$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9a82bc1-4f61-35be-8e20-32d8fe30f39e.roa File: d9a82bc1-4f61-35be-8e20-32d8fe30f39e.roa (raw, json) Hash identifier: 5ndT9/bld9HUkL56meLCK4rMTPJy3Qt51YprwKAfbr0= Subject key identifier: 92:31:AD:5F:AE:40:34:1E:EE:53:D1:38:03:28:96:19:DD:9D:3B:F9 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F593E2F50E6596512454FA280 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9a82bc1-4f61-35be-8e20-32d8fe30f39e.roa Signing time: Wed 30 Sep 2026 16:47:41 +0000 ROA not before: Wed 30 Sep 2026 16:47:41 +0000 ROA not after: Tue 29 Dec 2026 17:47:41 +0000 asID: 62904 IP address blocks: 107.158.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:3e:2f:50:e6:59:65:12:45:4f:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 16:47:41 2026 GMT Not After : Dec 29 17:47:41 2026 GMT Subject: CN=bd579e7e-905d-4781-a091-d56dcc2dbff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:60:d5:dc:86:24:ee:bd:de:7e:73:55:03: 4b:21:7b:2e:64:53:7c:a6:4c:0b:ad:b2:38:cd:42: 7a:d4:72:a8:96:06:6e:2c:cb:33:23:d0:0b:77:20: d0:4a:69:55:a7:5f:93:ec:5e:20:9b:5b:ac:80:2f: 3a:71:b2:71:1b:fc:87:f5:ce:79:e0:70:6b:99:35: 1c:4e:60:65:fb:54:d0:c4:68:5b:93:55:47:67:ec: f0:8f:c7:5e:d8:9f:cf:12:98:2b:5f:52:f8:74:53: 1c:d7:f2:83:2d:87:7f:40:c8:d7:30:5a:56:6c:00: 58:bd:21:32:07:4e:dd:65:43:02:a2:d0:58:f2:3b: ea:34:17:ca:ea:3c:82:03:26:35:31:7c:8b:d6:74: 0d:b5:64:80:dd:a7:c1:e3:50:eb:d0:30:fa:a4:61: 07:fd:f4:66:95:b9:b7:f6:30:ef:df:71:74:29:0e: c5:17:51:36:23:64:06:03:0b:40:dc:ed:70:01:ef: a4:36:b9:19:17:68:fb:2c:7e:fd:13:fe:a2:c8:bc: 19:6f:02:d4:9d:fb:77:91:73:57:92:06:d2:a7:ce: c2:ae:eb:20:e3:e5:6a:be:0f:7b:26:e8:19:14:52: dc:3c:b8:08:03:5e:2e:0d:e7:3b:d2:49:2e:71:a4: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:31:AD:5F:AE:40:34:1E:EE:53:D1:38:03:28:96:19:DD:9D:3B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d9a82bc1-4f61-35be-8e20-32d8fe30f39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:76:6f:db:5e:fd:58:16:41:39:88:6f:c3:27:4e:32:dd:50: b4:d9:5f:9b:09:20:5f:7d:56:55:2f:0a:1a:c8:f1:43:97:5c: 53:1d:b6:d7:3c:39:b6:65:54:cb:2e:d3:03:5f:55:a4:a2:0f: 50:7d:a5:8b:0f:69:14:be:a3:ee:e6:4b:7a:76:4d:83:0f:b1: 30:78:a2:30:50:d9:a9:85:cb:4a:bd:44:46:b1:40:76:16:5f: 9b:37:30:72:6d:c3:41:17:58:69:86:4e:04:c0:ed:c9:16:96: d9:d0:ed:e0:c1:28:e9:f1:d6:4c:b1:64:11:9e:9f:47:e6:4b: 24:3a:f5:29:71:ff:fe:04:89:d7:5f:14:ff:bb:15:69:a0:6d: be:ca:96:cc:c8:98:44:f2:8f:56:c7:b7:81:75:ee:92:08:97: a1:62:36:e9:69:5a:1a:e0:1c:7e:e9:9b:4c:89:8e:f0:3d:d1: 4d:cc:c2:b9:db:19:91:f5:b8:08:6a:8b:7b:ae:d6:ad:88:95: dc:e8:d8:5c:4c:b9:08:82:16:e8:b4:78:f1:c1:7e:b3:3f:c0: 86:bc:4f:ef:29:bf:08:5e:a2:ab:08:65:9b:8d:e2:44:26:21: 56:d9:dc:16:07:f2:98:d9:64:59:97:73:7a:9d:10:0b:c8:74: 4f:5f:fe:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZPi9Q5lllEkVPooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkzMDE2NDc0MVoXDTI2MTIyOTE3NDc0MVowLzEtMCsGA1UEAxMk YmQ1NzllN2UtOTA1ZC00NzgxLWEwOTEtZDU2ZGNjMmRiZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvExg1dyGJO693n5zVQNLIXsuZFN8pkwLrbI4 zUJ61HKolgZuLMszI9ALdyDQSmlVp1+T7F4gm1usgC86cbJxG/yH9c554HBrmTUc TmBl+1TQxGhbk1VHZ+zwj8de2J/PEpgrX1L4dFMc1/KDLYd/QMjXMFpWbABYvSEy B07dZUMCotBY8jvqNBfK6jyCAyY1MXyL1nQNtWSA3afB41Dr0DD6pGEH/fRmlbm3 9jDv33F0KQ7FF1E2I2QGAwtA3O1wAe+kNrkZF2j7LH79E/6iyLwZbwLUnft3kXNX kgbSp87Crusg4+Vqvg97JugZFFLcPLgIA14uDec70kkucaRCrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIxrV+uQDQe7lPROAMolhndnTv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDlhODJiYzEtNGY2MS0z NWJlLThlMjAtMzJkOGZlMzBmMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR2b9te/VgWQTmIb8MnTjLdULTZX5sJIF99VlUvChrI8UOXXFMdttc8 ObZlVMsu0wNfVaSiD1B9pYsPaRS+o+7mS3p2TYMPsTB4ojBQ2amFy0q9REaxQHYW X5s3MHJtw0EXWGmGTgTA7ckWltnQ7eDBKOnx1kyxZBGen0fmSyQ69Slx//4Eiddf FP+7FWmgbb7KlszImETyj1bHt4F17pIIl6FiNulpWhrgHH7pm0yJjvA90U3Mwrnb GZH1uAhqi3uu1q2Ildzo2FxMuQiCFui0ePHBfrM/wIa8T+8pvwheoqsIZZuN4kQm IVbZ3BYH8pjZZFmXc3qdEAvIdE9f/mw= -----END CERTIFICATE-----Generated at Sun Oct 11 19:01:53 2026 by rpki-client