$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa File: 32681ab5-267b-30a2-9748-402a55e3c247.roa (raw, json) Hash identifier: ebHJ30uC/5tHABf4+nTuXM0Nrxdo2Rygux+23tAZVvQ= Subject key identifier: 20:C4:A4:54:E4:B9:C9:75:A8:54:40:BF:47:A8:41:0F:C5:E7:AF:AD Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F549D608A56BFE2A14BA45330 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 107.158.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:60:8a:56:bf:e2:a1:4b:a4:53:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=73d24571-74a5-4489-a750-743629b05820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:ab:88:21:5c:c6:1e:24:2a:85:dd:db:df: ef:ba:cd:b1:d6:18:5a:7e:3c:ee:2e:80:e0:cc:df: f6:87:03:8b:7b:4c:79:7b:a4:fd:86:7a:1a:64:48: 17:48:c2:17:89:ba:18:52:0f:9e:d5:bb:1e:bf:2b: 77:91:18:a8:85:fe:05:0e:25:e1:ac:94:45:a6:54: 31:dc:b1:2b:dd:4a:c2:71:d6:ab:38:f6:ee:22:77: 67:a1:c4:38:c7:22:e8:1f:d2:c9:a5:0b:e8:ba:3f: c6:41:92:ff:ec:a4:a0:01:93:9b:c8:61:76:59:9e: ae:fd:f7:5e:ab:3a:1e:40:c0:40:2f:7e:5d:64:0f: a1:ea:ae:b8:41:7e:e0:fe:f3:f6:fe:4c:f3:39:0f: d0:74:b8:18:46:df:cd:e9:4e:d1:4f:fd:8d:76:6f: d2:a7:cb:48:8a:14:e8:08:75:4c:8d:e8:9b:ac:b0: 98:31:af:a4:01:c0:bc:38:f3:55:0f:14:fb:98:7c: 49:4f:07:32:18:49:0d:11:6e:c3:20:9e:0c:16:19: 1a:e2:42:e4:de:70:fc:69:19:a2:23:6d:8c:44:9f: 87:82:18:96:79:24:25:04:49:e3:c8:6d:5d:e1:45: 26:2f:64:4e:87:ff:df:d1:38:4e:77:4a:ed:f3:7e: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C4:A4:54:E4:B9:C9:75:A8:54:40:BF:47:A8:41:0F:C5:E7:AF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8f:52:20:bc:16:1c:79:2d:dd:e6:a9:9e:54:f9:44:39:e1: d5:34:14:f4:4e:5e:45:52:a4:76:2d:2c:45:7b:9c:50:f4:fd: 4e:43:7d:0e:28:b6:a3:07:95:af:b4:cd:7f:82:9c:8b:c1:19: a6:7c:fa:14:79:3f:0b:7f:3c:07:69:88:5e:d9:9c:6b:a8:71: 81:fc:22:4d:62:ff:62:cd:ce:d2:07:9a:0b:5d:e1:60:bf:0c: 03:f3:74:69:30:bc:74:2c:9b:08:02:b3:c9:6a:41:dd:a0:86: 86:20:d8:46:d5:6a:08:50:00:1c:b3:04:80:bf:e0:b3:38:02: be:a1:ed:f6:18:d7:71:ee:5f:38:99:a1:ba:d0:ce:dc:1d:ed: bd:57:6a:aa:55:c8:89:d0:5e:6a:fd:5c:cd:62:34:c2:0a:1e: 79:59:ea:ad:5f:71:fc:64:a0:89:2d:9b:6a:e9:1a:cc:c8:22: 10:8b:eb:82:27:a4:d1:e9:da:b3:7d:a0:7d:7c:0f:0f:47:5c: b4:23:4a:8c:fb:f5:c8:d4:ce:cc:9a:ba:73:42:b5:92:75:e2: 1b:08:18:57:db:aa:77:dd:8b:b3:25:97:d7:0d:37:ce:fa:f2: 04:67:b3:0c:0f:17:4b:e8:57:2d:b7:3d:7b:de:d8:61:f8:96: de:92:72:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWCKVr/ioUukUzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NzNkMjQ1NzEtNzRhNS00NDg5LWE3NTAtNzQzNjI5YjA1ODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0GriCFcxh4kKoXd29/vus2x1hhafjzuLoDg zN/2hwOLe0x5e6T9hnoaZEgXSMIXiboYUg+e1bsevyt3kRiohf4FDiXhrJRFplQx 3LEr3UrCcdarOPbuIndnocQ4xyLoH9LJpQvouj/GQZL/7KSgAZObyGF2WZ6u/fde qzoeQMBAL35dZA+h6q64QX7g/vP2/kzzOQ/QdLgYRt/N6U7RT/2Ndm/Sp8tIihTo CHVMjeibrLCYMa+kAcC8OPNVDxT7mHxJTwcyGEkNEW7DIJ4MFhka4kLk3nD8aRmi I22MRJ+HghiWeSQlBEnjyG1d4UUmL2ROh//f0ThOd0rt8345swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDEpFTkucl1qFRAv0eoQQ/F56+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzI2ODFhYjUtMjY3Yi0z MGEyLTk3NDgtNDAyYTU1ZTNjMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2PUiC8Fhx5Ld3mqZ5U+UQ54dU0FPROXkVSpHYtLEV7nFD0/U5DfQ4o tqMHla+0zX+CnIvBGaZ8+hR5Pwt/PAdpiF7ZnGuocYH8Ik1i/2LNztIHmgtd4WC/ DAPzdGkwvHQsmwgCs8lqQd2ghoYg2EbVaghQAByzBIC/4LM4Ar6h7fYY13HuXziZ obrQztwd7b1XaqpVyInQXmr9XM1iNMIKHnlZ6q1fcfxkoIktm2rpGszIIhCL64In pNHp2rN9oH18Dw9HXLQjSoz79cjUzsyaunNCtZJ14hsIGFfbqnfdi7Mll9cNN876 8gRnswwPF0voVy23PXve2GH4lt6SclI= -----END CERTIFICATE-----Generated at Tue Oct 13 23:48:14 2026 by rpki-client