$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/609e48fa-de95-3fd6-8c03-85e3893faa0f.roa File: 609e48fa-de95-3fd6-8c03-85e3893faa0f.roa (raw, json) Hash identifier: Okycce1wEcfOYTg31evFfb2az+nwxEFAuqmjvIWkf8M= Subject key identifier: 21:32:0B:FB:A1:CC:57:37:3D:56:F7:5A:A6:17:69:62:20:9E:EA:C1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584DA771483DB27604E33BD0B3D4 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/609e48fa-de95-3fd6-8c03-85e3893faa0f.roa Signing time: Tue 28 Apr 2026 07:29:49 +0000 ROA not before: Tue 28 Apr 2026 07:29:49 +0000 ROA not after: Mon 27 Jul 2026 07:29:49 +0000 asID: 834 IP address blocks: 107.158.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a7:71:48:3d:b2:76:04:e3:3b:d0:b3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 28 07:29:49 2026 GMT Not After : Jul 27 07:29:49 2026 GMT Subject: CN=27a7ea8d-0a90-4529-97e7-2d8f59730374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:c1:0d:f7:cb:d4:b3:20:81:01:a3:04:d5: ef:93:99:f2:55:89:f5:f1:2f:26:6a:ff:81:37:e5: a3:dc:8a:4c:9b:19:d6:b8:02:d8:08:ca:0b:cd:9f: 42:de:b9:c5:ec:30:c7:05:8b:22:05:dc:fa:bc:71: 6c:45:c4:3b:e5:9f:a6:ce:47:e1:33:fe:3e:5b:27: da:12:47:3d:3c:d5:1f:1c:34:66:5f:0b:c3:c6:7d: 78:95:35:0a:6f:1f:d1:dc:f1:f2:a2:6c:ce:13:06: bf:98:be:24:d9:61:6d:d7:fe:16:6d:9a:39:97:51: 96:bf:49:2f:b3:86:7d:95:23:36:d8:84:fb:ff:87: 98:2e:28:d9:26:a9:6a:d7:e8:d4:ef:49:f4:a8:3b: 02:13:3c:e9:65:08:9e:86:9a:be:8d:00:37:ec:f2: 86:0e:1e:12:58:9d:bc:01:99:99:56:4a:44:6c:f4: c3:cc:48:e6:22:a0:71:c0:a1:b2:6a:d2:b1:90:9e: 42:83:fe:5e:db:63:1e:47:fd:eb:e7:06:9f:71:02: cd:6d:b0:aa:1c:96:c7:44:40:ea:9f:a7:3d:0d:60: 09:72:36:0e:82:c6:60:a0:8f:15:7b:32:98:cc:c9: 14:51:b1:df:65:c6:4a:bf:cf:ce:02:20:4d:e4:e6: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:0B:FB:A1:CC:57:37:3D:56:F7:5A:A6:17:69:62:20:9E:EA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/609e48fa-de95-3fd6-8c03-85e3893faa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c5:6d:f1:1f:aa:52:45:83:09:7a:ca:d7:3a:88:12:e7:4b: bc:b1:be:3e:cb:29:a6:e2:d4:0f:3d:1f:85:81:02:dd:d2:ef: a1:aa:e6:28:ef:a8:fc:4f:45:e1:ab:ac:39:c3:98:79:53:0c: 25:8f:aa:aa:68:d2:18:6b:dd:5a:c6:3d:ee:ff:6d:47:3b:27: 40:37:bf:53:94:18:85:8e:65:b9:35:50:fe:bf:4d:99:47:d1: f7:96:07:1f:3e:e9:c4:66:94:9a:7d:33:fa:03:03:c1:54:24: 0f:a8:b0:12:b5:2f:9d:d7:dd:87:49:90:84:19:e6:d5:b3:a1: e8:41:32:48:4b:32:32:b8:e8:16:84:9f:67:5d:18:59:4e:80: 13:19:2d:d2:88:4f:55:76:bd:b3:a3:5f:4d:2e:c0:6b:90:79: ab:62:e2:69:41:70:12:9a:d4:cb:22:8a:e7:54:4d:01:0d:6a: ff:8d:66:77:52:c0:99:b0:f8:f3:bb:74:ea:40:10:b6:78:1a: 10:f6:cd:cd:2b:4a:e3:b4:7f:be:7c:55:1b:2a:2d:6c:61:f6: 0f:da:0c:2f:0a:eb:58:9b:19:cb:96:ed:58:3a:a2:9d:37:ba: f3:57:69:84:0d:f0:9b:ad:8f:d1:a5:5e:29:87:a3:61:25:29: ba:c9:1a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ncUg9snYE4zvQs9QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQyODA3Mjk0OVoXDTI2MDcyNzA3Mjk0OVowLzEtMCsGA1UEAxMk MjdhN2VhOGQtMGE5MC00NTI5LTk3ZTctMmQ4ZjU5NzMwMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokXBDffL1LMggQGjBNXvk5nyVYn18S8mav+B N+Wj3IpMmxnWuALYCMoLzZ9C3rnF7DDHBYsiBdz6vHFsRcQ75Z+mzkfhM/4+Wyfa Ekc9PNUfHDRmXwvDxn14lTUKbx/R3PHyomzOEwa/mL4k2WFt1/4WbZo5l1GWv0kv s4Z9lSM22IT7/4eYLijZJqlq1+jU70n0qDsCEzzpZQiehpq+jQA37PKGDh4SWJ28 AZmZVkpEbPTDzEjmIqBxwKGyatKxkJ5Cg/5e22MeR/3r5wafcQLNbbCqHJbHREDq n6c9DWAJcjYOgsZgoI8VezKYzMkUUbHfZcZKv8/OAiBN5OYIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEyC/uhzFc3PVb3WqYXaWIgnurBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNjA5ZTQ4ZmEtZGU5NS0z ZmQ2LThjMDMtODVlMzg5M2ZhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTFbfEfqlJFgwl6ytc6iBLnS7yxvj7LKabi1A89H4WBAt3S76Gq5ijv qPxPReGrrDnDmHlTDCWPqqpo0hhr3VrGPe7/bUc7J0A3v1OUGIWOZbk1UP6/TZlH 0feWBx8+6cRmlJp9M/oDA8FUJA+osBK1L53X3YdJkIQZ5tWzoehBMkhLMjK46BaE n2ddGFlOgBMZLdKIT1V2vbOjX00uwGuQeati4mlBcBKa1MsiiudUTQENav+NZndS wJmw+PO7dOpAELZ4GhD2zc0rSuO0f758VRsqLWxh9g/aDC8K61ibGcuW7Vg6op03 uvNXaYQN8Jutj9GlXimHo2ElKbrJGsA= -----END CERTIFICATE-----Generated at Wed May 13 11:59:26 2026 by rpki-client