$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a413b97d-cf52-32ca-b767-c41340750b7a.roa File: a413b97d-cf52-32ca-b767-c41340750b7a.roa (raw, json) Hash identifier: WQA67QMyQG4g13KVdogKs6zUcvDmE0PSu27wqbw9Tc0= Subject key identifier: 18:60:C2:24:22:0C:0B:04:70:55:96:12:6D:C2:E4:E9:35:CA:6A:1F Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584F7E7DB6D05073C2A6A5908200 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a413b97d-cf52-32ca-b767-c41340750b7a.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 201106 IP address blocks: 107.191.112.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b6:d0:50:73:c2:a6:a5:90:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=0b9e5e0a-5572-4ea8-9110-25c119c77ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:f8:ff:59:86:23:2f:c3:84:3e:6c:50:d5: 6f:f5:41:13:10:d8:43:66:64:74:89:e1:23:a2:aa: 4f:67:48:d6:8e:e5:76:8d:79:8a:29:24:d7:d9:0d: aa:3e:73:40:6e:8b:15:7b:73:16:09:56:2b:42:38: 68:2d:48:62:32:30:3c:c8:f0:2a:2c:a2:11:af:e1: e5:ab:5a:5d:c4:b3:51:c0:40:96:b0:4b:55:91:d7: 08:3c:90:02:9b:04:d1:6a:0e:ba:df:0d:26:ec:35: 8a:07:75:63:5b:64:68:5f:25:33:fe:37:a6:87:55: ce:26:fd:82:3b:ab:e9:ab:b8:3f:66:d1:4c:4e:c1: b4:7d:e0:af:b0:3a:e1:d6:fb:b7:12:41:75:ff:a8: 55:9f:84:aa:b0:fb:fb:ff:0e:02:4a:ff:73:46:02: 9e:3d:7a:5c:42:26:6c:76:d4:30:89:51:55:bc:a4: e9:b2:6d:24:94:a5:fd:de:d0:23:99:c6:b3:d6:52: 06:c5:44:5e:5a:ca:3d:22:8a:f2:cd:5e:af:34:53: 7c:e6:c8:cd:d5:27:0a:ed:84:ff:07:93:85:6e:06: 64:e2:cd:53:17:65:26:90:f7:ff:1a:f9:2a:e3:77: 5a:da:20:83:55:8d:b9:5b:70:2a:35:d5:6b:75:80: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:60:C2:24:22:0C:0B:04:70:55:96:12:6D:C2:E4:E9:35:CA:6A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a413b97d-cf52-32ca-b767-c41340750b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 107.191.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d7:21:10:c6:21:01:38:9f:fe:cd:30:d5:c9:2e:67:38:8e: 5f:a4:34:fb:f2:62:6e:75:a5:9e:00:aa:2f:d4:ad:66:a9:7b: d6:0f:ca:eb:9b:ad:9a:62:a3:53:f4:8c:0c:7e:4d:4c:85:21: 72:45:d1:93:d1:19:e8:e4:64:2b:fd:94:f8:a4:ff:4b:e1:1a: fb:45:45:1f:e5:a6:c6:e4:db:7e:ec:88:1d:5a:9b:b1:bd:8f: 2c:b2:dc:b5:0d:dc:90:0a:bb:ad:09:cf:59:9b:c7:52:2e:84: 68:a1:b5:62:87:98:05:3f:dd:74:7c:1e:60:61:30:51:6f:98: 88:c3:6a:0c:1b:65:ff:1e:f5:1f:25:ef:9f:95:ca:43:78:7a: 2c:6b:6c:83:7b:34:1a:98:56:5b:66:c0:b2:62:c6:bc:94:f9: 42:89:f4:32:1a:0a:7e:b9:16:8a:72:a1:a2:db:c5:5f:2e:83: 26:9e:8d:66:56:b0:52:d1:cc:b7:d4:f7:00:1d:5c:64:74:0d: 7a:77:14:cc:e6:3d:03:7a:f7:e3:c3:78:4f:45:aa:38:40:b5: a7:cd:f0:9f:57:78:29:96:a4:df:3b:c6:d7:fb:af:c0:6f:9c: 67:c9:ba:73:e7:8d:e3:46:b2:bd:df:dc:86:4f:cf:f4:24:4c: af:39:2b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbbQUHPCpqWQggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MGI5ZTVlMGEtNTU3Mi00ZWE4LTkxMTAtMjVjMTE5Yzc3YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4f4/1mGIy/DhD5sUNVv9UETENhDZmR0ieEj oqpPZ0jWjuV2jXmKKSTX2Q2qPnNAbosVe3MWCVYrQjhoLUhiMjA8yPAqLKIRr+Hl q1pdxLNRwECWsEtVkdcIPJACmwTRag663w0m7DWKB3VjW2RoXyUz/jemh1XOJv2C O6vpq7g/ZtFMTsG0feCvsDrh1vu3EkF1/6hVn4SqsPv7/w4CSv9zRgKePXpcQiZs dtQwiVFVvKTpsm0klKX93tAjmcaz1lIGxUReWso9IoryzV6vNFN85sjN1ScK7YT/ B5OFbgZk4s1TF2UmkPf/Gvkq43da2iCDVY25W3AqNdVrdYBGawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhgwiQiDAsEcFWWEm3C5Ok1ymofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvYTQxM2I5N2QtY2Y1Mi0z MmNhLWI3NjctYzQxMzQwNzUwYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTXIRDGIQE4n/7NMNXJLmc4jl+kNPvyYm51pZ4Aqi/UrWape9YPyuub rZpio1P0jAx+TUyFIXJF0ZPRGejkZCv9lPik/0vhGvtFRR/lpsbk237siB1am7G9 jyyy3LUN3JAKu60Jz1mbx1IuhGihtWKHmAU/3XR8HmBhMFFvmIjDagwbZf8e9R8l 75+VykN4eixrbIN7NBqYVltmwLJixryU+UKJ9DIaCn65FopyoaLbxV8ugyaejWZW sFLRzLfU9wAdXGR0DXp3FMzmPQN69+PDeE9FqjhAtafN8J9XeCmWpN87xtf7r8Bv nGfJunPnjeNGsr3f3IZPz/QkTK85K+g= -----END CERTIFICATE-----Generated at Mon Nov 2 06:59:49 2026 by rpki-client