$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa File: 434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa (raw, json) Hash identifier: vUL9HOkEscZqK8HSxGCI6B8Bbp94CLL9TPHIJODElnI= Subject key identifier: D3:9F:42:DE:FF:FC:00:83:CB:D3:85:1B:3B:F3:DE:E5:1F:60:B7:AE Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EA7885CB9007E183D26F54F10 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 5650 IP address blocks: 107.158.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:5c:b9:00:7e:18:3d:26:f5:4f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f17dbf4b-5d2e-4549-ae32-f358b02b0266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:77:62:fb:92:c9:9f:32:6c:a8:c0:50:ed: 8f:d9:59:69:7b:0c:a6:da:b5:59:44:93:ed:cb:66: 64:6c:63:a9:38:21:3c:c3:56:b1:37:68:ad:aa:a3: 6e:97:20:38:4c:5a:aa:50:31:f6:86:3c:b7:f0:1a: 6c:9b:07:71:91:cb:45:85:f0:fa:ee:be:8b:71:cb: 0b:20:6f:20:45:d7:d2:a1:16:c8:d2:25:47:70:2e: 35:b8:92:f3:c1:7f:3c:24:de:f9:e5:5b:7d:ce:20: f4:05:61:aa:c7:f9:64:07:f8:d5:f8:b7:40:f2:c3: 12:7e:a4:1e:97:ed:f2:0f:73:3d:ec:5c:dc:aa:ab: c5:67:1f:de:3e:dc:51:00:cd:9d:ca:50:60:9d:0a: 18:26:6c:22:86:ec:18:d6:9c:d3:aa:e2:a9:b2:86: 2e:0a:04:88:35:f7:9d:4a:36:89:fc:a9:b5:2f:e6: 0a:95:07:c5:58:fb:d2:f3:7f:d3:30:c3:f5:d1:b2: 31:86:a7:e2:ed:11:c2:a9:c9:88:95:80:6c:cf:3e: 39:2d:78:27:8b:de:c9:fa:3f:13:4a:31:88:14:d8: 8e:e9:c5:e9:62:be:50:36:d1:ec:1d:9d:46:9e:11: 35:f6:7a:ea:9f:41:03:db:b1:e4:31:4b:f8:69:74: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9F:42:DE:FF:FC:00:83:CB:D3:85:1B:3B:F3:DE:E5:1F:60:B7:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4e:ff:d0:9d:d6:ba:81:17:70:f2:51:45:a0:48:a4:fd:1a: 2a:f2:c8:74:ba:61:4c:e8:86:ec:70:97:4c:99:3e:af:94:29: f4:cf:dc:7c:ca:47:77:02:03:b9:f1:59:e0:58:c8:da:8e:dd: 1c:08:8a:9a:6b:62:5a:a7:38:b7:4f:9d:2c:81:4a:49:b0:e1: 26:ad:be:b2:7b:61:6b:32:f6:0a:64:34:ee:b7:dc:fc:fe:a3: 02:65:38:cb:ad:f3:00:07:72:4c:ca:fa:c6:93:82:2c:db:20: b7:bf:c7:5d:23:f8:82:7e:b4:61:64:e8:1d:9f:58:02:1b:18: d3:f3:81:e6:22:5d:3b:ff:6f:e7:42:ab:6d:31:ce:0d:27:a5: 07:a6:b9:73:0a:74:bd:90:4a:54:6d:c4:c5:f1:dc:c3:c8:dc: c2:6f:36:88:f1:e1:45:a2:eb:a4:2b:1d:c5:a5:2b:06:d6:39: cf:90:db:99:6b:3e:99:fb:02:ed:0d:97:1c:a4:df:96:7e:dd: 0d:fd:78:c8:ff:ee:03:48:9a:5e:2a:05:46:27:e7:bf:02:9d: cb:b8:6a:89:de:2d:53:7e:98:8f:55:d6:d2:e6:a8:18:9e:d7: 46:5c:5a:89:3e:12:60:69:25:c9:e7:80:50:40:2f:e2:7b:78: 49:47:0b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFy5AH4YPSb1TxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjE3ZGJmNGItNWQyZS00NTQ5LWFlMzItZjM1OGIwMmIwMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBl3YvuSyZ8ybKjAUO2P2Vlpewym2rVZRJPt y2ZkbGOpOCE8w1axN2itqqNulyA4TFqqUDH2hjy38BpsmwdxkctFhfD67r6LccsL IG8gRdfSoRbI0iVHcC41uJLzwX88JN755Vt9ziD0BWGqx/lkB/jV+LdA8sMSfqQe l+3yD3M97FzcqqvFZx/ePtxRAM2dylBgnQoYJmwihuwY1pzTquKpsoYuCgSINfed SjaJ/Km1L+YKlQfFWPvS83/TMMP10bIxhqfi7RHCqcmIlYBszz45LXgni97J+j8T SjGIFNiO6cXpYr5QNtHsHZ1GnhE19nrqn0ED27HkMUv4aXTIiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOfQt7//ACDy9OFGzvz3uUfYLeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDM0ZTIzZTgtMjdmMS0z ZGM4LTlhOGEtZjUyN2U3Mzg0ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5O/9Cd1rqBF3DyUUWgSKT9GiryyHS6YUzohuxwl0yZPq+UKfTP3HzK R3cCA7nxWeBYyNqO3RwIipprYlqnOLdPnSyBSkmw4SatvrJ7YWsy9gpkNO633Pz+ owJlOMut8wAHckzK+saTgizbILe/x10j+IJ+tGFk6B2fWAIbGNPzgeYiXTv/b+dC q20xzg0npQemuXMKdL2QSlRtxMXx3MPI3MJvNojx4UWi66QrHcWlKwbWOc+Q25lr Ppn7Au0Nlxyk35Z+3Q39eMj/7gNIml4qBUYn578Cncu4aoneLVN+mI9V1tLmqBie 10ZcWok+EmBpJcnngFBAL+J7eElHCzo= -----END CERTIFICATE-----Generated at Wed Jul 29 13:36:03 2026 by rpki-client