$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c682c53e-d148-326a-8892-90cd47ee7919.roa File: c682c53e-d148-326a-8892-90cd47ee7919.roa (raw, json) Hash identifier: srjRoGJfor4j+BglvHI/SOVs0a9luhkcybqEkQhguPY= Subject key identifier: 09:3D:6A:0E:C1:CF:47:B8:85:E3:CF:92:46:27:0B:B9:F1:1C:95:DF Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F5943462779C00CE9AA626210 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c682c53e-d148-326a-8892-90cd47ee7919.roa Signing time: Wed 30 Sep 2026 16:57:57 +0000 ROA not before: Wed 30 Sep 2026 16:57:57 +0000 ROA not after: Tue 29 Dec 2026 17:57:57 +0000 asID: 62904 IP address blocks: 107.158.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:43:46:27:79:c0:0c:e9:aa:62:62:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 16:57:57 2026 GMT Not After : Dec 29 17:57:57 2026 GMT Subject: CN=25f95dc8-e38e-4d8e-bf33-d7ce7af5236b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:99:0a:e0:6c:2f:e0:fe:a1:ae:e7:28:5c: 1a:64:60:c6:7a:bb:ca:25:8d:95:7f:32:51:1b:30: ac:b5:7e:52:65:ec:dd:a9:90:2d:47:18:82:53:e1: aa:54:cf:b3:53:9f:e7:7b:b9:f6:69:ec:66:61:f3: 0f:69:75:0b:dc:5f:ea:e8:33:7a:df:b5:03:c6:ff: b7:21:90:4f:53:05:aa:47:3a:41:23:a2:82:40:57: 8f:4e:37:5a:1b:37:c2:69:2a:5d:ee:5b:37:4e:1f: 1b:1e:be:62:54:32:69:e6:a6:0e:f7:cd:6e:3a:44: d1:e8:35:9b:02:ad:c2:5c:58:26:62:12:ee:9e:09: 9f:b2:0c:19:bd:a9:a0:a3:39:6d:d1:57:31:ff:0c: 45:df:5d:e6:b4:82:7f:2f:58:62:5d:51:d8:c6:67: b3:1e:3e:d3:b6:0d:a0:89:57:02:e2:b0:f6:ec:d3: d5:f6:58:71:1e:07:41:d4:7c:28:23:5e:86:dd:cc: 7d:b2:b4:f6:69:61:80:bc:17:9f:35:05:f1:8e:fb: ec:12:df:0d:de:f7:66:a2:af:10:41:a8:cb:0d:39: 12:a4:75:75:eb:8a:29:2d:ea:01:e7:18:d4:f3:c4: 15:c4:09:20:68:16:35:9d:99:03:55:21:de:0f:30: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3D:6A:0E:C1:CF:47:B8:85:E3:CF:92:46:27:0B:B9:F1:1C:95:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c682c53e-d148-326a-8892-90cd47ee7919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f8:d1:92:bb:e7:e3:50:af:d3:47:79:92:59:a6:15:f7:87: 6d:9b:8c:94:ae:b8:f5:d4:c8:b8:5b:16:f0:45:ed:34:e7:b6: 86:ce:f6:23:59:28:a0:33:d1:e8:af:31:e6:6b:58:45:9c:84: 7f:ab:90:d0:3e:b0:be:b0:ed:67:31:04:f0:4a:be:cc:81:fd: f3:c4:8f:63:b8:00:cf:16:05:0f:08:9a:b4:d7:45:de:9e:f5: 85:8e:a8:d6:3c:d3:34:5a:b0:4b:fe:d1:4f:3d:b3:d9:e0:ce: f4:b6:e1:d4:c2:b1:5c:58:40:eb:0e:be:29:15:64:43:bc:f9: b4:f1:ad:f9:36:66:64:75:ef:38:6f:e6:ab:4f:fa:04:f6:30: cd:27:ed:d5:d4:67:a4:2c:39:ee:ce:1c:c6:f1:43:0a:35:cf: b6:81:35:3d:4f:25:92:0f:bc:b8:66:f3:67:e5:3a:22:59:5b: 4a:16:fe:40:a5:ac:b8:55:0b:39:db:c3:40:c2:aa:b3:17:5c: b5:51:aa:09:3a:5b:35:6e:ca:12:93:5e:1f:c6:ce:e7:02:14: 62:1e:14:63:5c:a3:47:fe:83:7d:c7:f0:d4:03:f3:86:81:40: 39:07:86:39:83:22:e0:90:fa:3a:9d:80:86:f2:c6:43:be:7c: 5f:14:65:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZQ0YnecAM6apiYhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkzMDE2NTc1N1oXDTI2MTIyOTE3NTc1N1owLzEtMCsGA1UEAxMk MjVmOTVkYzgtZTM4ZS00ZDhlLWJmMzMtZDdjZTdhZjUyMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbyZCuBsL+D+oa7nKFwaZGDGervKJY2VfzJR GzCstX5SZezdqZAtRxiCU+GqVM+zU5/ne7n2aexmYfMPaXUL3F/q6DN637UDxv+3 IZBPUwWqRzpBI6KCQFePTjdaGzfCaSpd7ls3Th8bHr5iVDJp5qYO981uOkTR6DWb Aq3CXFgmYhLungmfsgwZvamgozlt0Vcx/wxF313mtIJ/L1hiXVHYxmezHj7Ttg2g iVcC4rD27NPV9lhxHgdB1HwoI16G3cx9srT2aWGAvBefNQXxjvvsEt8N3vdmoq8Q QajLDTkSpHV164opLeoB5xjU88QVxAkgaBY1nZkDVSHeDzCHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk9ag7Bz0e4hePPkkYnC7nxHJXfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzY4MmM1M2UtZDE0OC0z MjZhLTg4OTItOTBjZDQ3ZWU3OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa558MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX40ZK75+NQr9NHeZJZphX3h22bjJSuuPXUyLhbFvBF7TTntobO9iNZ KKAz0eivMeZrWEWchH+rkNA+sL6w7WcxBPBKvsyB/fPEj2O4AM8WBQ8ImrTXRd6e 9YWOqNY80zRasEv+0U89s9ngzvS24dTCsVxYQOsOvikVZEO8+bTxrfk2ZmR17zhv 5qtP+gT2MM0n7dXUZ6QsOe7OHMbxQwo1z7aBNT1PJZIPvLhm82flOiJZW0oW/kCl rLhVCznbw0DCqrMXXLVRqgk6WzVuyhKTXh/GzucCFGIeFGNco0f+g33H8NQD84aB QDkHhjmDIuCQ+jqdgIbyxkO+fF8UZeM= -----END CERTIFICATE-----Generated at Mon Oct 12 18:22:57 2026 by rpki-client