$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa File: 0bb8b992-e69b-3f68-9228-3d2a8870d832.roa (raw, json) Hash identifier: gKAij2SKhB0jGpLzYG/1UMvLLVAPJDXSk9TRSta5EoQ= Subject key identifier: 8E:91:BD:EF:7F:96:4E:75:97:6F:3E:5B:9C:93:D9:F9:85:E7:39:DB Certificate issuer: /CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Certificate serial: 010D0C9F4328584F2957CD26BB38C6361A12F780 Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 203 IP address blocks: 107.191.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:cd:26:bb:38:c6:36:1a:12:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=ee6901a6-be28-4996-ac0e-27842f628606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:84:34:3c:27:d3:1f:c9:5b:9f:63:72:d1: 56:b4:09:ce:bb:e5:bb:82:cd:8e:07:aa:f6:cf:01: 4d:d0:fd:4e:5a:68:18:90:f8:4a:f9:f1:a9:cb:da: e2:58:04:81:a5:35:a5:6b:ae:f0:96:cf:9a:67:22: 2c:fb:2a:78:da:28:82:c9:82:c6:69:c2:a3:4e:b3: 87:d7:c4:1d:37:f0:9b:ab:3d:7a:83:5e:dc:60:c5: b1:73:34:e3:e5:4f:92:1b:77:f7:60:ae:79:1d:38: e2:ed:34:c4:b9:a5:4e:3b:aa:fd:73:57:5b:d1:90: 88:5d:df:a9:87:9f:0a:45:39:bd:8c:b6:1a:36:03: 01:5a:bd:3c:5d:28:d5:3c:c0:de:82:2c:7d:71:ad: 8b:a5:95:62:d0:4b:a8:10:02:7b:e9:85:20:4c:f4: 83:62:1f:f0:67:25:1e:2f:7e:0f:12:1d:59:b5:6a: 3e:b4:8f:8c:8c:6b:2d:30:10:00:c9:b4:5b:c9:88: d8:7a:de:80:f4:a7:01:47:ad:a8:e3:8d:80:b5:88: ec:e7:17:41:d0:af:f5:94:c3:27:35:f4:8e:83:fe: ca:03:31:21:a0:c9:a0:e2:71:76:87:7c:94:d3:23: 1d:03:92:db:a3:66:22:4e:98:fa:f9:49:33:05:59: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:91:BD:EF:7F:96:4E:75:97:6F:3E:5B:9C:93:D9:F9:85:E7:39:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl X509v3 Authority Key Identifier: keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer sbgp-ipAddrBlock: critical IPv4: 107.191.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:34:6d:2a:a2:ed:55:f7:a2:b4:e5:41:3e:4a:33:23:bf:6e: fa:57:88:e7:f7:85:15:37:06:20:aa:ca:db:c7:01:17:8b:03: dd:a7:04:64:a8:a7:ed:c7:b2:85:06:49:e7:5d:c4:6c:c6:d0: 8c:0a:1e:3e:5e:e3:3c:68:55:d1:81:b5:58:36:9b:e9:9d:ea: c0:4e:2e:aa:5b:76:0f:6a:bf:53:53:5c:69:0e:d7:d3:87:cf: 2f:04:4d:ba:fb:7d:9f:f9:36:1f:33:d9:dd:32:4e:63:46:b2: f6:a8:0e:26:e6:bc:01:b6:81:3a:59:21:8b:b9:c2:15:95:53: 46:ad:bc:cb:6c:6e:1d:c3:19:6c:48:86:a4:f6:bf:f2:bb:f9: 6f:e2:84:fb:4a:51:92:e7:9c:d0:45:d2:d7:34:05:98:af:94: a6:70:e4:8f:0f:7a:fe:6d:1e:8f:35:91:75:4f:b7:b2:85:ab: f4:f0:c5:63:b7:f6:f2:63:5e:a9:fa:61:81:12:ae:c9:f1:90: ca:fe:5b:64:0b:a5:6c:c1:bd:39:4b:cb:62:ec:6e:64:6a:46: 16:17:d6:74:57:0b:27:07:6e:5a:e7:c5:6e:d3:bc:61:ce:09: c2:85:d8:9a:4d:46:62:f4:a8:2a:f0:bd:37:5a:68:84:b2:35: 2f:1c:58:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV80muzjGNhoS94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlNGM4ODEtMDM3Ny00OWY1LTlhZjUtNDEwZDMwZmI1 NTI3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZWU2OTAxYTYtYmUyOC00OTk2LWFjMGUtMjc4NDJmNjI4NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdiENDwn0x/JW59jctFWtAnOu+W7gs2OB6r2 zwFN0P1OWmgYkPhK+fGpy9riWASBpTWla67wls+aZyIs+yp42iiCyYLGacKjTrOH 18QdN/Cbqz16g17cYMWxczTj5U+SG3f3YK55HTji7TTEuaVOO6r9c1db0ZCIXd+p h58KRTm9jLYaNgMBWr08XSjVPMDegix9ca2LpZVi0EuoEAJ76YUgTPSDYh/wZyUe L34PEh1ZtWo+tI+MjGstMBAAybRbyYjYet6A9KcBR62o442AtYjs5xdB0K/1lMMn NfSOg/7KAzEhoMmg4nF2h3yU0yMdA5Lbo2YiTpj6+UkzBVl8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6Rve9/lk51l28+W5yT2fmF5znbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0 Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBkMzBmYjU1MjcvMGJiOGI5OTItZTY5Yi0z ZjY4LTkyMjgtM2QyYTg4NzBkODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDhlNGM4ODEtMDM3Ny00OWY1LTlh ZjUtNDEwZDMwZmI1NTI3L2Q4ZTRjODgxLTAzNzctNDlmNS05YWY1LTQxMGQzMGZi NTUyNy5jcmwwHwYDVR0jBBgwFoAU+GUVnd9PPVYksArZYvT7T4Li004wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBk MzBmYjU1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI0bSqi7VX3orTlQT5KMyO/bvpXiOf3hRU3BiCqytvHAReLA92nBGSo p+3HsoUGSeddxGzG0IwKHj5e4zxoVdGBtVg2m+md6sBOLqpbdg9qv1NTXGkO19OH zy8ETbr7fZ/5Nh8z2d0yTmNGsvaoDibmvAG2gTpZIYu5whWVU0atvMtsbh3DGWxI hqT2v/K7+W/ihPtKUZLnnNBF0tc0BZivlKZw5I8Pev5tHo81kXVPt7KFq/TwxWO3 9vJjXqn6YYESrsnxkMr+W2QLpWzBvTlLy2LsbmRqRhYX1nRXCycHblrnxW7TvGHO CcKF2JpNRmL0qCrwvTdaaISyNS8cWMI= -----END CERTIFICATE-----Generated at Sun Sep 20 19:30:20 2026 by rpki-client