$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa File: 0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa (raw, json) Hash identifier: PyCwseC+PGBhxwYgqyyZjB5g2arNT0ejrKzItQnI4ow= Subject key identifier: E0:77:8A:BF:22:D6:94:E7:2C:EB:CC:CC:B7:BD:C4:0F:25:6A:97:F9 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F497507EB75BCBEBB76E45F20 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32043 IP address blocks: 107.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:07:eb:75:bc:be:bb:76:e4:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1cfab78b-f4a8-4afd-a541-98208938b34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:36:1a:43:a6:1f:a0:99:fb:4b:f7:01:c4: a8:84:c8:bd:16:23:5d:2a:82:f0:71:ca:1b:88:fb: ef:bc:2b:bf:c3:48:3f:7c:73:5d:85:1c:79:83:9a: d7:ad:d9:2b:63:fb:56:94:de:0f:08:70:a8:7b:df: b7:07:52:5c:6d:65:d9:68:83:fe:01:9c:fc:cb:a4: 26:03:c9:9a:bb:11:12:00:2f:ea:3a:23:ec:38:b4: f7:fe:b4:ff:8a:1d:06:25:c2:b1:bf:44:11:a1:28: 18:dd:50:cb:c1:6e:89:46:20:83:40:7b:42:46:25: d9:78:b1:ed:50:cc:01:91:b1:e6:f7:a4:8e:a9:ce: 17:92:3f:4c:20:2c:7f:6a:85:5b:75:c4:98:36:01: 26:a4:2b:d6:da:d9:15:cf:56:03:89:38:e1:50:ff: d6:53:41:9b:cc:5c:4b:a7:19:64:17:9d:68:ba:8e: 5c:97:d8:5a:ae:06:22:a9:de:e9:4b:09:8c:04:84: 7f:d7:e6:a6:06:39:5f:5a:fc:f3:78:67:90:c1:d2: 10:04:54:cd:5a:12:12:65:07:03:25:84:73:a1:75: 2c:85:dd:41:8e:dd:f0:1f:ed:28:e9:77:8c:46:a8: b2:80:ac:10:d2:00:d2:af:0b:c1:ff:1e:c0:a6:a1: 0a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:8A:BF:22:D6:94:E7:2C:EB:CC:CC:B7:BD:C4:0F:25:6A:97:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:82:07:e1:c7:3a:2c:2f:f4:60:d3:3f:f3:c7:e2:b1:60:8d: d7:a4:80:22:15:7f:f2:f4:74:49:9f:55:29:cb:a9:a1:75:8c: 8d:d7:8d:b5:36:5b:6e:2b:87:98:1e:e8:40:f4:8a:06:86:9c: 95:c6:1a:36:82:cd:88:ba:93:46:ce:7b:60:6d:50:17:c5:1e: 3a:39:2a:3a:e2:20:5c:da:76:ab:d8:64:85:b4:be:15:48:04: 36:eb:07:48:a2:9d:ca:11:7f:2a:2f:25:8b:97:6b:00:3f:75: fc:5a:a8:84:c8:2c:d3:8b:b9:6a:3b:07:d4:20:5c:53:3d:35: 70:0c:a2:97:31:e7:bf:b8:b4:92:d0:b3:5d:2c:0e:6e:94:d8: 29:36:c5:82:fb:e3:52:cf:e5:11:8a:31:40:8d:70:d6:70:87: d3:27:6a:c9:e5:a0:6a:92:6d:c9:bf:5a:f8:10:41:1d:e6:d9: cd:e8:bd:65:15:3a:41:7d:fe:fa:ef:8b:5a:c6:03:49:14:70: ae:5c:af:4b:cd:76:e1:a6:9e:36:93:5c:d0:b6:d0:eb:3c:25: 0e:da:31:3e:5c:64:e9:aa:49:6b:36:fa:8d:f4:17:21:10:9f: a9:04:f7:f1:af:f8:79:c7:e6:1c:8a:0f:bb:4f:79:79:f8:26: ff:bd:bd:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQfrdby+u3bkXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWNmYWI3OGItZjRhOC00YWZkLWE1NDEtOTgyMDg5MzhiMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p82GkOmH6CZ+0v3AcSohMi9FiNdKoLwccob iPvvvCu/w0g/fHNdhRx5g5rXrdkrY/tWlN4PCHCoe9+3B1JcbWXZaIP+AZz8y6Qm A8mauxESAC/qOiPsOLT3/rT/ih0GJcKxv0QRoSgY3VDLwW6JRiCDQHtCRiXZeLHt UMwBkbHm96SOqc4Xkj9MICx/aoVbdcSYNgEmpCvW2tkVz1YDiTjhUP/WU0GbzFxL pxlkF51ouo5cl9hargYiqd7pSwmMBIR/1+amBjlfWvzzeGeQwdIQBFTNWhISZQcD JYRzoXUshd1Bjt3wH+0o6XeMRqiygKwQ0gDSrwvB/x7ApqEKXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB3ir8i1pTnLOvMzLe9xA8lapf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGFmYjZiNzItYzMyOC0z ZmM0LWFhODctNzU1MGQ1YmY5NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCCB+HHOiwv9GDTP/PH4rFgjdekgCIVf/L0dEmfVSnLqaF1jI3XjbU2 W24rh5ge6ED0igaGnJXGGjaCzYi6k0bOe2BtUBfFHjo5KjriIFzadqvYZIW0vhVI BDbrB0iincoRfyovJYuXawA/dfxaqITILNOLuWo7B9QgXFM9NXAMopcx57+4tJLQ s10sDm6U2Ck2xYL741LP5RGKMUCNcNZwh9MnasnloGqSbcm/WvgQQR3m2c3ovWUV OkF9/vrvi1rGA0kUcK5cr0vNduGmnjaTXNC20Os8JQ7aMT5cZOmqSWs2+o30FyEQ n6kE9/Gv+HnH5hyKD7tPeXn4Jv+9vZw= -----END CERTIFICATE-----Generated at Tue Sep 29 02:13:15 2026 by rpki-client