$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa File: d8158ea6-675b-392f-9e70-902e8aa16a98.roa (raw, json) Hash identifier: 9KFsOhlrxZXbTN6dE88miSEnBEF9l90QeiRSkUqep14= Subject key identifier: 6D:9B:15:75:78:1B:27:71:73:8D:47:7E:27:87:34:0A:10:D6:79:FF Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584DAC4579736B734F2407DED748 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 394285 IP address blocks: 174.137.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:79:73:6b:73:4f:24:07:de:d7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=123bb409-d8ec-49b5-87fd-dd389faf9bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:9e:c3:cf:90:bd:88:8a:1e:90:0f:93:4e: 29:66:2e:32:3f:a8:5e:2e:59:0b:27:1e:0e:50:82: 50:b2:88:09:04:f7:1b:9a:96:05:38:71:66:43:34: c8:ee:43:bb:c7:29:3b:b1:29:de:7b:87:9f:9f:04: 21:66:b5:bc:68:e2:7e:d7:81:54:8d:e8:c0:bd:4d: 9f:27:19:50:a4:7b:12:57:f2:65:f3:00:d2:03:78: a2:7f:19:0d:2b:99:2a:83:44:23:b7:77:bb:8c:92: 60:36:43:c6:c5:ce:73:0c:3d:7f:2d:2c:1e:ae:8e: 7f:9e:59:11:34:bd:83:2b:aa:97:a5:73:72:1e:05: 73:51:3b:43:55:ac:4b:dd:e7:c8:14:db:4c:d0:66: 00:ec:45:87:1d:bc:ab:f5:b9:79:3f:83:c1:3b:fc: 2e:c0:30:95:db:2a:c0:54:23:c2:0e:b4:e2:d3:be: 29:e6:9e:20:bf:b8:a3:cf:4f:92:45:af:bd:dc:5e: 3f:94:ae:c7:d8:4a:7f:17:cc:2e:8e:1d:7e:6c:87: 94:b2:fd:95:e6:45:c6:01:ac:9e:0e:b3:16:f7:e8: 4a:4d:0e:1c:18:68:e4:5f:21:f0:bb:29:b2:5f:7b: 79:bb:5a:ea:72:0a:64:24:67:1a:4e:7d:5d:43:86: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9B:15:75:78:1B:27:71:73:8D:47:7E:27:87:34:0A:10:D6:79:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:61:bc:06:c2:61:c6:70:f1:85:3a:00:93:be:6b:2b:90:e7: 39:99:c2:ac:38:dc:bd:06:94:ac:2c:a8:e6:00:93:25:a5:25: 4e:ba:d6:9d:43:04:3d:37:e6:dc:72:61:e5:8f:72:b5:8d:29: a6:94:44:da:f0:c8:d8:d0:70:5e:da:18:85:ce:c6:e7:f7:f3: b9:ed:f7:3d:32:b4:88:7f:a6:03:b8:72:c2:cf:4d:a9:c6:d7: 8b:d2:42:72:1d:f3:96:f9:e9:96:f3:e0:44:d1:50:eb:10:e3: 70:7c:b5:0f:5d:bc:28:f9:cb:5a:26:32:68:d4:f4:0d:74:76: 1b:b5:fc:10:a3:2f:66:10:11:54:8a:c5:a3:5b:9e:fe:f2:24: 35:39:f3:83:5b:9d:7a:63:8f:d7:57:d5:52:39:f0:98:2f:7d: 53:4d:57:9d:75:eb:f2:2d:b3:32:d2:48:df:0a:16:60:b2:18: e5:ba:c8:24:00:db:51:4d:95:5d:b1:db:14:2f:2e:9a:89:bc: 24:07:1a:db:ec:50:d0:f8:9c:1d:16:9c:2d:99:23:7b:7c:d4: b7:83:c8:f4:24:7d:e5:38:2e:f5:6b:ea:27:9b:e3:55:a1:78: 59:b7:18:c4:84:6c:63:e9:38:2f:ed:e9:27:35:32:f7:45:7a: c0:62:fe:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXlza3NPJAfe10gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MTIzYmI0MDktZDhlYy00OWI1LTg3ZmQtZGQzODlmYWY5YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSWew8+QvYiKHpAPk04pZi4yP6heLlkLJx4O UIJQsogJBPcbmpYFOHFmQzTI7kO7xyk7sSnee4efnwQhZrW8aOJ+14FUjejAvU2f JxlQpHsSV/Jl8wDSA3iifxkNK5kqg0Qjt3e7jJJgNkPGxc5zDD1/LSwero5/nlkR NL2DK6qXpXNyHgVzUTtDVaxL3efIFNtM0GYA7EWHHbyr9bl5P4PBO/wuwDCV2yrA VCPCDrTi074p5p4gv7ijz0+SRa+93F4/lK7H2Ep/F8wujh1+bIeUsv2V5kXGAaye DrMW9+hKTQ4cGGjkXyHwuymyX3t5u1rqcgpkJGcaTn1dQ4aykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2bFXV4Gydxc41HfieHNAoQ1nn/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZDgxNThlYTYtNjc1Yi0z OTJmLTllNzAtOTAyZThhYTE2YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrolsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVhvAbCYcZw8YU6AJO+ayuQ5zmZwqw43L0GlKwsqOYAkyWlJU661p1D BD035txyYeWPcrWNKaaURNrwyNjQcF7aGIXOxuf387nt9z0ytIh/pgO4csLPTanG 14vSQnId85b56Zbz4ETRUOsQ43B8tQ9dvCj5y1omMmjU9A10dhu1/BCjL2YQEVSK xaNbnv7yJDU584NbnXpjj9dX1VI58JgvfVNNV5116/ItszLSSN8KFmCyGOW6yCQA 21FNlV2x2xQvLpqJvCQHGtvsUND4nB0WnC2ZI3t81LeDyPQkfeU4LvVr6ieb41Wh eFm3GMSEbGPpOC/t6Sc1MvdFesBi/vg= -----END CERTIFICATE-----Generated at Fri May 1 17:04:33 2026 by rpki-client