$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa File: 0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa (raw, json) Hash identifier: /6FB1XbzkgtvWHDhLtZvN7gRJbLSd7ALydkRFGXYlfU= Subject key identifier: 42:AB:2C:81:32:90:FF:30:96:4E:86:3D:7B:4F:F1:E6:42:CD:68:16 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584DFBD5E1BF5AB73240ECA9D880 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 32043 IP address blocks: 107.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e1:bf:5a:b7:32:40:ec:a9:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=8c3136d2-6268-4470-8373-758ce4ca9fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1a:5e:dc:e4:3f:d4:4d:38:17:c5:6a:29:0b: dd:4c:6e:45:73:19:4e:cb:5b:ee:9a:2e:fb:0d:61: 96:07:cc:52:f2:ff:ea:2b:4c:43:8f:a1:42:6a:66: 50:00:e1:89:87:8d:e7:a3:b0:d3:12:63:2d:15:9d: 01:39:40:1a:55:a6:22:ef:a2:ce:50:85:96:0b:32: 86:96:d5:13:e9:e6:98:7f:1b:2f:00:ba:d4:3a:eb: dc:d5:87:97:f6:82:8a:96:55:bc:a9:4d:c2:a4:02: 96:86:02:44:80:9a:22:97:bd:a1:8d:2e:ff:36:35: 0b:55:6c:d9:50:d8:cc:2f:6a:c9:c0:cd:db:d8:60: c2:8c:5c:cd:1c:7f:6b:5c:2e:d1:50:78:b3:1e:9d: f5:30:f5:15:6d:7b:93:9d:d9:e0:f9:18:cd:10:70: 69:b7:1f:c4:32:1e:9b:08:59:5b:47:7d:99:21:8a: 08:19:d7:43:bf:c3:f5:77:54:11:a4:86:1a:d6:f2: 30:b4:2d:df:aa:a8:5b:c9:2b:49:d7:d9:a6:19:2a: 4f:06:6a:f4:4a:dc:10:f2:5a:39:43:ba:67:29:34: 23:07:6d:d0:42:f4:48:b3:be:8b:fc:e8:74:6e:3d: 00:72:39:f8:62:ca:a1:b5:b7:04:66:d9:94:2d:d6: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AB:2C:81:32:90:FF:30:96:4E:86:3D:7B:4F:F1:E6:42:CD:68:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3d:5b:9f:c4:57:4c:aa:16:68:66:55:fc:06:22:c2:7b:e0: 09:25:f9:70:a9:06:3c:71:e4:8f:ac:81:0c:c7:e2:3e:c8:50: 86:85:2e:29:f8:f9:d4:d2:0b:71:d5:2e:62:4a:7b:3e:3e:57: 3e:8c:db:93:3c:1d:24:97:28:c4:18:79:68:c4:85:52:03:e4: 4e:9d:a7:b6:f0:b2:b3:4a:b7:ec:fc:aa:0a:e9:3c:45:3d:71: b2:e8:26:3b:1c:56:5c:1d:44:13:94:55:3c:69:2d:ce:8f:f8: b4:d2:3b:46:43:2b:0b:d1:3a:cb:89:8e:9d:1a:37:7c:27:7b: 36:1f:32:be:97:cb:8e:fd:a4:41:aa:5c:54:3c:81:cc:0b:5d: d9:83:56:79:b6:4e:8b:30:08:45:91:bf:e1:78:a5:2a:98:02: 4e:54:63:eb:f5:bc:b4:72:73:60:06:6f:c0:90:82:11:cd:31: 66:f2:06:04:bb:69:2f:67:ca:f1:62:b7:96:62:d4:31:01:2b: 26:b8:68:0d:32:fd:8c:b6:c0:8b:aa:fe:99:c5:55:ce:3e:67: 75:92:73:a0:7c:2d:ba:bb:1b:fd:10:86:09:ef:ec:f9:39:09: 08:f4:c9:da:96:3e:21:24:72:fd:52:62:ae:5d:b2:3c:2d:31: 46:6c:7f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eG/WrcyQOyp2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk OGMzMTM2ZDItNjI2OC00NDcwLTgzNzMtNzU4Y2U0Y2E5ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghpe3OQ/1E04F8VqKQvdTG5FcxlOy1vumi77 DWGWB8xS8v/qK0xDj6FCamZQAOGJh43no7DTEmMtFZ0BOUAaVaYi76LOUIWWCzKG ltUT6eaYfxsvALrUOuvc1YeX9oKKllW8qU3CpAKWhgJEgJoil72hjS7/NjULVWzZ UNjML2rJwM3b2GDCjFzNHH9rXC7RUHizHp31MPUVbXuTndng+RjNEHBptx/EMh6b CFlbR32ZIYoIGddDv8P1d1QRpIYa1vIwtC3fqqhbyStJ19mmGSpPBmr0StwQ8lo5 Q7pnKTQjB23QQvRIs76L/Oh0bj0Acjn4YsqhtbcEZtmULdat8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKrLIEykP8wlk6GPXtP8eZCzWgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGFmYjZiNzItYzMyOC0z ZmM0LWFhODctNzU1MGQ1YmY5NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ9W5/EV0yqFmhmVfwGIsJ74Akl+XCpBjxx5I+sgQzH4j7IUIaFLin4 +dTSC3HVLmJKez4+Vz6M25M8HSSXKMQYeWjEhVID5E6dp7bwsrNKt+z8qgrpPEU9 cbLoJjscVlwdRBOUVTxpLc6P+LTSO0ZDKwvROsuJjp0aN3wnezYfMr6Xy479pEGq XFQ8gcwLXdmDVnm2ToswCEWRv+F4pSqYAk5UY+v1vLRyc2AGb8CQghHNMWbyBgS7 aS9nyvFit5Zi1DEBKya4aA0y/Yy2wIuq/pnFVc4+Z3WSc6B8Lbq7G/0Qhgnv7Pk5 CQj0ydqWPiEkcv1SYq5dsjwtMUZsf+4= -----END CERTIFICATE-----Generated at Tue Jun 9 08:14:46 2026 by rpki-client