$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa File: 39b21eff-11aa-3f46-9161-0f08c58454cb.roa (raw, json) Hash identifier: OhuWlDkzllFl3t88ocWHB4v+/5/wlx4zeE9mhvuLeHs= Subject key identifier: D1:FA:74:5E:4E:45:E9:3C:27:F5:26:7E:B8:7D:54:16:0E:F9:7D:69 Certificate issuer: /CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Certificate serial: 010D0C9F4328584F2957CDA3EF05398BFC2CB300 Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 3356 IP address blocks: 107.191.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:cd:a3:ef:05:39:8b:fc:2c:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=d9b9afa6-1f6c-4f3d-81bc-3b5541d1a925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:ba:5e:e9:3f:1e:3e:fa:75:7e:50:f7:49: 88:86:a3:84:e4:58:8d:3f:b1:a2:52:07:9c:68:33: b3:8e:d4:d9:9b:9b:24:ab:48:8e:48:60:76:69:88: 7a:bd:30:99:b3:e7:ec:b3:12:68:bd:56:86:90:14: e7:f0:74:48:44:0e:38:cf:71:62:d6:90:71:92:23: 66:14:88:1a:0d:5c:14:b4:64:15:8d:03:c2:be:42: f9:4b:cf:8f:6f:14:22:ee:9b:8c:65:c8:9b:1f:3c: 63:59:74:4a:f2:95:d9:81:68:91:16:6e:48:4e:48: d8:d3:50:5a:01:0f:32:13:1b:5e:bb:76:d0:58:d6: fd:ec:c2:40:19:e4:8a:2b:7c:4d:66:5f:cf:1f:41: c8:dc:22:3d:77:3a:b4:15:50:94:2c:5a:29:c8:0f: 4b:60:5c:a7:ca:0f:81:84:19:e8:d3:6d:6c:31:5e: 11:49:41:25:d9:7d:b0:f8:1c:5d:2f:72:1f:75:6b: fc:19:29:02:f2:1a:72:54:24:9c:f8:81:68:31:bd: 13:fd:a7:04:6d:63:78:76:46:8a:08:3f:54:7a:a2: b4:27:2a:82:13:f9:02:91:8f:d8:d9:b2:3e:4b:12: ca:48:eb:b5:fe:3a:70:e1:50:6d:ca:83:fb:1b:42: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FA:74:5E:4E:45:E9:3C:27:F5:26:7E:B8:7D:54:16:0E:F9:7D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl X509v3 Authority Key Identifier: keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer sbgp-ipAddrBlock: critical IPv4: 107.191.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d0:69:18:23:76:bb:05:20:6f:bd:c9:61:ba:d0:03:d7:72: 5e:65:93:dc:8d:9a:ff:71:59:bf:18:30:24:0a:d9:45:66:fd: 02:f7:ed:99:23:97:54:a7:b0:98:51:07:41:fc:18:9b:2b:3b: ae:a6:be:62:33:86:d3:45:63:be:02:7a:47:f9:cb:ce:12:d6: f3:1e:61:97:54:ce:89:5d:ba:75:ed:fa:31:96:2d:94:c9:62: 97:54:4e:d3:1e:dc:bc:73:7b:3a:d1:70:33:2b:fb:d1:90:eb: cd:ad:e9:1b:5d:b3:26:49:0a:57:1d:c6:c7:b3:56:6f:11:56: 8d:4e:51:c5:ca:12:81:a2:14:f2:0a:8f:97:81:e1:4e:6d:c4: 5b:b2:bc:6d:5c:c7:c5:9f:0e:af:1d:7c:a3:a8:25:0a:2d:f6: 12:8d:9e:fc:97:d0:07:8e:3d:3b:d8:5f:11:9e:cf:cc:ff:8b: 8d:7b:29:4c:1e:15:ca:60:6c:dd:92:bc:9f:2d:e3:b5:52:1d: 6d:fa:98:f6:c2:9c:40:f9:f8:8f:5b:4d:fa:bc:65:4b:90:aa: a5:73:42:49:60:9a:12:42:63:82:4c:2c:a4:4e:27:3f:b9:00: 3b:19:44:36:e6:c3:a2:94:d4:9a:1f:15:60:03:ce:20:ed:59: a5:49:92:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV82j7wU5i/wsswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlNGM4ODEtMDM3Ny00OWY1LTlhZjUtNDEwZDMwZmI1 NTI3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZDliOWFmYTYtMWY2Yy00ZjNkLTgxYmMtM2I1NTQxZDFhOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8y6Xuk/Hj76dX5Q90mIhqOE5FiNP7GiUgec aDOzjtTZm5skq0iOSGB2aYh6vTCZs+fssxJovVaGkBTn8HRIRA44z3Fi1pBxkiNm FIgaDVwUtGQVjQPCvkL5S8+PbxQi7puMZcibHzxjWXRK8pXZgWiRFm5ITkjY01Ba AQ8yExteu3bQWNb97MJAGeSKK3xNZl/PH0HI3CI9dzq0FVCULFopyA9LYFynyg+B hBno021sMV4RSUEl2X2w+BxdL3IfdWv8GSkC8hpyVCSc+IFoMb0T/acEbWN4dkaK CD9UeqK0JyqCE/kCkY/Y2bI+SxLKSOu1/jpw4VBtyoP7G0IgXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH6dF5ORek8J/Umfrh9VBYO+X1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0 Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBkMzBmYjU1MjcvMzliMjFlZmYtMTFhYS0z ZjQ2LTkxNjEtMGYwOGM1ODQ1NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDhlNGM4ODEtMDM3Ny00OWY1LTlh ZjUtNDEwZDMwZmI1NTI3L2Q4ZTRjODgxLTAzNzctNDlmNS05YWY1LTQxMGQzMGZi NTUyNy5jcmwwHwYDVR0jBBgwFoAU+GUVnd9PPVYksArZYvT7T4Li004wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBk MzBmYjU1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzQaRgjdrsFIG+9yWG60APXcl5lk9yNmv9xWb8YMCQK2UVm/QL37Zkj l1SnsJhRB0H8GJsrO66mvmIzhtNFY74Cekf5y84S1vMeYZdUzoldunXt+jGWLZTJ YpdUTtMe3LxzezrRcDMr+9GQ682t6RtdsyZJClcdxsezVm8RVo1OUcXKEoGiFPIK j5eB4U5txFuyvG1cx8WfDq8dfKOoJQot9hKNnvyX0AeOPTvYXxGez8z/i417KUwe FcpgbN2SvJ8t47VSHW36mPbCnED5+I9bTfq8ZUuQqqVzQklgmhJCY4JMLKROJz+5 ADsZRDbmw6KU1JofFWADziDtWaVJku0= -----END CERTIFICATE-----Generated at Wed Sep 23 11:03:06 2026 by rpki-client