$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7158ab72-e853-35e6-8ef9-032a9c25d389.roa File: 7158ab72-e853-35e6-8ef9-032a9c25d389.roa (raw, json) Hash identifier: b2xQXm01UyHx7W1sIl+CFCWi//hpQVI2blZNN3RW+UI= Subject key identifier: 5B:8E:44:DE:F4:6A:BB:36:E8:39:3A:A4:96:8B:A3:A8:53:A6:37:21 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B0746D5519D4FF6EECDA70300 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7158ab72-e853-35e6-8ef9-032a9c25d389.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 215595 IP address blocks: 107.158.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d5:51:9d:4f:f6:ee:cd:a7:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=d1bcb936-d49f-4105-a2e1-10a5d0c83e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:59:7b:f9:cd:f8:42:ce:47:9a:91:23:e4: f4:e3:2e:c5:0a:92:bd:66:65:d3:84:62:ad:7f:6a: 13:3f:fb:50:59:f8:ae:85:1d:29:52:03:f1:f1:c3: d0:01:77:a3:69:26:db:69:05:ca:3c:ca:c0:39:df: 61:1f:ce:78:6f:6d:e1:4b:03:8c:ef:ad:ab:ab:4f: 8a:a1:cc:2b:f2:16:49:e8:38:bc:9b:dd:09:0f:36: 02:ad:07:15:ce:40:1e:1f:6a:a1:91:64:72:2d:f4: c1:2b:fe:cf:26:33:7d:f9:2e:40:bc:d0:a4:c4:b8: 81:9c:6e:f8:ad:16:22:e4:82:8f:bc:a2:1a:28:3a: f8:48:2a:02:75:35:c1:32:b0:f9:fa:9e:d8:9c:97: e7:79:91:7c:58:69:45:c1:f6:4e:1c:b6:95:f4:3a: a6:f1:e9:2b:de:4e:cb:2f:7a:93:7a:d3:e8:8d:55: 06:46:9b:d5:66:26:be:19:22:ee:04:c0:3f:ea:09: 77:b0:87:fd:f0:92:d5:32:56:f7:60:34:b2:55:d5: c3:d9:35:be:a5:5c:e4:e4:eb:90:3d:5c:07:67:ee: e4:52:d3:85:8a:8a:f7:d8:27:76:c3:f7:b0:ad:bf: 91:1f:c1:32:b5:0a:34:b0:cf:f2:61:82:be:28:61: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8E:44:DE:F4:6A:BB:36:E8:39:3A:A4:96:8B:A3:A8:53:A6:37:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7158ab72-e853-35e6-8ef9-032a9c25d389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:bb:fb:fc:5b:18:9d:8e:c1:46:4f:56:cd:34:93:3e:91:d7: 04:92:07:68:65:51:00:c6:51:c5:0b:da:12:33:c9:89:ad:6f: ec:6a:11:cf:c7:b3:e4:74:4d:67:bd:46:13:76:9a:40:ac:15: e9:6f:3b:a4:a2:89:ea:0e:42:0c:74:5c:c3:ba:95:4d:c3:73: e0:66:d1:03:60:be:ff:14:c4:1b:1f:47:47:7d:cc:c8:76:c4: c6:dc:83:fa:c9:17:68:33:34:05:bb:26:e0:52:24:82:3f:76: de:29:45:7f:d8:a0:f2:9f:b8:b6:d9:74:fe:67:b0:6c:6c:56: 83:84:f2:b5:9d:b8:89:50:d2:4f:0b:b7:ec:e9:8d:81:e9:21: ac:b0:4d:86:58:c4:20:9f:22:d1:6b:39:7d:e2:92:79:6b:6b: 38:6a:6d:0d:c1:11:e0:0d:85:8a:d9:fb:0e:27:a5:2f:3c:bc: 7a:d3:19:53:09:74:c9:b2:f4:10:0d:0a:b5:ec:02:20:81:90: 3b:ce:6b:5c:94:5b:5c:02:f2:dc:81:b4:82:78:08:32:85:20: 55:7f:58:40:d3:b3:97:26:94:80:c3:96:70:28:95:03:1f:56: 0a:76:d2:f2:92:4e:c4:5e:09:c8:69:b0:af:55:e5:9d:3a:b6: 28:4e:2e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtVRnU/27s2nAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZDFiY2I5MzYtZDQ5Zi00MTA1LWEyZTEtMTBhNWQwYzgzZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYVZe/nN+ELOR5qRI+T04y7FCpK9ZmXThGKt f2oTP/tQWfiuhR0pUgPx8cPQAXejaSbbaQXKPMrAOd9hH854b23hSwOM762rq0+K ocwr8hZJ6Di8m90JDzYCrQcVzkAeH2qhkWRyLfTBK/7PJjN9+S5AvNCkxLiBnG74 rRYi5IKPvKIaKDr4SCoCdTXBMrD5+p7YnJfneZF8WGlFwfZOHLaV9Dqm8ekr3k7L L3qTetPojVUGRpvVZia+GSLuBMA/6gl3sIf98JLVMlb3YDSyVdXD2TW+pVzk5OuQ PVwHZ+7kUtOFior32Cd2w/ewrb+RH8EytQo0sM/yYYK+KGF0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuORN70ars26Dk6pJaLo6hTpjchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNzE1OGFiNzItZTg1My0z NWU2LThlZjktMDMyYTljMjVkMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa54nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB67+/xbGJ2OwUZPVs00kz6R1wSSB2hlUQDGUcUL2hIzyYmtb+xqEc/H s+R0TWe9RhN2mkCsFelvO6SiieoOQgx0XMO6lU3Dc+Bm0QNgvv8UxBsfR0d9zMh2 xMbcg/rJF2gzNAW7JuBSJII/dt4pRX/YoPKfuLbZdP5nsGxsVoOE8rWduIlQ0k8L t+zpjYHpIaywTYZYxCCfItFrOX3iknlrazhqbQ3BEeANhYrZ+w4npS88vHrTGVMJ dMmy9BANCrXsAiCBkDvOa1yUW1wC8tyBtIJ4CDKFIFV/WEDTs5cmlIDDlnAolQMf Vgp20vKSTsReCchpsK9V5Z06tihOLqU= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:32 2025 by rpki-client