$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa File: 95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa (raw, json) Hash identifier: AtELJWycGNVqLISNFXKhXOUw7gSkempD4N+kzVwOS14= Subject key identifier: 89:4F:13:2D:3B:11:29:02:9D:CD:3D:FB:74:AC:53:BA:F2:C2:1F:6D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F4973689E9DBC5319FAF42000 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 107.158.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:68:9e:9d:bc:53:19:fa:f4:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d9e0e71-b4ca-4d80-a09b-602d319a0bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:61:5d:7c:c7:53:f1:96:4d:3b:70:2d:e3: b0:28:62:4b:0e:d9:77:39:31:df:3b:03:fc:f3:6a: c5:39:7f:03:b9:c6:cd:7b:d8:56:6b:cb:ae:ff:35: ef:9a:58:c0:ce:6f:45:71:0c:0c:5b:2d:9f:f6:a9: 3b:0a:7a:0d:82:69:3b:19:9b:b8:6a:e3:49:28:d5: 98:8f:e3:0b:df:d5:4a:32:b9:51:c5:45:7b:d6:2e: 31:af:5b:77:58:53:81:8e:3a:ca:b4:16:69:4f:11: 96:53:d0:c6:fd:32:f6:53:20:b0:a4:70:a0:e1:fd: af:61:68:09:2b:05:6e:79:02:c5:e3:65:65:f1:83: e2:da:56:56:b0:30:9f:2a:42:45:f1:75:b8:ba:48: be:54:c3:96:28:33:14:b4:9c:9c:cb:20:e9:1a:51: 4a:7c:9a:e3:67:75:cc:35:5a:2b:f7:ba:34:87:90: de:2b:91:f8:3b:3b:76:f2:ca:af:f7:e0:5f:19:51: 23:6a:a8:4e:24:00:01:a2:c4:d8:d7:a7:10:7c:dc: db:61:6a:20:04:d0:ec:db:8c:6f:17:6c:00:d6:0f: 41:52:77:c1:be:d6:e0:05:d9:46:f1:b4:5d:8d:d3: bb:cc:d8:72:4d:52:da:32:9c:66:ac:2b:da:4f:7f: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:13:2D:3B:11:29:02:9D:CD:3D:FB:74:AC:53:BA:F2:C2:1F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:87:18:80:70:ee:a7:c4:c9:97:77:c8:ec:5c:28:4a:05:46: 70:eb:35:73:08:ad:5f:d7:39:71:ae:5c:51:8b:35:18:ce:0b: 38:fb:ee:b1:a7:d1:5b:16:48:6c:d1:e7:b0:86:16:ac:96:4b: 0a:be:13:8a:41:4e:17:e7:03:e8:dd:63:ab:ed:17:93:56:18: 0e:2e:ad:39:33:f6:1e:4b:6e:6f:d8:43:8c:0c:0d:2f:da:9e: 03:b1:8b:31:18:17:af:87:29:30:73:3b:d0:3e:97:b2:c0:4f: 41:40:69:6e:9f:99:f3:00:e6:59:cf:e5:a8:8b:54:a8:47:00: 77:52:1f:8b:82:9c:66:cd:fc:f4:12:8f:3f:c3:0b:84:29:71: 9d:59:8b:87:1e:a6:08:db:1d:fd:f7:62:10:ca:7d:f7:06:b3: 4f:76:c7:a5:d6:25:0e:35:df:cb:28:ac:a7:43:50:7a:42:05: 55:7a:ca:1c:05:2b:eb:31:49:14:ce:c0:9e:12:24:47:cb:29: 69:57:f7:2b:19:53:20:0b:7e:6b:09:4e:ef:31:4a:7c:da:00: fb:ec:2a:f2:80:e5:50:f7:0b:1a:46:02:92:50:c0:b2:d4:52: 22:9f:b3:07:55:be:86:00:c6:27:a2:bf:15:9e:49:60:b5:f4: 94:91:30:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2ienbxTGfr0IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ5ZTBlNzEtYjRjYS00ZDgwLWEwOWItNjAyZDMxOWEwYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBFhXXzHU/GWTTtwLeOwKGJLDtl3OTHfOwP8 82rFOX8DucbNe9hWa8uu/zXvmljAzm9FcQwMWy2f9qk7CnoNgmk7GZu4auNJKNWY j+ML39VKMrlRxUV71i4xr1t3WFOBjjrKtBZpTxGWU9DG/TL2UyCwpHCg4f2vYWgJ KwVueQLF42Vl8YPi2lZWsDCfKkJF8XW4uki+VMOWKDMUtJycyyDpGlFKfJrjZ3XM NVor97o0h5DeK5H4Ozt28sqv9+BfGVEjaqhOJAABosTY16cQfNzbYWogBNDs24xv F2wA1g9BUnfBvtbgBdlG8bRdjdO7zNhyTVLaMpxmrCvaT382uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlPEy07ESkCnc09+3SsU7rywh9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTViMmZhYWItMzk2ZS0z ZjM1LWJiZTctZWM1Yjg4Yzc1MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa54+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmHGIBw7qfEyZd3yOxcKEoFRnDrNXMIrV/XOXGuXFGLNRjOCzj77rGn 0VsWSGzR57CGFqyWSwq+E4pBThfnA+jdY6vtF5NWGA4urTkz9h5Lbm/YQ4wMDS/a ngOxizEYF6+HKTBzO9A+l7LAT0FAaW6fmfMA5lnP5aiLVKhHAHdSH4uCnGbN/PQS jz/DC4QpcZ1Zi4cepgjbHf33YhDKffcGs092x6XWJQ4138sorKdDUHpCBVV6yhwF K+sxSRTOwJ4SJEfLKWlX9ysZUyALfmsJTu8xSnzaAPvsKvKA5VD3CxpGApJQwLLU UiKfswdVvoYAxieivxWeSWC19JSRMGI= -----END CERTIFICATE-----Generated at Mon Sep 28 12:19:40 2026 by rpki-client