$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3da68968-5361-3d99-8bb1-67f7b297d001.roa File: 3da68968-5361-3d99-8bb1-67f7b297d001.roa (raw, json) Hash identifier: ZOxzz/tkOrGQT3970wS9c6iM2Ko3GMMIL2UJ/bmkS3k= Subject key identifier: 80:35:B7:ED:73:EE:58:F2:20:D9:45:C1:57:DD:7D:16:D6:80:85:60 Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584ECD3734C9FEEC46F087B88480 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3da68968-5361-3d99-8bb1-67f7b297d001.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 33504 IP address blocks: 104.153.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:34:c9:fe:ec:46:f0:87:b8:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=43c46c3f-3b0f-400f-bdd6-4cd64f0bde5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:bd:7f:93:cd:3f:83:ac:a5:33:1c:8b:d1: 5a:45:dd:04:cf:f4:4c:0d:9d:36:ca:84:04:c2:f0: 73:65:ca:c7:17:2c:78:2c:78:a3:af:56:a3:bd:99: 18:5c:91:e5:52:a2:7a:b2:e0:2f:33:68:2b:7c:79: 58:ae:1d:d3:83:b8:a8:c6:f0:c3:3f:4b:0a:b8:a2: ef:74:3b:b3:e0:40:60:1f:d2:ce:b9:cc:9f:71:3a: 0e:c3:04:75:ba:1f:22:9d:18:44:52:15:a6:eb:03: 33:5d:ce:a5:07:4c:9e:22:be:12:32:90:a4:15:03: 05:75:00:49:de:fc:30:cd:82:04:6e:1b:b5:8f:85: f7:18:52:d3:ba:2b:af:0e:b6:b5:2c:be:a1:28:4f: 3d:e9:19:cc:8b:b6:14:0b:d7:a5:1c:14:e1:d9:94: 14:d7:30:4b:a8:19:69:3b:be:7f:76:90:0e:68:2c: 97:32:a4:ee:35:76:f8:f0:b1:a4:55:bf:d5:c2:5e: 43:1e:96:41:0f:b7:8b:96:70:14:d9:b1:6c:d8:78: 8c:68:52:b8:15:c8:86:28:d6:50:a3:10:0e:63:60: a4:92:ec:5f:83:0b:ad:d7:59:19:8f:00:f8:0d:c8: da:51:73:96:ac:cc:f1:ef:93:4a:82:18:52:d9:73: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:35:B7:ED:73:EE:58:F2:20:D9:45:C1:57:DD:7D:16:D6:80:85:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3da68968-5361-3d99-8bb1-67f7b297d001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 104.153.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a9:0c:39:d9:6f:32:af:36:ff:5a:92:42:f7:2a:be:56:36: d5:80:5a:78:dd:ad:51:da:e6:c2:67:74:da:c8:f7:31:f1:0d: 58:73:74:76:dd:88:84:9d:c0:95:32:85:1b:f7:a3:79:f5:4c: c7:20:81:0e:89:4d:36:d6:19:a1:9a:58:f4:54:82:10:b8:9f: b8:79:e2:06:b0:33:70:4c:2f:d1:c0:d2:79:8f:52:f3:5a:3f: 07:fb:95:7d:a8:75:41:2f:4f:bc:75:3b:97:cb:87:7c:c9:ce: 8b:33:0d:48:ed:2d:4a:e5:c2:9b:97:b0:07:66:66:19:b3:88: 50:cd:a6:bc:e5:ff:6f:00:27:69:ff:7a:6f:15:a9:36:b7:6d: 07:c7:07:11:ec:3d:d5:0b:ff:cd:2a:4d:2d:9a:76:e9:26:f6: 8a:6d:97:df:67:35:4f:7b:f3:5e:3e:1e:dd:a4:58:0f:bc:75: b1:bb:ea:53:16:32:7d:be:dd:aa:86:9a:81:0e:3f:96:b6:82: 70:d8:47:59:48:ec:23:2a:d7:02:36:d0:c8:02:2e:08:bc:43: 57:d1:ab:87:70:58:f6:7f:f4:6f:09:31:c3:27:97:4d:55:21: c3:1c:6c:86:ee:37:4c:df:a1:51:91:e3:ed:25:81:b8:83:b4: 63:ed:8b:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNzTJ/uxG8Ie4hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NDNjNDZjM2YtM2IwZi00MDBmLWJkZDYtNGNkNjRmMGJkZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvu9f5PNP4OspTMci9FaRd0Ez/RMDZ02yoQE wvBzZcrHFyx4LHijr1ajvZkYXJHlUqJ6suAvM2grfHlYrh3Tg7ioxvDDP0sKuKLv dDuz4EBgH9LOucyfcToOwwR1uh8inRhEUhWm6wMzXc6lB0yeIr4SMpCkFQMFdQBJ 3vwwzYIEbhu1j4X3GFLTuiuvDra1LL6hKE896RnMi7YUC9elHBTh2ZQU1zBLqBlp O75/dpAOaCyXMqTuNXb48LGkVb/Vwl5DHpZBD7eLlnAU2bFs2HiMaFK4FciGKNZQ oxAOY2Ckkuxfgwut11kZjwD4DcjaUXOWrMzx75NKghhS2XMf3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA1t+1z7ljyINlFwVfdfRbWgIVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvM2RhNjg5NjgtNTM2MS0z ZDk5LThiYjEtNjdmN2IyOTdkMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJm9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAipDDnZbzKvNv9akkL3Kr5WNtWAWnjdrVHa5sJndNrI9zHxDVhzdHbd iISdwJUyhRv3o3n1TMcggQ6JTTbWGaGaWPRUghC4n7h54gawM3BML9HA0nmPUvNa Pwf7lX2odUEvT7x1O5fLh3zJzoszDUjtLUrlwpuXsAdmZhmziFDNprzl/28AJ2n/ em8VqTa3bQfHBxHsPdUL/80qTS2adukm9optl99nNU97814+Ht2kWA+8dbG76lMW Mn2+3aqGmoEOP5a2gnDYR1lI7CMq1wI20MgCLgi8Q1fRq4dwWPZ/9G8JMcMnl01V IcMcbIbuN0zfoVGR4+0lgbiDtGPti5I= -----END CERTIFICATE-----Generated at Tue Aug 18 07:24:51 2026 by rpki-client