$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bef242e3-42f0-3138-8404-71f9e6643c58.roa File: bef242e3-42f0-3138-8404-71f9e6643c58.roa (raw, json) Hash identifier: OPkZkttrhblO8SX4CucAR//dsdb8/vUYP8Taf3rtXTA= Subject key identifier: BE:C8:E2:B0:95:84:86:7E:3B:6B:6B:99:25:76:2B:6A:1E:31:FC:D1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F5936AC1F9EC5AF06151AF000 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bef242e3-42f0-3138-8404-71f9e6643c58.roa Signing time: Wed 30 Sep 2026 16:32:33 +0000 ROA not before: Wed 30 Sep 2026 16:32:33 +0000 ROA not after: Tue 29 Dec 2026 17:32:33 +0000 asID: 62904 IP address blocks: 107.158.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:36:ac:1f:9e:c5:af:06:15:1a:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 16:32:33 2026 GMT Not After : Dec 29 17:32:33 2026 GMT Subject: CN=c7523299-4651-4b9b-b8fe-2d5a8e7d6a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:c6:13:dd:02:58:c9:49:cd:05:73:59:70: 2b:8c:17:a5:e5:79:b5:ea:82:f8:23:8a:9a:e0:81: 1f:1b:29:45:5f:fa:29:0f:43:69:fc:d6:ec:82:3b: af:8c:c1:43:9f:3f:02:b3:a6:e4:1d:35:a0:97:75: 32:80:c3:15:b8:e8:d9:6d:50:c5:ce:fc:30:14:41: 2b:f8:c4:ca:97:ef:8d:47:be:6f:39:61:93:c8:0f: d5:d1:1e:d6:74:34:5c:bb:b1:57:0f:d2:e7:75:d8: ab:20:d7:bf:1d:69:04:2b:27:0d:85:38:07:9c:bf: d0:6d:91:fd:9e:48:a2:2c:d2:67:7b:99:58:b8:7b: 59:0d:dc:d6:a5:bc:4c:1a:a9:f1:56:1a:f5:8d:6a: 5c:50:90:41:a5:46:14:cc:94:a5:67:5b:ef:e1:40: 9c:20:d1:f5:d0:fb:f5:f5:b9:08:9f:72:50:77:1c: 52:a0:84:44:2c:ff:46:09:62:5a:af:f1:8d:02:83: 57:b8:1c:df:0e:e3:56:99:38:a0:17:d0:30:5f:61: 27:86:24:52:ca:bd:ea:9d:72:d4:24:6c:64:f8:30: 41:05:fb:66:b7:e5:62:e5:61:6f:0f:59:8d:7b:73: e1:14:52:f3:c6:66:4f:ce:f3:93:f3:a0:d3:89:af: 32:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C8:E2:B0:95:84:86:7E:3B:6B:6B:99:25:76:2B:6A:1E:31:FC:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bef242e3-42f0-3138-8404-71f9e6643c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:08:0b:72:39:c2:9c:32:23:78:7f:61:7e:eb:9b:d8:45:a2: 52:22:50:6d:ca:af:13:73:68:eb:0b:fd:2b:5c:79:ab:7c:ef: 54:a4:97:f0:b1:e0:b9:32:fc:0b:19:25:4e:be:ca:57:18:f6: e9:ba:e9:80:fa:ba:bb:ad:4a:20:8a:2b:59:e2:a8:8a:15:0a: 3a:c6:22:d4:69:63:4b:3f:1c:bf:02:13:7b:96:29:8d:fa:94: ca:cb:fe:bb:74:51:fb:df:ec:de:49:4f:f7:5e:2f:ad:bb:c8: 8f:e9:1e:31:da:5d:46:fe:2e:1c:13:19:f2:25:42:62:d7:7d: 5f:8f:b9:86:23:fe:f5:70:c0:3d:ae:46:51:9d:1c:ab:55:ec: c7:3b:b6:b6:32:d9:df:8b:4d:40:5b:a1:b4:7e:c7:87:ea:24: 11:06:41:f8:b6:7c:99:48:92:49:15:8a:b5:9e:12:79:83:fb: 14:bc:a3:8e:2e:57:35:8d:26:41:e5:50:3b:7a:81:f6:36:64: 14:ff:8d:08:93:a8:a9:a0:7c:69:2d:6b:89:4c:fa:97:de:2e: b7:d9:7f:7c:e8:53:0b:86:6e:18:46:ae:01:5d:02:7f:16:8d: 19:a0:d9:6e:c0:5f:1e:c2:cc:de:ad:9b:00:38:e4:9c:9d:cd: e4:15:8d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZNqwfnsWvBhUa8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkzMDE2MzIzM1oXDTI2MTIyOTE3MzIzM1owLzEtMCsGA1UEAxMk Yzc1MjMyOTktNDY1MS00YjliLWI4ZmUtMmQ1YThlN2Q2YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0/GE90CWMlJzQVzWXArjBel5Xm16oL4I4qa 4IEfGylFX/opD0Np/NbsgjuvjMFDnz8Cs6bkHTWgl3UygMMVuOjZbVDFzvwwFEEr +MTKl++NR75vOWGTyA/V0R7WdDRcu7FXD9LnddirINe/HWkEKycNhTgHnL/QbZH9 nkiiLNJne5lYuHtZDdzWpbxMGqnxVhr1jWpcUJBBpUYUzJSlZ1vv4UCcINH10Pv1 9bkIn3JQdxxSoIRELP9GCWJar/GNAoNXuBzfDuNWmTigF9AwX2EnhiRSyr3qnXLU JGxk+DBBBftmt+Vi5WFvD1mNe3PhFFLzxmZPzvOT86DTia8yIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7I4rCVhIZ+O2trmSV2K2oeMfzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmVmMjQyZTMtNDJmMC0z MTM4LTg0MDQtNzFmOWU2NjQzYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4IC3I5wpwyI3h/YX7rm9hFolIiUG3KrxNzaOsL/Stceat871Skl/Cx 4Lky/AsZJU6+ylcY9um66YD6urutSiCKK1niqIoVCjrGItRpY0s/HL8CE3uWKY36 lMrL/rt0Ufvf7N5JT/deL627yI/pHjHaXUb+LhwTGfIlQmLXfV+PuYYj/vVwwD2u RlGdHKtV7Mc7trYy2d+LTUBbobR+x4fqJBEGQfi2fJlIkkkVirWeEnmD+xS8o44u VzWNJkHlUDt6gfY2ZBT/jQiTqKmgfGkta4lM+pfeLrfZf3zoUwuGbhhGrgFdAn8W jRmg2W7AXx7CzN6tmwA45JydzeQVjXo= -----END CERTIFICATE-----Generated at Sun Oct 11 10:24:18 2026 by rpki-client