$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa File: d8158ea6-675b-392f-9e70-902e8aa16a98.roa (raw, json) Hash identifier: io3MyJ7PQ6V3yokLMkzLCooRelNrkjxwpjaRHmZ72yw= Subject key identifier: D0:B6:D9:C3:4B:EE:94:CA:FD:93:AF:51:4C:C3:3E:A4:0B:B3:17:E9 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584F2EED15F45669382939CE8320 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 394285 IP address blocks: 174.137.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:15:f4:56:69:38:29:39:ce:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=e56d65da-7fcf-430b-9327-cfe198b5b473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:6a:46:be:eb:8e:bd:11:43:e0:70:ad:bd: 69:74:3c:c3:a0:57:0e:52:cd:ca:8c:61:8d:2b:c7: be:d7:02:f9:3d:dd:cd:17:58:ec:72:ee:01:75:f4: 35:d1:d5:e5:e2:25:f6:99:8d:69:70:4e:03:ff:23: ad:f0:56:98:43:b1:da:a9:0e:40:e6:a8:e0:ce:a4: f6:fa:88:67:58:86:96:16:82:1a:fe:b7:32:01:7a: 0c:e6:d9:c4:aa:9e:b3:89:c2:69:11:91:c0:76:a5: 71:d9:17:73:f3:95:19:4e:1a:79:66:23:bd:b6:b4: 53:0f:05:4d:6a:4f:ce:00:ed:da:bb:df:eb:40:de: a7:b6:80:e8:3c:64:ed:09:eb:13:03:e5:db:da:bc: 30:82:45:fa:b0:26:81:d6:8f:c0:31:1e:32:d7:05: 22:65:ba:b3:7e:77:3b:4b:52:3f:c0:dd:06:27:6f: ef:5d:1c:6e:87:ed:77:3a:98:b6:4e:e2:1c:e2:f1: ac:f3:bc:b4:54:98:f0:04:8e:90:8d:c3:3e:51:2b: 5f:5b:0b:46:c2:56:c8:73:e9:68:c6:b6:63:a0:8d: 14:df:9c:03:c1:a6:1e:6a:bf:a4:46:0c:1c:48:c9: e8:fc:93:f3:c9:a4:07:1c:09:ce:65:67:6d:81:5c: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:D9:C3:4B:EE:94:CA:FD:93:AF:51:4C:C3:3E:A4:0B:B3:17:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c0:f6:5c:d6:b7:b8:a9:80:b5:ec:02:31:ed:14:10:e5:73: 70:5c:dc:62:39:5a:de:b6:55:cd:e4:90:da:f5:9a:ff:6f:36: 54:40:8a:66:f2:e3:97:99:65:9b:c8:57:b4:c8:42:c0:82:e9: f0:b9:08:11:64:05:a7:f9:15:e6:ea:63:b5:8b:a6:3e:84:52: e2:60:37:8b:cb:db:87:2b:e1:fe:da:29:96:6c:5e:1b:b5:9f: 4e:78:c9:64:4c:d1:dd:df:4d:93:77:8b:dc:2c:a0:6e:0f:c5: 79:c0:5c:a2:e3:0a:49:43:34:c8:dd:a4:b9:78:08:bf:85:0c: 51:d1:cc:e1:5e:4f:d2:71:88:28:fb:bc:39:bb:cc:4f:ff:83: a7:6b:e9:fd:7c:da:15:d7:3a:f4:11:8b:83:fd:e2:c2:df:ed: d7:b8:45:61:af:84:fa:0f:16:c4:77:1a:82:ea:8f:fb:65:81: e9:1a:80:a8:08:7d:2c:73:d1:f2:b3:bf:9f:e9:89:94:13:c5: 2c:ce:6f:90:0c:68:7f:9a:5a:a2:28:d7:22:f8:30:ec:86:5f: 40:a5:15:fe:4b:4f:da:99:fa:1f:99:36:59:87:fd:b5:72:25: 30:3c:71:74:4a:0a:aa:1c:78:1f:79:17:c8:43:e7:94:4c:bd: 98:8f:5e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RX0Vmk4KTnOgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZTU2ZDY1ZGEtN2ZjZi00MzBiLTkzMjctY2ZlMTk4YjViNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRVqRr7rjr0RQ+Bwrb1pdDzDoFcOUs3KjGGN K8e+1wL5Pd3NF1jscu4BdfQ10dXl4iX2mY1pcE4D/yOt8FaYQ7HaqQ5A5qjgzqT2 +ohnWIaWFoIa/rcyAXoM5tnEqp6zicJpEZHAdqVx2Rdz85UZThp5ZiO9trRTDwVN ak/OAO3au9/rQN6ntoDoPGTtCesTA+Xb2rwwgkX6sCaB1o/AMR4y1wUiZbqzfnc7 S1I/wN0GJ2/vXRxuh+13Opi2TuIc4vGs87y0VJjwBI6QjcM+UStfWwtGwlbIc+lo xrZjoI0U35wDwaYear+kRgwcSMno/JPzyaQHHAnOZWdtgVzidQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC22cNL7pTK/ZOvUUzDPqQLsxfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZDgxNThlYTYtNjc1Yi0z OTJmLTllNzAtOTAyZThhYTE2YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrolsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbA9lzWt7ipgLXsAjHtFBDlc3Bc3GI5Wt62Vc3kkNr1mv9vNlRAimby 45eZZZvIV7TIQsCC6fC5CBFkBaf5FebqY7WLpj6EUuJgN4vL24cr4f7aKZZsXhu1 n054yWRM0d3fTZN3i9wsoG4PxXnAXKLjCklDNMjdpLl4CL+FDFHRzOFeT9JxiCj7 vDm7zE//g6dr6f182hXXOvQRi4P94sLf7de4RWGvhPoPFsR3GoLqj/tlgekagKgI fSxz0fKzv5/piZQTxSzOb5AMaH+aWqIo1yL4MOyGX0ClFf5LT9qZ+h+ZNlmH/bVy JTA8cXRKCqoceB95F8hD55RMvZiPXpc= -----END CERTIFICATE-----Generated at Thu Sep 24 11:51:39 2026 by rpki-client