$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa File: 434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa (raw, json) Hash identifier: xEK34YsSTbMotg9xbw73/Vqf5hbgNLDSQs7aOY+hXZI= Subject key identifier: 43:B3:2E:44:F2:86:21:93:B7:39:20:85:DA:23:E1:F2:03:4B:EA:B8 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F49898563B68ED5FFA289C880 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 107.158.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:85:63:b6:8e:d5:ff:a2:89:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3472f8e-11b4-4574-ac1b-4f3c86d0ec05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:31:cf:5e:ce:6c:2e:39:72:94:de:b2:f3: 98:ca:88:31:b1:a8:54:8a:a2:d8:e8:9f:df:51:b1: 39:a6:46:06:4f:a8:73:26:59:29:51:76:95:82:65: 3b:02:80:b3:2b:49:0c:50:8b:0e:aa:40:7f:25:89: 05:5d:f0:32:f4:ef:aa:d7:20:00:94:77:a8:a8:ba: f5:ad:6a:54:bc:b2:e0:50:88:64:70:40:b2:52:d4: 5f:d3:06:a3:24:8b:c7:14:2d:a8:8a:0a:55:0d:fd: 76:d9:11:fd:f5:27:76:5f:ed:74:66:5b:07:26:8a: 4e:2f:f7:68:8d:dc:8b:56:ac:96:27:71:57:c5:4a: dd:5a:21:6b:34:da:07:a2:78:e7:e5:54:1f:fd:0e: 95:9a:f3:ac:d4:a2:66:12:fb:92:4d:83:fb:82:68: 6c:08:98:9d:65:bc:cd:cb:f5:6e:d4:40:c9:8f:1e: 84:31:49:b5:21:3f:f2:b3:e2:be:43:60:f2:b0:db: 59:6a:b8:85:c9:36:af:68:c9:31:4e:57:f6:fb:4b: 07:42:25:b3:a8:f4:a4:e7:dc:9d:78:92:b8:fe:67: 47:8e:6f:58:9b:5d:e4:e4:4b:52:6d:50:c3:0d:fd: 83:5f:5b:d7:51:b4:db:8b:56:5b:7e:9e:3a:0c:d0: 98:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B3:2E:44:F2:86:21:93:B7:39:20:85:DA:23:E1:F2:03:4B:EA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5c:6a:a0:63:60:c7:64:96:5f:4b:ec:05:43:ff:12:93:09: 4c:31:86:66:3f:b4:70:72:20:35:6a:e2:85:52:8b:cd:62:0f: 91:e6:16:42:24:0c:3d:51:b9:c0:1a:ef:97:b8:21:de:ca:e6: 58:b0:6d:4b:b5:c5:c7:35:39:ad:bf:6e:9e:ec:d8:ac:af:91: 42:57:72:10:c7:68:30:c5:9c:01:23:32:00:1d:69:6b:53:5d: 7b:9e:73:48:2f:d9:14:b9:06:eb:8d:db:c0:65:64:1a:5b:63: 8d:2f:50:a5:ed:6f:db:07:ae:00:77:7c:9e:44:bf:a4:bf:54: 99:75:01:41:52:15:97:d2:0f:73:c7:d1:54:20:4e:33:87:b2: c6:e9:83:c1:a6:bb:16:5d:cd:5b:1c:16:c9:c8:76:3c:22:e7: f9:45:ec:e7:f7:a4:36:6b:f4:34:98:d0:05:3c:46:88:6f:40: c4:db:31:61:fb:37:b6:cc:74:2e:31:37:48:eb:ed:d6:40:4f: 4f:1e:86:17:6e:96:bf:04:ad:63:ab:84:f5:d1:ef:c7:72:d4: 38:49:30:8a:a7:74:9d:9a:ce:6e:f6:2c:8e:e4:84:50:69:c8: 72:73:c4:5f:15:f0:ad:16:39:10:74:77:73:ef:8a:ed:a8:59: 4a:fe:ba:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiYVjto7V/6KJyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTM0NzJmOGUtMTFiNC00NTc0LWFjMWItNGYzYzg2ZDBlYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt8xz17ObC45cpTesvOYyogxsahUiqLY6J/f UbE5pkYGT6hzJlkpUXaVgmU7AoCzK0kMUIsOqkB/JYkFXfAy9O+q1yAAlHeoqLr1 rWpUvLLgUIhkcECyUtRf0wajJIvHFC2oigpVDf122RH99Sd2X+10ZlsHJopOL/do jdyLVqyWJ3FXxUrdWiFrNNoHonjn5VQf/Q6VmvOs1KJmEvuSTYP7gmhsCJidZbzN y/Vu1EDJjx6EMUm1IT/ys+K+Q2DysNtZariFyTavaMkxTlf2+0sHQiWzqPSk59yd eJK4/mdHjm9Ym13k5EtSbVDDDf2DX1vXUbTbi1Zbfp46DNCY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOzLkTyhiGTtzkghdoj4fIDS+q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDM0ZTIzZTgtMjdmMS0z ZGM4LTlhOGEtZjUyN2U3Mzg0ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJcaqBjYMdkll9L7AVD/xKTCUwxhmY/tHByIDVq4oVSi81iD5HmFkIk DD1RucAa75e4Id7K5liwbUu1xcc1Oa2/bp7s2KyvkUJXchDHaDDFnAEjMgAdaWtT XXuec0gv2RS5BuuN28BlZBpbY40vUKXtb9sHrgB3fJ5Ev6S/VJl1AUFSFZfSD3PH 0VQgTjOHssbpg8GmuxZdzVscFsnIdjwi5/lF7Of3pDZr9DSY0AU8RohvQMTbMWH7 N7bMdC4xN0jr7dZAT08ehhdulr8ErWOrhPXR78dy1DhJMIqndJ2azm72LI7khFBp yHJzxF8V8K0WORB0d3Pviu2oWUr+uuI= -----END CERTIFICATE-----Generated at Sun Oct 4 22:37:00 2026 by rpki-client