:89:3b:b9:d2:0d:a3:52:4d:0c:88:d5:bd:fd: 47:4a:8f:35:d7:3a:d0:44:6c:ed:4a:9a:b1:0d:fd: ac:24:0f:39:45:05:d1:4a:8f:ea:5b:33:66:86:73: e5:d2:12:e5:01:52:81:59:bd:9f:7d:cc:69:5d:6c: 4f:49:64:44:d3:41:31:95:d7:bc:e5:68:87:ae:0c: a5:c4:d1:f0:62:d3:95:3b:52:6a:1c:21:11:9f:64: f2:b8:08:00:88:9e:37:c0:3b:6f:02:9c:63:f3:da: 9e:77:ee:e4:66:fd:d0:5a:12:73:f9:2b:9e:80:2b: 13:85:e8:49:13:e0:26:7b:99:bd:09:99:a0:8b:bc: 0e:ca:d6:f7:da:f1:f4:53:a9:2e:af:e7:b9:9c:d2: ef:d7:94:2f:e9:9e:5b:1d:1b:d9:54:d3:2f:f0:60: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:14:7D:0B:59:75:82:9F:1F:E1:BD:59:50:B3:42:2B:57:20:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ff:96:ba:87:f1:88:c7:67:f6:20:6f:74:d6:f4:3d:43:f1: 3e:1b:a3:18:f7:dd:db:49:ae:82:27:75:3e:74:c1:f1:dd:63: 53:24:c2:37:bd:1c:6f:c5:b1:90:18:a6:c3:4d:d4:84:59:67: 6f:c9:61:b9:8a:e7:2d:de:25:74:e2:a0:27:15:bb:95:04:6c: 95:10:f1:df:02:1a:7a:4e:a0:47:3a:5c:04:1a:be:ac:03:72: 68:24:75:62:1d:a5:21:64:7d:bf:e0:16:bc:a9:d0:32:46:43: 45:c8:b6:06:16:4b:4d:27:0d:bf:82:9a:23:e4:8d:79:b4:72: bd:02:ab:c9:47:4e:f3:48:e7:71:8c:20:9b:cb:62:08:42:b2: 15:47:02:a0:99:8e:cd:0e:66:a9:bd:54:cd:6c:93:79:56:07: 58:6e:9c:d8:b3:68:76:a9:8f:69:64:af:e2:b3:a1:c9:42:54: 40:1b:1b:95:5e:b8:08:78:5d:a3:ac:4a:39:e4:22:29:a8:fe: 20:ed:8f:c1:ea:5c:62:4c:b0:7d:39:e3:fe:a9:1f:96:e0:e3: 1f:ea:a7:57:59:d4:ba:28:c5:d8:6d:1d:81:6d:42:1c:e7:66: b6:88:45:b7:2b:c8:ec:7b:e9:7e:8b:3e:10:10:6b:9a:85:dc: c1:00:29:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwjF8y1GQrhd1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWVhODk1NDMtZDJkNS00Zjc3LWEwMmQtYzk2Nzk5MjdjNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixAHeg7PqxG+9faDqe14WiMPdc67W5/stcGs 2c/PQyo0LQteSqtTgN0QO1RZnysB5K0KBwkHFKEvFNRt+Ph8E2kWYuG72H123n39 H80eq7D0CQTZX/O255o2Yok7udINo1JNDIjVvf1HSo811zrQRGztSpqxDf2sJA85 RQXRSo/qWzNmhnPl0hLlAVKBWb2ffcxpXWxPSWRE00Exlde85WiHrgylxNHwYtOV O1JqHCERn2TyuAgAiJ43wDtvApxj89qed+7kZv3QWhJz+SuegCsThehJE+Ame5m9 CZmgi7wOytb32vH0U6kur+e5nNLv15Qv6Z5bHRvZVNMv8GAGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6HFH0LWXWCnx/hvVlQs0IrVyA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjQxNDcyODctY2NlOS0z YTNmLTkyNTEtOWI5MjM5MWEwODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz/lrqH8YjHZ/Ygb3TW9D1D8T4boxj33dtJroIndT50wfHdY1Mkwje9 HG/FsZAYpsNN1IRZZ2/JYbmK5y3eJXTioCcVu5UEbJUQ8d8CGnpOoEc6XAQavqwD cmgkdWIdpSFkfb/gFryp0DJGQ0XItgYWS00nDb+CmiPkjXm0cr0Cq8lHTvNI53GM IJvLYghCshVHAqCZjs0OZqm9VM1sk3lWB1hunNizaHapj2lkr+KzoclCVEAbG5Ve uAh4XaOsSjnkIimo/iDtj8HqXGJMsH054/6pH5bg4x/qp1dZ1LooxdhtHYFtQhzn ZraIRbcryOx76X6LPhAQa5qF3MEAKTM= -----END CERTIFICATE-----Generated at Sun Nov 15 20:49:11 2026 by rpki-client