$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3dba2690-1c3d-3ae0-97b4-7c3e32e80277.roa File: 3dba2690-1c3d-3ae0-97b4-7c3e32e80277.roa (raw, json) Hash identifier: 5k//aEe75InJ0Hu01bjS16LK93bRY21WplvNZpbbv/E= Subject key identifier: F2:CE:75:34:80:B6:9E:F1:EB:A3:7C:3C:57:5B:F8:50:33:DA:80:27 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983748848B1312847462930 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3dba2690-1c3d-3ae0-97b4-7c3e32e80277.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 75.107.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:74:88:48:b1:31:28:47:46:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e91f754b-19a6-4f23-a7bd-58c31d4337e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:58:4d:6a:f0:2d:1d:e6:25:a8:d1:18:34: 36:04:b9:e2:93:50:cd:d3:93:cf:0c:ee:1c:8c:f8: 0d:07:bc:c7:14:32:47:d8:18:ef:56:df:b0:5e:74: e3:b2:13:33:67:81:4d:d8:c0:39:ee:83:53:02:9f: 95:73:b6:e5:66:e9:6a:46:2b:38:88:0f:1f:2a:fd: 6a:61:3e:e6:f2:42:e3:df:5c:63:91:40:67:25:a8: f4:f3:c9:9e:50:43:58:68:2e:30:81:83:b9:a4:9f: aa:96:7d:6f:c6:25:b9:ee:39:48:03:e9:27:33:64: 6e:c4:13:d2:51:50:e8:1f:33:ab:7f:d5:4d:9d:c3: ab:47:6c:46:46:5e:91:9f:0e:6a:52:7b:d9:db:42: 67:c2:33:71:5c:2b:94:c3:4c:1a:77:2f:15:32:4c: d4:35:77:b1:09:c1:d6:bc:ed:51:2c:63:a4:53:b9: 62:45:47:72:23:3a:1c:7a:f7:22:24:15:9d:08:17: 84:1b:d8:af:0d:19:50:34:82:28:22:4d:24:d9:cf: b9:f4:f4:c0:98:25:a7:75:84:17:05:58:c6:ae:84: 05:69:a6:00:06:08:e0:e2:7a:32:02:86:3d:4a:27: 24:96:30:14:35:6b:9f:1f:ff:be:7b:f4:9f:3b:b9: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CE:75:34:80:B6:9E:F1:EB:A3:7C:3C:57:5B:F8:50:33:DA:80:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3dba2690-1c3d-3ae0-97b4-7c3e32e80277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b6:af:9b:1f:97:54:51:f8:0e:a9:b3:47:a3:98:06:7a:c8: c9:94:ad:89:02:15:b5:c1:52:08:fb:0a:72:9f:02:58:ee:2f: 2a:06:d5:02:a2:7c:bd:41:54:e0:73:2d:c0:8b:04:82:d4:ef: 77:24:d3:3c:06:90:d9:d0:78:dc:0a:da:04:94:3e:22:ec:bb: 66:30:37:7c:0a:2b:99:1f:93:35:47:40:66:3e:e4:a9:da:f6: 85:f9:bb:9e:84:3f:c0:40:df:b4:cf:5b:54:bf:3b:b3:b1:6c: ca:e4:e5:f7:f9:07:9d:87:0b:b4:9d:b6:e3:68:33:fa:3c:8e: bc:5c:1c:04:f4:4d:31:0a:a4:e2:76:19:26:e7:e9:ed:1e:a3: ab:f1:90:7f:e5:ca:cd:b8:d8:80:63:9f:41:4a:94:70:1e:65: 96:9f:0a:85:dd:1f:9d:89:e3:57:24:e3:3e:38:46:b8:f4:30: 7e:a9:4f:b9:2f:80:ed:0c:98:3c:70:d4:fb:09:fe:33:a5:55: d4:36:95:0d:13:b3:0a:32:75:6b:0e:92:17:d3:25:45:8c:74: a9:7e:bb:1d:8e:ac:30:1e:32:7f:d7:0d:17:da:e2:55:3b:80: fa:45:d8:23:7b:a4:dd:01:87:95:04:7f:c7:a4:3b:5a:fc:95: 82:c8:e5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg3SISLExKEdGKTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTkxZjc1NGItMTlhNi00ZjIzLWE3YmQtNThjMzFkNDMzN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtBYTWrwLR3mJajRGDQ2BLnik1DN05PPDO4c jPgNB7zHFDJH2BjvVt+wXnTjshMzZ4FN2MA57oNTAp+Vc7blZulqRis4iA8fKv1q YT7m8kLj31xjkUBnJaj088meUENYaC4wgYO5pJ+qln1vxiW57jlIA+knM2RuxBPS UVDoHzOrf9VNncOrR2xGRl6Rnw5qUnvZ20JnwjNxXCuUw0wady8VMkzUNXexCcHW vO1RLGOkU7liRUdyIzocevciJBWdCBeEG9ivDRlQNIIoIk0k2c+59PTAmCWndYQX BVjGroQFaaYABgjg4noyAoY9SickljAUNWufH/++e/SfO7ncZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLOdTSAtp7x66N8PFdb+FAz2oAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2RiYTI2OTAtMWMzZC0z YWUwLTk3YjQtN2MzZTMyZTgwMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2uKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW2r5sfl1RR+A6ps0ejmAZ6yMmUrYkCFbXBUgj7CnKfAljuLyoG1QKi fL1BVOBzLcCLBILU73ck0zwGkNnQeNwK2gSUPiLsu2YwN3wKK5kfkzVHQGY+5Kna 9oX5u56EP8BA37TPW1S/O7OxbMrk5ff5B52HC7SdtuNoM/o8jrxcHAT0TTEKpOJ2 GSbn6e0eo6vxkH/lys242IBjn0FKlHAeZZafCoXdH52J41ck4z44Rrj0MH6pT7kv gO0MmDxw1PsJ/jOlVdQ2lQ0TswoydWsOkhfTJUWMdKl+ux2OrDAeMn/XDRfa4lU7 gPpF2CN7pN0Bh5UEf8ekO1r8lYLI5cs= -----END CERTIFICATE-----Generated at Sun Sep 27 01:27:48 2026 by rpki-client