$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/20eb62b2-56a8-33a4-bee5-161e16237afa.roa File: 20eb62b2-56a8-33a4-bee5-161e16237afa.roa (raw, json) Hash identifier: 4vglsLqRLA3PwtX+wx4wxcy7fJVoP7luu6Wq4vYIkOc= Subject key identifier: F7:F2:EC:CB:AF:5A:31:91:FC:1A:FD:AE:88:E6:2C:B2:42:87:42:08 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F4B2300A053EAA7542DAC2220 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/20eb62b2-56a8-33a4-bee5-161e16237afa.roa Signing time: Fri 25 Sep 2026 15:31:36 +0000 ROA not before: Fri 25 Sep 2026 15:31:36 +0000 ROA not after: Thu 24 Dec 2026 16:31:36 +0000 asID: 834 IP address blocks: 107.158.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:23:00:a0:53:ea:a7:54:2d:ac:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 15:31:36 2026 GMT Not After : Dec 24 16:31:36 2026 GMT Subject: CN=f5c64ea4-878d-4434-a833-e583d9c65af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:96:ba:c9:26:8e:06:dd:1f:c1:e3:9d:73: e0:23:2d:c0:d5:38:b4:3c:7a:32:c2:ce:49:3f:73: 83:40:16:26:0f:fd:8b:3d:bc:8b:21:84:eb:de:98: 8c:e1:db:9b:6c:4c:9f:73:1a:a4:64:e8:0b:72:f4: ad:95:b1:ef:3b:c4:12:fe:90:7e:37:e7:47:80:12: 51:ef:b4:03:5a:6a:c8:95:b2:5b:2f:ae:31:ee:1d: 6a:79:a1:bf:aa:fa:73:cd:48:da:b5:70:56:58:35: 3f:19:ec:af:a6:23:b9:62:ca:dc:27:4d:92:a0:6f: 1b:31:3d:c2:5d:16:8a:3c:49:95:93:39:39:4c:7d: 89:3c:8d:c1:0d:59:aa:f3:4f:59:e8:a8:77:14:bb: 75:be:c8:10:19:0f:3e:ad:5a:14:55:b3:6a:b0:ac: 27:fc:db:47:ec:08:21:02:da:02:b4:43:30:98:7c: 4b:f5:a1:38:9f:33:cd:e5:46:a3:58:c2:fb:19:ae: 03:42:a7:06:a5:64:fd:f6:91:b3:9a:e7:01:b4:b4: cb:7f:84:22:b6:54:cb:06:f8:33:6d:eb:1a:74:f7: 5a:fd:46:07:09:e9:cc:ec:c0:57:a7:82:39:82:d9: c9:73:0d:00:03:75:f2:cf:b7:2e:aa:ad:7e:8f:56: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F2:EC:CB:AF:5A:31:91:FC:1A:FD:AE:88:E6:2C:B2:42:87:42:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/20eb62b2-56a8-33a4-bee5-161e16237afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1e:85:44:d7:21:ba:64:48:e3:e9:c7:b8:4d:31:fd:63:99: b7:b1:b0:eb:88:84:52:5a:6f:9e:9d:48:0d:8e:33:c6:ea:d3: 67:f1:de:2d:86:6a:f4:06:2a:3b:f2:6c:7d:b1:c2:b8:5c:86: 54:fe:6b:f0:da:04:07:20:54:67:9a:b8:4c:6f:66:af:e7:86: 28:73:38:49:2e:fd:00:30:f7:1b:69:ac:08:dd:f0:f9:85:64: 7e:6c:76:bb:23:73:f3:97:74:e4:85:5a:c6:cb:e0:2a:99:c6: e3:98:2c:01:f7:77:a5:ab:ad:bf:ed:a1:a1:93:0f:a5:07:fd: dd:46:26:56:12:90:75:29:20:30:b2:64:dd:8e:04:8c:1d:ab: 69:a4:2e:df:a0:b1:ab:c3:ec:42:0e:fb:15:6f:db:93:20:73: a6:39:91:30:1b:98:d7:4e:46:b6:fc:2d:62:3f:d5:15:0c:89: 71:ff:9d:1c:b5:98:8f:5a:ae:3c:ad:04:dd:17:9e:e2:ab:38: 1f:63:b2:32:3d:ee:7c:19:96:47:11:fc:72:ab:5a:a7:1f:f9: 45:15:ed:3f:26:78:8d:41:60:63:a3:a4:d7:a4:19:a7:07:7b: 46:fa:16:b0:ff:d7:cb:91:9b:4a:d9:44:5d:fe:e4:8a:a6:8d: 17:ae:32:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LIwCgU+qnVC2sIiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTE1MzEzNloXDTI2MTIyNDE2MzEzNlowLzEtMCsGA1UEAxMk ZjVjNjRlYTQtODc4ZC00NDM0LWE4MzMtZTU4M2Q5YzY1YWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9KWuskmjgbdH8HjnXPgIy3A1Ti0PHoyws5J P3ODQBYmD/2LPbyLIYTr3piM4dubbEyfcxqkZOgLcvStlbHvO8QS/pB+N+dHgBJR 77QDWmrIlbJbL64x7h1qeaG/qvpzzUjatXBWWDU/GeyvpiO5YsrcJ02SoG8bMT3C XRaKPEmVkzk5TH2JPI3BDVmq809Z6Kh3FLt1vsgQGQ8+rVoUVbNqsKwn/NtH7Agh AtoCtEMwmHxL9aE4nzPN5UajWML7Ga4DQqcGpWT99pGzmucBtLTLf4QitlTLBvgz besadPda/UYHCenM7MBXp4I5gtnJcw0AA3Xyz7cuqq1+j1a6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfy7MuvWjGR/Br9rojmLLJCh0IIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjBlYjYyYjItNTZhOC0z M2E0LWJlZTUtMTYxZTE2MjM3YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8ehUTXIbpkSOPpx7hNMf1jmbexsOuIhFJab56dSA2OM8bq02fx3i2G avQGKjvybH2xwrhchlT+a/DaBAcgVGeauExvZq/nhihzOEku/QAw9xtprAjd8PmF ZH5sdrsjc/OXdOSFWsbL4CqZxuOYLAH3d6Wrrb/toaGTD6UH/d1GJlYSkHUpIDCy ZN2OBIwdq2mkLt+gsavD7EIO+xVv25Mgc6Y5kTAbmNdORrb8LWI/1RUMiXH/nRy1 mI9arjytBN0XnuKrOB9jsjI97nwZlkcR/HKrWqcf+UUV7T8meI1BYGOjpNekGacH e0b6FrD/18uRm0rZRF3+5IqmjReuMkM= -----END CERTIFICATE-----Generated at Sun Sep 27 11:01:13 2026 by rpki-client