$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa File: 4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa (raw, json) Hash identifier: AcqIxMv/XaE22ny5OV6ETOXN1s1CGPCpxaNSvIPqFqc= Subject key identifier: C1:A4:54:71:7D:BD:14:FA:81:28:4A:65:6E:86:19:C6:31:BB:1D:6D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F1CC79B63A46A7492CCC91CE0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 62904 IP address blocks: 107.158.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:9b:63:a4:6a:74:92:cc:c9:1c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=77eb5c91-f07e-413b-9791-d774a26fa8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:89:fb:f6:d8:a1:89:d4:65:4f:30:fa:d9: fe:4f:21:a1:08:98:2f:1b:27:52:22:94:b4:78:c8: ce:57:47:df:31:41:fa:cf:b7:5c:67:b0:73:9c:bc: 71:38:fc:c6:4e:5a:63:27:44:73:a1:93:4e:a4:88: 38:36:f0:d9:19:2d:3b:14:2f:d6:f4:d0:c0:60:9a: 60:f5:c4:97:f1:a0:29:f9:f3:65:07:4e:98:39:3b: f7:50:bc:a9:2d:f3:21:12:6c:91:19:36:94:78:f5: 18:34:7a:54:7d:14:2f:8a:73:b8:a3:e9:a2:29:c1: ec:2e:bd:b3:69:c6:05:66:9c:e6:d4:c0:a2:70:53: 6f:cb:b1:fb:f5:9b:92:32:ce:80:50:7c:ee:93:24: c3:2b:92:3c:aa:f4:3a:2f:ef:a6:a0:fc:9b:9d:86: 12:3e:19:21:2d:f8:34:fc:c0:b1:ee:67:b6:ad:2d: 1f:32:a9:f2:f7:d6:bc:ce:ab:2e:8b:74:83:0f:0f: 22:70:ce:c4:9f:1a:aa:12:ca:66:27:61:cb:e5:c2: 63:bd:69:6f:0e:d0:47:dd:67:8a:d0:90:51:56:e9: 01:42:3a:7a:64:3b:df:bb:74:dd:fb:d3:c1:db:5f: e3:b9:35:c1:b7:20:90:03:93:fd:70:02:02:3a:db: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A4:54:71:7D:BD:14:FA:81:28:4A:65:6E:86:19:C6:31:BB:1D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:98:a8:79:76:91:09:e2:40:57:44:a0:86:53:4b:cc:8b:df: 4d:da:ca:a0:25:41:17:1a:c6:9a:65:41:e8:ec:eb:dc:99:bc: 7e:84:2a:a6:9c:fb:2f:27:d7:82:d9:c0:63:db:e4:b8:4e:62: d0:12:97:98:ae:28:c3:c8:b8:2c:e1:b3:96:23:e3:12:dd:44: 74:44:79:71:a8:66:fd:7d:36:78:05:94:35:64:b8:c3:e0:69: 01:e6:f7:fc:15:c1:db:60:7e:67:16:fd:fc:c7:ad:44:73:13: 91:48:24:28:d8:14:4e:24:fa:00:35:e9:d0:00:38:a8:8d:b6: a3:6c:8c:f5:1d:ad:f7:33:79:b7:4d:b0:79:a8:64:7e:50:e5: de:1d:09:c7:a6:bf:50:71:33:f6:2f:15:83:a7:a1:ec:c6:c2: f9:f1:db:2a:a9:f8:73:6d:87:25:ce:f5:fc:9f:94:9b:98:1e: 98:77:0e:46:c6:ca:d6:a5:66:fc:3c:f9:a0:8b:a9:c2:38:60: df:a2:df:3e:fa:22:2d:6a:d0:bf:7c:d2:72:0f:37:e7:97:43: f6:59:b9:36:26:a1:df:e7:3b:2d:96:a0:cf:96:ac:a9:bc:45: 75:74:9d:09:be:7b:50:00:d5:e4:fc:6b:74:70:6a:04:d5:76: 94:5a:63:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5tjpGp0kszJHOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NzdlYjVjOTEtZjA3ZS00MTNiLTk3OTEtZDc3NGEyNmZhOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2uJ+/bYoYnUZU8w+tn+TyGhCJgvGydSIpS0 eMjOV0ffMUH6z7dcZ7BznLxxOPzGTlpjJ0RzoZNOpIg4NvDZGS07FC/W9NDAYJpg 9cSX8aAp+fNlB06YOTv3ULypLfMhEmyRGTaUePUYNHpUfRQvinO4o+miKcHsLr2z acYFZpzm1MCicFNvy7H79ZuSMs6AUHzukyTDK5I8qvQ6L++moPybnYYSPhkhLfg0 /MCx7me2rS0fMqny99a8zqsui3SDDw8icM7EnxqqEspmJ2HL5cJjvWlvDtBH3WeK 0JBRVukBQjp6ZDvfu3Td+9PB21/juTXBtyCQA5P9cAICOtt7GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGkVHF9vRT6gShKZW6GGcYxux1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNGMyYTIwODAtOWM1Zi0z MWM4LTgwMWMtOWRjYTYwYzE0YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa57QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGYqHl2kQniQFdEoIZTS8yL303ayqAlQRcaxpplQejs69yZvH6EKqac +y8n14LZwGPb5LhOYtASl5iuKMPIuCzhs5Yj4xLdRHREeXGoZv19NngFlDVkuMPg aQHm9/wVwdtgfmcW/fzHrURzE5FIJCjYFE4k+gA16dAAOKiNtqNsjPUdrfczebdN sHmoZH5Q5d4dCcemv1BxM/YvFYOnoezGwvnx2yqp+HNthyXO9fyflJuYHph3DkbG ytalZvw8+aCLqcI4YN+i3z76Ii1q0L980nIPN+eXQ/ZZuTYmod/nOy2WoM+WrKm8 RXV0nQm+e1AA1eT8a3RwagTVdpRaY34= -----END CERTIFICATE-----Generated at Sun Sep 20 13:56:58 2026 by rpki-client