$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0f1a9d1b-568f-3759-bc89-591ab1db96a5.roa File: 0f1a9d1b-568f-3759-bc89-591ab1db96a5.roa (raw, json) Hash identifier: recaL/DgKV8tke/BwSk8r0EzKsew0I3YzYX/km+r6B0= Subject key identifier: 2A:6C:C9:2A:03:F3:96:BB:8E:83:20:6B:7B:A5:D8:77:E4:20:EC:BB Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F594A9645D822812F054F3D40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0f1a9d1b-568f-3759-bc89-591ab1db96a5.roa Signing time: Wed 30 Sep 2026 17:12:41 +0000 ROA not before: Wed 30 Sep 2026 17:12:41 +0000 ROA not after: Tue 29 Dec 2026 18:12:41 +0000 asID: 62904 IP address blocks: 107.158.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:4a:96:45:d8:22:81:2f:05:4f:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 17:12:41 2026 GMT Not After : Dec 29 18:12:41 2026 GMT Subject: CN=4ddf71b6-3796-4a33-90ea-5c00242bd7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:02:5d:5c:70:e2:98:2e:39:90:30:60:ee: 7b:63:71:b3:98:cb:41:b1:2b:67:c9:75:fa:7e:16: 9e:ba:d6:5d:17:75:6d:92:17:89:b8:18:20:67:00: 48:f2:05:6d:b3:bc:68:98:05:36:41:ae:6e:85:65: f2:76:f6:59:7a:c7:87:f1:89:85:a0:1f:fd:2c:4c: e5:7c:bd:18:97:dd:b6:2f:b6:5f:90:1a:ad:eb:0d: 35:43:77:7a:da:51:80:73:f8:44:2a:92:1c:7e:57: e7:58:6b:25:6d:88:4a:a4:17:9d:32:ff:9c:a0:dc: a8:97:b2:fa:70:00:16:fb:98:bf:2d:f1:89:9a:66: 0c:d2:02:c3:cc:11:12:a5:c2:66:15:1e:6b:52:b2: 0d:ac:b7:15:e1:79:3d:94:94:8f:83:bd:b8:81:db: 25:3c:50:44:c5:21:da:04:37:8f:cb:69:e8:73:21: 9c:45:5b:80:54:eb:d8:4e:a5:85:ed:2f:e9:95:2d: b5:6e:07:8f:f3:40:7b:5a:74:c2:52:a8:48:d2:9a: b2:e1:8b:07:90:86:4b:af:2f:49:53:e9:fa:26:95: 83:01:bc:74:d7:6e:39:6d:27:99:1e:83:d9:f5:f5: 81:b7:ac:f6:43:b6:69:bb:a7:62:18:95:c9:61:8e: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6C:C9:2A:03:F3:96:BB:8E:83:20:6B:7B:A5:D8:77:E4:20:EC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0f1a9d1b-568f-3759-bc89-591ab1db96a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c4:e6:d3:69:c2:6a:64:9a:43:05:5b:51:df:5e:db:26:35: 9d:b0:c2:2a:81:43:09:87:9b:41:98:24:ff:d4:c7:b0:41:82: fd:ff:4f:32:e9:5d:7b:c0:1b:01:bb:41:3a:8b:e0:0a:49:d6: 0c:b5:cb:32:05:7a:8f:c9:0b:f4:67:d4:3b:dd:38:96:2c:06: 83:58:e6:e6:db:04:a3:9b:64:45:2f:f9:fe:e5:ff:97:1f:d8: 8d:8d:5e:c8:57:f9:60:b1:12:75:0b:df:16:1e:6e:6b:f8:17: 92:cb:6e:4c:45:00:f6:c6:58:94:d7:71:47:e8:a8:0b:e0:59: 93:a0:35:b0:a1:7b:97:9b:3f:cf:28:aa:16:6b:dd:b4:d4:b2: 8b:3c:79:66:9c:e5:4b:2c:1d:51:1f:26:bd:81:ba:ae:4f:96: 82:20:f0:a9:7e:14:55:71:8a:d6:58:f4:9d:25:92:f1:29:70: 7d:81:e0:8a:da:94:44:06:80:f0:42:25:ae:7f:58:d5:14:4b: e2:7d:e6:e1:c1:2f:50:c9:9a:a5:db:11:e2:c9:81:c2:a2:0b: f0:4e:90:00:6b:b4:d8:84:94:a2:0c:3d:b8:76:ff:c6:33:1f: 4e:1c:95:d5:e4:b3:56:31:c3:37:f1:37:55:ce:91:85:be:a5: 3d:58:af:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZSpZF2CKBLwVPPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkzMDE3MTI0MVoXDTI2MTIyOTE4MTI0MVowLzEtMCsGA1UEAxMk NGRkZjcxYjYtMzc5Ni00YTMzLTkwZWEtNWMwMDI0MmJkN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA8CXVxw4pguOZAwYO57Y3GzmMtBsStnyXX6 fhaeutZdF3VtkheJuBggZwBI8gVts7xomAU2Qa5uhWXydvZZeseH8YmFoB/9LEzl fL0Yl922L7ZfkBqt6w01Q3d62lGAc/hEKpIcflfnWGslbYhKpBedMv+coNyol7L6 cAAW+5i/LfGJmmYM0gLDzBESpcJmFR5rUrINrLcV4Xk9lJSPg724gdslPFBExSHa BDePy2nocyGcRVuAVOvYTqWF7S/plS21bgeP80B7WnTCUqhI0pqy4YsHkIZLry9J U+n6JpWDAbx01245bSeZHoPZ9fWBt6z2Q7Zpu6diGJXJYY4IdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpsySoD85a7joMga3ul2HfkIOy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGYxYTlkMWItNTY4Zi0z NzU5LWJjODktNTkxYWIxZGI5NmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa57gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvE5tNpwmpkmkMFW1HfXtsmNZ2wwiqBQwmHm0GYJP/Ux7BBgv3/TzLp XXvAGwG7QTqL4ApJ1gy1yzIFeo/JC/Rn1DvdOJYsBoNY5ubbBKObZEUv+f7l/5cf 2I2NXshX+WCxEnUL3xYebmv4F5LLbkxFAPbGWJTXcUfoqAvgWZOgNbChe5ebP88o qhZr3bTUsos8eWac5UssHVEfJr2Buq5PloIg8Kl+FFVxitZY9J0lkvEpcH2B4Ira lEQGgPBCJa5/WNUUS+J95uHBL1DJmqXbEeLJgcKiC/BOkABrtNiElKIMPbh2/8Yz H04cldXks1YxwzfxN1XOkYW+pT1Yr8o= -----END CERTIFICATE-----Generated at Mon Oct 12 18:22:53 2026 by rpki-client