$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/2b21f2d8-3b20-3b6b-af2d-c55626f4a508.roa File: 2b21f2d8-3b20-3b6b-af2d-c55626f4a508.roa (raw, json) Hash identifier: twvkZ09gemaxdk9zabW4LGGQTUjXh7vyEEoyd3XYNGo= Subject key identifier: 49:BB:23:A6:4B:C3:77:B6:67:1E:92:CC:4D:D6:C1:F6:74:D8:30:7C Certificate issuer: /CN=a98125f9-ec1d-4988-bd94-11fb3274a4ed Certificate serial: 010D0C9F4328584E5E7A03C3CC0D71E39F38E000 Authority key identifier: B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/2b21f2d8-3b20-3b6b-af2d-c55626f4a508.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 54057 IP address blocks: 107.161.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:7a:03:c3:cc:0d:71:e3:9f:38:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a98125f9-ec1d-4988-bd94-11fb3274a4ed Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=61e3130e-f54f-4323-9339-5e86f901c0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:9e:e7:85:6c:63:07:51:e4:59:2f:23:bf: aa:45:f5:80:30:70:3f:7f:b7:f0:bf:64:8c:d6:38: 7d:08:91:56:d2:df:d8:07:75:86:b8:49:dd:32:a2: 3f:c5:ae:d3:db:ab:23:bf:16:4f:a0:51:6e:62:43: c2:db:b1:fb:11:67:f9:a9:ec:40:2f:cc:7a:c7:aa: 41:89:8f:2b:6a:74:42:c1:e7:8a:d7:20:0c:5b:f2: 7c:a4:b5:ad:b3:5b:6c:44:ca:6c:b4:0a:09:da:6a: fe:fd:06:b7:a8:43:2b:55:a1:2b:9f:79:b3:2a:b5: bd:55:6f:7e:62:77:b2:a3:af:d4:8e:94:c1:a7:ff: a9:58:42:d5:2c:fa:28:80:b4:21:81:68:5d:d2:a4: 4f:d6:6f:8a:0b:af:43:7c:60:e5:ae:8f:75:16:83: 15:fb:47:23:6a:18:0f:5d:5e:87:22:b7:98:60:f4: 60:e2:cf:ef:0c:c8:1f:30:66:da:dc:6f:78:a6:bc: 76:e6:ef:25:32:95:39:4c:a9:d9:a4:a4:64:22:65: 80:54:7b:19:28:0c:06:d7:28:fe:57:98:83:2c:a5: fc:a3:d6:02:8b:b2:a1:dc:49:37:08:a0:01:70:ed: 73:16:e7:6d:68:0b:31:7a:b0:7b:2a:1b:0f:2c:c6: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BB:23:A6:4B:C3:77:B6:67:1E:92:CC:4D:D6:C1:F6:74:D8:30:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/2b21f2d8-3b20-3b6b-af2d-c55626f4a508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.crl X509v3 Authority Key Identifier: keyid:B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer sbgp-ipAddrBlock: critical IPv4: 107.161.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:de:18:03:2c:c5:8f:b5:9e:fd:6e:31:8d:6a:8e:99:a9:5b: f7:2f:bc:57:4c:a6:c6:25:fd:88:1f:2c:32:67:18:8c:79:dd: 58:b7:dd:b9:7b:18:9a:d7:ad:04:21:87:7b:5c:7e:8c:5e:31: dd:34:b1:6d:6a:f3:2c:db:18:8e:fc:2b:6a:4a:6b:b1:a8:84: 2b:55:1c:f4:16:a7:2a:ff:d5:42:2e:c1:d5:77:3b:4c:00:6d: da:07:cc:cf:c7:50:11:6d:ff:9d:a3:cb:7c:6d:4c:ae:ea:34: 27:cb:29:2d:ba:ed:6b:6e:f3:5c:a8:50:36:4f:a2:a6:f3:35: 24:0a:4d:6d:2f:60:cb:66:b4:19:6c:c7:86:3b:3c:76:0a:32: d1:24:cb:15:f4:b0:51:0f:54:f6:1b:e6:e3:7c:be:3a:f1:54: 8a:a8:f8:6b:be:a2:5e:05:a6:75:f5:82:3a:dd:39:ae:4b:f2: 7c:64:a8:44:26:22:a9:7f:d0:28:0f:1b:28:7d:ff:00:a2:84: ee:c2:36:c1:fe:88:aa:8c:05:c1:e1:75:c7:95:e0:e3:b4:f8: 43:70:b5:f8:a2:f1:75:8d:1a:01:d4:df:96:00:98:fd:aa:54: 89:2f:d5:e2:51:f1:99:9f:86:9b:6c:9c:92:1f:aa:b6:80:2c: 14:70:b6:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegPDzA1x45844AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4MTI1ZjktZWMxZC00OTg4LWJkOTQtMTFmYjMyNzRh NGVkMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk NjFlMzEzMGUtZjU0Zi00MzIzLTkzMzktNWU4NmY5MDFjMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgOe54VsYwdR5FkvI7+qRfWAMHA/f7fwv2SM 1jh9CJFW0t/YB3WGuEndMqI/xa7T26sjvxZPoFFuYkPC27H7EWf5qexAL8x6x6pB iY8ranRCweeK1yAMW/J8pLWts1tsRMpstAoJ2mr+/Qa3qEMrVaErn3mzKrW9VW9+ Yneyo6/UjpTBp/+pWELVLPoogLQhgWhd0qRP1m+KC69DfGDlro91FoMV+0cjahgP XV6HIreYYPRg4s/vDMgfMGba3G94prx25u8lMpU5TKnZpKRkImWAVHsZKAwG1yj+ V5iDLKX8o9YCi7Kh3Ek3CKABcO1zFudtaAsxerB7KhsPLMbblwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm7I6ZLw3e2Zx6SzE3WwfZ02DB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTgx MjVmOS1lYzFkLTQ5ODgtYmQ5NC0xMWZiMzI3NGE0ZWQvMmIyMWYyZDgtM2IyMC0z YjZiLWFmMmQtYzU1NjI2ZjRhNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk4MTI1ZjktZWMxZC00OTg4LWJk OTQtMTFmYjMyNzRhNGVkL2E5ODEyNWY5LWVjMWQtNDk4OC1iZDk0LTExZmIzMjc0 YTRlZC5jcmwwHwYDVR0jBBgwFoAUtj8TUfuy2d9gsIe4Ug9Wc9WjR7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTgxMjVmOS1lYzFkLTQ5ODgtYmQ5NC0xMWZi MzI3NGE0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6HBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfeGAMsxY+1nv1uMY1qjpmpW/cvvFdMpsYl/YgfLDJnGIx53Vi33bl7 GJrXrQQhh3tcfoxeMd00sW1q8yzbGI78K2pKa7GohCtVHPQWpyr/1UIuwdV3O0wA bdoHzM/HUBFt/52jy3xtTK7qNCfLKS267Wtu81yoUDZPoqbzNSQKTW0vYMtmtBls x4Y7PHYKMtEkyxX0sFEPVPYb5uN8vjrxVIqo+Gu+ol4FpnX1gjrdOa5L8nxkqEQm Iql/0CgPGyh9/wCihO7CNsH+iKqMBcHhdceV4OO0+ENwtfii8XWNGgHU35YAmP2q VIkv1eJR8ZmfhptsnJIfqraALBRwttQ= -----END CERTIFICATE-----Generated at Mon Jul 13 01:34:42 2026 by rpki-client