$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/db8af1f2-0aa5-3f70-a859-a9f4123fca62.roa File: db8af1f2-0aa5-3f70-a859-a9f4123fca62.roa (raw, json) Hash identifier: uJjJ9I9lLNwwgzwtHJzEPy1YxO3y1ZKojxkwNXHdbMs= Subject key identifier: 99:AB:95:9F:18:31:2B:5B:F7:19:95:C0:3F:7C:AE:36:D5:C3:B0:E9 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F5933A5C5B71703F97BBEE900 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/db8af1f2-0aa5-3f70-a859-a9f4123fca62.roa Signing time: Wed 30 Sep 2026 16:26:27 +0000 ROA not before: Wed 30 Sep 2026 16:26:27 +0000 ROA not after: Tue 29 Dec 2026 17:26:27 +0000 asID: 62904 IP address blocks: 107.158.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:33:a5:c5:b7:17:03:f9:7b:be:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 16:26:27 2026 GMT Not After : Dec 29 17:26:27 2026 GMT Subject: CN=d62ce1a2-b88a-4498-9476-4ab658b5b464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:8d:60:99:da:d8:f9:de:ba:3b:99:33:19: 35:14:1d:b5:4c:3d:26:23:b6:db:24:10:4d:01:67: 69:9d:0d:96:f2:2f:f4:8f:61:73:07:e7:c7:29:dd: 87:b8:05:66:ce:36:6d:35:52:1d:8f:96:c9:6f:1b: fa:73:1e:c3:fe:c1:67:81:25:72:9c:17:93:46:78: e2:b5:a1:ab:ce:05:cb:eb:e7:bd:04:c7:34:c1:3c: f5:51:b2:58:9e:fa:cc:1f:33:16:04:d2:5e:53:ac: 4c:f8:c4:ca:26:5e:32:36:cb:29:3e:29:87:2a:b6: c4:27:d7:e5:85:61:3f:eb:81:b7:3d:96:e8:67:6e: 84:20:82:69:f8:72:5d:ca:56:76:9b:a1:bd:4d:f7: 19:bb:4a:21:08:89:e2:98:d2:17:60:23:d5:d4:a4: 06:b6:0e:b7:af:ab:40:26:6c:10:6d:70:47:c5:73: 11:97:94:d9:b7:2e:41:81:31:37:14:b3:b9:17:5d: 0f:ba:ec:1b:21:19:e3:83:24:fb:cc:bc:c7:43:6c: 43:39:ca:67:8c:f4:81:f8:72:fe:8f:b2:c1:25:6f: f6:2b:9e:54:7c:e5:c2:78:fa:0e:ad:f5:5f:6d:2d: 7b:fd:55:05:ec:90:65:f3:be:cd:c4:64:5a:b9:b0: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AB:95:9F:18:31:2B:5B:F7:19:95:C0:3F:7C:AE:36:D5:C3:B0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/db8af1f2-0aa5-3f70-a859-a9f4123fca62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9e:75:45:f7:05:78:df:72:15:09:8a:dd:b6:22:02:dc:0b: d0:76:d3:a9:9b:74:0d:13:66:00:32:7e:99:69:c3:8a:40:3c: e8:a7:4a:94:7e:27:3f:b6:d0:54:76:9b:f8:d6:55:c5:79:5a: d2:41:2d:3b:a7:56:45:19:12:46:bc:8c:aa:16:92:7e:f2:5a: c3:49:13:04:bb:97:5e:30:b8:65:22:8d:be:8b:86:0f:72:0a: 2c:36:e7:ab:69:26:f7:d3:34:92:74:2e:8b:fb:b1:b1:20:d0: 48:d6:87:53:8f:8e:1c:d1:b9:3c:80:74:7e:5c:47:27:b3:10: 6f:cb:2e:e9:e5:15:32:57:a5:a9:7f:29:07:ab:d0:58:04:9c: dd:52:ca:47:88:c4:92:b5:a1:ec:0a:c9:1e:37:f9:4a:25:e5: f0:26:6e:7c:b8:7d:8d:45:fc:e2:ec:c0:66:54:70:3b:2c:9b: 7c:00:89:f4:fb:c0:80:08:db:74:61:74:03:09:66:2b:64:df: 85:e2:f1:d9:60:f1:ce:55:49:53:25:3c:04:0d:c5:a3:6c:4b: ac:34:b2:0e:72:7b:7f:61:93:7f:e9:ee:31:d1:53:9d:fe:29: b2:b4:58:14:76:cb:56:15:36:40:f8:74:f3:3e:15:53:81:a5: cf:73:7e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZM6XFtxcD+Xu+6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkzMDE2MjYyN1oXDTI2MTIyOTE3MjYyN1owLzEtMCsGA1UEAxMk ZDYyY2UxYTItYjg4YS00NDk4LTk0NzYtNGFiNjU4YjViNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubeNYJna2PneujuZMxk1FB21TD0mI7bbJBBN AWdpnQ2W8i/0j2FzB+fHKd2HuAVmzjZtNVIdj5bJbxv6cx7D/sFngSVynBeTRnji taGrzgXL6+e9BMc0wTz1UbJYnvrMHzMWBNJeU6xM+MTKJl4yNsspPimHKrbEJ9fl hWE/64G3PZboZ26EIIJp+HJdylZ2m6G9TfcZu0ohCInimNIXYCPV1KQGtg63r6tA JmwQbXBHxXMRl5TZty5BgTE3FLO5F10PuuwbIRnjgyT7zLzHQ2xDOcpnjPSB+HL+ j7LBJW/2K55UfOXCePoOrfVfbS17/VUF7JBl877NxGRaubC0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmrlZ8YMStb9xmVwD98rjbVw7DpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGI4YWYxZjItMGFhNS0z ZjcwLWE4NTktYTlmNDEyM2ZjYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa54MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSedUX3BXjfchUJit22IgLcC9B206mbdA0TZgAyfplpw4pAPOinSpR+ Jz+20FR2m/jWVcV5WtJBLTunVkUZEka8jKoWkn7yWsNJEwS7l14wuGUijb6Lhg9y Ciw256tpJvfTNJJ0Lov7sbEg0EjWh1OPjhzRuTyAdH5cRyezEG/LLunlFTJXpal/ KQer0FgEnN1SykeIxJK1oewKyR43+Uol5fAmbny4fY1F/OLswGZUcDssm3wAifT7 wIAI23RhdAMJZitk34Xi8dlg8c5VSVMlPAQNxaNsS6w0sg5ye39hk3/p7jHRU53+ KbK0WBR2y1YVNkD4dPM+FVOBpc9zfuU= -----END CERTIFICATE-----Generated at Sat Oct 10 17:42:42 2026 by rpki-client