$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa File: 8504dbf1-b1c3-3afa-96dc-c510762f1210.roa (raw, json) Hash identifier: 5mYWOCzjyfmj7Ud4nN+IgByOuAfqPr6XTdV4Kxtg9io= Subject key identifier: 31:A0:A3:3B:1F:57:0F:F8:C6:3B:8F:95:23:77:25:08:0B:61:C8:34 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584DAC457966FB49E4FC65B4C100 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 394285 IP address blocks: 174.137.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:79:66:fb:49:e4:fc:65:b4:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=228b580d-57b3-4d03-be3c-7c8b4dad32e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dd:12:42:2d:a4:70:fa:eb:74:6e:2e:6a:6c: f2:d0:65:22:14:7d:de:00:05:ec:ab:f9:ec:52:04: fb:a5:fc:cc:70:6e:0c:12:00:d6:df:a9:88:d5:9b: 30:59:7a:d8:03:b4:ab:90:1a:39:3e:03:d8:7e:06: a6:ff:78:9b:1f:06:69:b0:34:45:4b:f9:26:50:3c: b4:47:8d:53:8d:c8:a0:b9:55:61:88:b0:98:24:7f: f9:21:0a:ef:74:6a:6e:19:cb:58:d8:34:70:f7:b6: 40:24:dc:94:3f:32:aa:06:12:6b:b1:f9:7e:35:79: 48:b2:10:b8:c3:38:e5:52:88:11:b5:e4:4b:35:d8: 43:15:76:0c:30:96:ef:82:20:68:75:67:47:f1:25: 76:43:8c:7c:c4:c7:bc:79:07:b6:a4:8b:cd:23:3a: 0a:d0:a8:e1:ad:78:0d:c0:e3:68:23:7b:33:4f:2c: b3:9c:93:e4:5f:12:80:9c:07:f8:33:5c:d8:69:6e: 28:d2:a7:7b:ec:a4:44:a4:e3:10:40:a7:ba:b6:d3: 29:d8:78:ea:a0:35:ac:00:b5:70:99:3a:3e:e8:02: 55:c3:48:bb:96:57:9e:aa:34:ca:e8:d5:53:e8:42: cd:cf:ea:c1:fb:5d:33:ab:ec:24:3e:45:54:b1:81: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A0:A3:3B:1F:57:0F:F8:C6:3B:8F:95:23:77:25:08:0B:61:C8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:47:db:60:e4:45:f3:f3:d3:63:f2:8e:ac:23:35:37:02:bb: 87:79:f2:e9:d8:e6:04:dd:4a:c5:49:47:d6:55:bf:ce:5c:7e: d2:36:71:e4:41:8c:b8:3a:7e:67:7e:d6:02:6b:62:71:a6:bf: 87:fc:d1:f5:e9:38:c7:0b:99:9e:a4:6f:d2:c4:d3:c6:df:e1: bb:d6:43:0d:4d:c5:6d:24:f6:0e:16:34:5a:8e:29:cb:19:e0: 0f:71:1b:3b:9c:f1:de:ea:d1:8a:8e:e2:fb:b4:61:94:4e:2d: d0:4c:3d:32:e8:eb:52:65:7b:a3:6e:ac:59:94:8d:b3:a5:67: b8:6a:07:10:7f:2a:48:75:f9:fc:73:3a:57:7c:bd:14:1b:d0: d6:9f:58:d2:ce:ce:84:81:10:96:6e:be:c7:6b:60:29:64:ee: 66:dc:a1:bd:8a:3a:d8:14:f9:b5:2b:39:83:49:7e:c3:63:4d: b2:db:71:e4:c9:ad:32:a1:64:08:3a:2f:ab:9c:ac:4a:12:7b: 80:71:c0:2b:7a:3c:e2:45:20:0f:3d:6f:18:be:7d:da:ca:1e: 07:39:a0:43:a8:81:9a:6b:40:3e:23:7d:fc:45:39:54:e9:7d: 47:7d:16:b3:eb:1a:0f:93:ca:b8:d5:4e:65:d7:4b:4f:bc:19: 09:c7:0d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXlm+0nk/GW0wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MjI4YjU4MGQtNTdiMy00ZDAzLWJlM2MtN2M4YjRkYWQzMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN0SQi2kcPrrdG4uamzy0GUiFH3eAAXsq/ns UgT7pfzMcG4MEgDW36mI1ZswWXrYA7SrkBo5PgPYfgam/3ibHwZpsDRFS/kmUDy0 R41TjciguVVhiLCYJH/5IQrvdGpuGctY2DRw97ZAJNyUPzKqBhJrsfl+NXlIshC4 wzjlUogRteRLNdhDFXYMMJbvgiBodWdH8SV2Q4x8xMe8eQe2pIvNIzoK0KjhrXgN wONoI3szTyyznJPkXxKAnAf4M1zYaW4o0qd77KREpOMQQKe6ttMp2HjqoDWsALVw mTo+6AJVw0i7lleeqjTK6NVT6ELNz+rB+10zq+wkPkVUsYF1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGgozsfVw/4xjuPlSN3JQgLYcg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvODUwNGRiZjEtYjFjMy0z YWZhLTk2ZGMtYzUxMDc2MmYxMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhH22DkRfPz02PyjqwjNTcCu4d58unY5gTdSsVJR9ZVv85cftI2ceRB jLg6fmd+1gJrYnGmv4f80fXpOMcLmZ6kb9LE08bf4bvWQw1NxW0k9g4WNFqOKcsZ 4A9xGzuc8d7q0YqO4vu0YZROLdBMPTLo61Jle6NurFmUjbOlZ7hqBxB/Kkh1+fxz Old8vRQb0NafWNLOzoSBEJZuvsdrYClk7mbcob2KOtgU+bUrOYNJfsNjTbLbceTJ rTKhZAg6L6ucrEoSe4BxwCt6POJFIA89bxi+fdrKHgc5oEOogZprQD4jffxFOVTp fUd9FrPrGg+TyrjVTmXXS0+8GQnHDW8= -----END CERTIFICATE-----Generated at Fri May 1 17:05:11 2026 by rpki-client