$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa File: 9637676f-8811-3a4f-93c6-1c237745e195.roa (raw, json) Hash identifier: 2sFAmB8Z6nonQmdiWlTVothKrbepMLctpCIrSkEZW+k= Subject key identifier: F7:04:8A:91:0D:74:99:1B:6B:7B:77:D8:67:A8:8E:09:29:53:B0:17 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F549D5BD773282A4980F74F80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 107.158.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5b:d7:73:28:2a:49:80:f7:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8e7220f7-c0a1-4a94-812e-e84a52797494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:f8:3c:6c:6c:61:cd:fc:55:66:1c:82:5f: 9f:21:be:47:63:ed:50:39:c4:c6:44:cc:44:52:9c: 64:d0:59:21:c8:8a:b8:44:1f:64:ba:2b:c3:81:3c: 81:86:74:25:a7:b2:54:6d:29:5a:b4:c0:69:9b:b0: b4:ae:1d:56:ee:a5:34:7d:09:58:40:27:b5:93:b2: 67:d7:1b:8f:29:3d:51:67:c4:2f:97:2f:86:fd:e0: f3:3a:34:29:ec:f6:a6:eb:c5:cb:79:b3:21:81:84: 5e:95:24:ea:a7:b6:4d:14:b5:c6:59:67:5e:26:e1: d3:a9:9f:52:43:06:1b:27:8b:a8:43:0c:39:68:c2: 54:7c:58:85:f6:60:89:5f:21:b3:4e:8f:b2:4d:ad: b9:75:50:72:cf:38:f6:e4:d6:e6:9b:4f:7d:3d:27: 3e:fe:7c:b1:8a:a9:90:0a:b6:03:80:9d:b5:1d:17: 47:82:2b:b5:af:b5:03:f3:db:ec:ea:fd:07:85:3b: eb:c9:79:9c:c9:52:00:f1:ef:c5:24:49:e9:b8:88: 81:8a:a1:f2:cb:41:28:33:5e:b2:d5:67:37:ac:e2: 23:d9:59:75:e6:6a:90:45:8a:d8:8e:e2:88:7c:06: 58:58:7f:7e:3f:3b:88:b0:1d:2c:b8:ad:3d:b5:80: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:04:8A:91:0D:74:99:1B:6B:7B:77:D8:67:A8:8E:09:29:53:B0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:73:9e:d9:7c:82:59:93:6d:d9:5b:3c:9b:04:09:1d:16:07: 88:52:0b:68:0e:de:e7:6f:a8:41:f3:29:73:91:8a:46:ff:ea: d9:58:43:36:32:55:d7:7a:c8:3e:24:35:5d:cf:4c:fc:0b:d4: 83:fa:b6:32:4e:ef:78:85:64:54:88:5e:34:40:f3:55:48:2a: fb:e1:ef:5e:4d:c0:f9:cf:d8:9d:a0:9a:54:4e:fb:14:a6:2c: e4:0b:67:f4:0e:25:ad:da:e1:53:64:c8:ce:05:56:57:c5:75: 6a:d2:b1:8f:c2:e7:11:c5:e5:69:7b:93:f7:d0:31:51:d6:3a: da:f7:be:34:89:e2:cf:0a:dc:c0:24:f1:cd:d2:5e:56:4d:7e: 7f:b7:cf:50:9b:c9:59:82:8c:6b:91:a7:54:55:77:b8:43:6a: 6d:72:6d:7b:a7:0b:05:75:14:d6:32:b7:35:c9:d8:5a:84:61: 0c:2c:cb:42:bf:64:81:66:e9:86:41:f2:a8:2c:55:6b:f4:aa: 48:6c:50:a1:f1:1a:a0:6c:af:3b:4f:05:64:49:e0:05:2b:6c: a6:b7:7c:b3:2b:04:3d:10:99:c4:e6:20:87:56:78:5c:d8:cd: 27:78:95:96:90:16:57:f7:8e:47:3a:d4:77:04:55:38:ce:88: 0d:4d:bf:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVvXcygqSYD3T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGU3MjIwZjctYzBhMS00YTk0LTgxMmUtZTg0YTUyNzk3NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa74PGxsYc38VWYcgl+fIb5HY+1QOcTGRMxE Upxk0FkhyIq4RB9kuivDgTyBhnQlp7JUbSlatMBpm7C0rh1W7qU0fQlYQCe1k7Jn 1xuPKT1RZ8Qvly+G/eDzOjQp7Pam68XLebMhgYRelSTqp7ZNFLXGWWdeJuHTqZ9S QwYbJ4uoQww5aMJUfFiF9mCJXyGzTo+yTa25dVByzzj25Nbmm099PSc+/nyxiqmQ CrYDgJ21HRdHgiu1r7UD89vs6v0HhTvryXmcyVIA8e/FJEnpuIiBiqHyy0EoM16y 1Wc3rOIj2Vl15mqQRYrYjuKIfAZYWH9+PzuIsB0suK09tYASdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcEipENdJkba3t32GeojgkpU7AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTYzNzY3NmYtODgxMS0z YTRmLTkzYzYtMWMyMzc3NDVlMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxzntl8glmTbdlbPJsECR0WB4hSC2gO3udvqEHzKXORikb/6tlYQzYy Vdd6yD4kNV3PTPwL1IP6tjJO73iFZFSIXjRA81VIKvvh715NwPnP2J2gmlRO+xSm LOQLZ/QOJa3a4VNkyM4FVlfFdWrSsY/C5xHF5Wl7k/fQMVHWOtr3vjSJ4s8K3MAk 8c3SXlZNfn+3z1CbyVmCjGuRp1RVd7hDam1ybXunCwV1FNYytzXJ2FqEYQwsy0K/ ZIFm6YZB8qgsVWv0qkhsUKHxGqBsrztPBWRJ4AUrbKa3fLMrBD0QmcTmIIdWeFzY zSd4lZaQFlf3jkc61HcEVTjOiA1Nv4Q= -----END CERTIFICATE-----Generated at Sun Oct 11 07:55:41 2026 by rpki-client