$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/160331a6-486b-3ff1-9faa-2c0f323fbd40.roa File: 160331a6-486b-3ff1-9faa-2c0f323fbd40.roa (raw, json) Hash identifier: zdCfKKiMrEfZPLUwYx+AiqmP0TeORhFXh8QXDV7n5QE= Subject key identifier: 1C:60:B4:D1:26:27:56:24:DE:42:BE:49:F1:19:F0:67:DF:CE:57:7A Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF605207CB62D2AE1C6DA380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/160331a6-486b-3ff1-9faa-2c0f323fbd40.roa Signing time: Thu 06 Aug 2026 14:01:59 +0000 ROA not before: Thu 06 Aug 2026 14:01:59 +0000 ROA not after: Wed 04 Nov 2026 15:01:59 +0000 asID: 396190 IP address blocks: 108.62.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:60:52:07:cb:62:d2:ae:1c:6d:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:01:59 2026 GMT Not After : Nov 4 15:01:59 2026 GMT Subject: CN=ef83737e-886b-48fc-9c0a-516665cdef81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:85:41:d2:fc:0e:8d:e7:e9:be:52:85:fc: 4a:35:10:d9:d5:bf:b8:86:f9:cd:0f:f5:43:98:c1: 76:39:ce:54:29:df:dc:81:ef:cf:7b:25:92:37:bf: cc:06:16:79:4c:51:f3:9c:d6:44:a9:0e:a5:98:82: a5:c0:7f:ac:3a:3f:50:92:0c:9f:df:5a:52:bb:cc: a9:9e:60:c4:ac:85:ff:b0:c8:8e:4e:38:2b:ad:ce: 80:44:a2:9e:6c:84:4b:fc:b5:01:ba:39:ee:74:aa: 20:e3:c6:23:42:6c:77:ca:6b:16:36:39:51:bb:f3: e5:42:09:b3:d5:bb:4f:48:81:86:f0:d9:c5:18:43: ab:f4:60:aa:ca:43:dd:27:17:65:ff:05:3d:a3:4b: 0b:38:58:c3:28:f1:09:99:18:20:15:31:8b:92:96: cb:62:1f:fb:92:80:4d:58:14:4e:01:34:a5:d1:53: 52:93:17:6b:d9:bb:02:76:0a:59:98:bf:9c:cf:01: 5f:96:6b:0d:e9:21:6f:41:a9:61:b3:7f:4f:3c:61: 9b:5f:7d:2f:45:2b:11:fc:fa:7c:52:fe:12:51:ee: 2a:b6:22:b7:e4:c5:be:14:09:e7:2a:c2:b3:28:bd: 0a:9c:8f:43:88:16:93:9a:42:a4:06:72:d5:51:44: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:60:B4:D1:26:27:56:24:DE:42:BE:49:F1:19:F0:67:DF:CE:57:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/160331a6-486b-3ff1-9faa-2c0f323fbd40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.62.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fd:19:d7:6e:33:51:ea:a1:8b:cd:ae:9d:d2:cb:03:72:66: 7c:0a:81:e9:5e:ba:10:c7:b8:51:87:83:b9:20:f5:e9:f7:8e: 46:a5:c6:ed:88:c4:8a:4f:80:69:f7:b9:cc:87:10:bd:d2:3c: ff:e9:87:af:21:9d:21:bc:23:52:4a:66:42:ee:b5:9e:d5:ac: 03:09:e2:3c:8e:91:b9:a6:f7:0b:c6:b8:0b:79:ea:7a:b2:e5: d0:26:d9:9d:8b:41:12:65:d4:2e:b4:90:f8:2b:96:aa:35:59: 10:ad:d7:20:3b:ec:c7:ae:96:b3:9a:e5:7a:77:a4:f6:f3:17: 76:b7:9e:63:f3:01:67:04:05:6c:fc:02:a7:a9:e6:e2:40:d9: e9:0d:ec:b9:50:35:ae:9f:bf:bb:9d:6d:3c:8d:69:89:f8:d0: 22:70:74:7b:ac:5d:63:4a:35:87:9d:eb:09:9f:92:e2:4f:b1: f2:1f:15:41:f9:68:cb:75:80:5e:8c:3b:97:99:d1:e4:d9:34: 2b:d3:42:56:ae:70:d5:f7:aa:02:e8:3d:81:a2:aa:d1:07:47: 51:f3:f3:3c:15:02:da:a8:eb:21:71:e6:d9:de:f4:91:25:19: 5e:ae:d3:d8:dc:77:cc:a6:cb:46:19:1f:93:5e:93:90:bb:89: 2a:1d:55:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/YFIHy2LSrhxto4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0MDE1OVoXDTI2MTEwNDE1MDE1OVowLzEtMCsGA1UEAxMk ZWY4MzczN2UtODg2Yi00OGZjLTljMGEtNTE2NjY1Y2RlZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwiFQdL8Do3n6b5ShfxKNRDZ1b+4hvnND/VD mMF2Oc5UKd/cge/PeyWSN7/MBhZ5TFHznNZEqQ6lmIKlwH+sOj9Qkgyf31pSu8yp nmDErIX/sMiOTjgrrc6ARKKebIRL/LUBujnudKog48YjQmx3ymsWNjlRu/PlQgmz 1btPSIGG8NnFGEOr9GCqykPdJxdl/wU9o0sLOFjDKPEJmRggFTGLkpbLYh/7koBN WBROATSl0VNSkxdr2bsCdgpZmL+czwFflmsN6SFvQalhs39PPGGbX30vRSsR/Pp8 Uv4SUe4qtiK35MW+FAnnKsKzKL0KnI9DiBaTmkKkBnLVUUS1/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxgtNEmJ1Yk3kK+SfEZ8Gffzld6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTYwMzMxYTYtNDg2Yi0z ZmYxLTlmYWEtMmMwZjMyM2ZiZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbD6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr9GdduM1HqoYvNrp3SywNyZnwKgeleuhDHuFGHg7kg9en3jkalxu2I xIpPgGn3ucyHEL3SPP/ph68hnSG8I1JKZkLutZ7VrAMJ4jyOkbmm9wvGuAt56nqy 5dAm2Z2LQRJl1C60kPgrlqo1WRCt1yA77MeulrOa5Xp3pPbzF3a3nmPzAWcEBWz8 Aqep5uJA2ekN7LlQNa6fv7udbTyNaYn40CJwdHusXWNKNYed6wmfkuJPsfIfFUH5 aMt1gF6MO5eZ0eTZNCvTQlaucNX3qgLoPYGiqtEHR1Hz8zwVAtqo6yFx5tne9JEl GV6u09jcd8ymy0YZH5Nek5C7iSodVUU= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:13 2026 by rpki-client