$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa File: 32681ab5-267b-30a2-9748-402a55e3c247.roa (raw, json) Hash identifier: FjMPQ+QCqaas9/EaNvrYLD91SB5OCju+oY1by7JaPv4= Subject key identifier: 1C:71:C4:A6:8D:30:81:DD:C2:A2:90:67:14:45:AC:CA:D1:18:30:AF Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EB2B1B499DD8DE94FE4087080 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 174 IP address blocks: 107.158.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:b4:99:dd:8d:e9:4f:e4:08:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=8fceaac6-1108-4bcf-97a1-48cdb7b55aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2d:78:88:81:4b:ef:8c:e9:90:73:5d:7f:53: 85:3c:53:6e:73:97:f9:73:8e:b0:fb:a9:c6:1e:3e: e9:56:ea:65:07:98:05:43:59:5b:08:58:c1:3e:9a: 63:59:81:b7:ed:b7:54:51:55:06:eb:76:7c:e4:d1: 43:30:72:8f:2e:92:fe:e4:45:a8:47:40:94:01:fa: 7b:f9:68:64:70:df:5f:3b:90:1c:3d:6f:94:6c:57: ce:bd:22:17:22:c3:22:12:9a:28:c6:9f:c9:a6:ae: 5c:d1:ce:bc:5c:27:63:c5:32:ae:9f:cb:81:5b:9a: 32:f3:51:01:53:68:73:66:37:29:f9:b7:da:8a:57: b0:15:3d:c8:d3:f1:7c:95:17:2c:85:6a:d4:59:48: df:72:c1:d1:2b:35:b6:87:64:b9:c5:54:1d:af:e4: c9:17:98:97:c8:05:e5:a3:a9:e4:17:67:e0:75:4d: 7e:c5:e3:30:7a:bb:ae:88:71:cf:0e:37:a6:00:f0: 34:eb:d6:63:74:bb:0d:4d:d1:29:d6:69:f6:db:a4: 57:c6:37:f1:77:66:25:a0:28:4c:83:31:42:be:b5: 3f:09:f4:f9:c7:07:2e:17:65:31:2b:3f:c3:9a:32: 35:9c:c9:2c:af:98:21:8f:7a:46:83:5f:ff:76:9e: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:71:C4:A6:8D:30:81:DD:C2:A2:90:67:14:45:AC:CA:D1:18:30:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:42:45:a5:da:9a:08:c4:0b:80:db:ad:4f:5d:50:a4:c4:8f: fd:92:39:e7:43:2f:e1:a4:be:2f:38:c0:06:70:2b:f0:86:f7: 25:aa:16:1c:f2:c8:29:45:9c:6a:16:56:6f:a4:a8:39:ca:9a: 39:c9:64:fa:2b:21:8e:46:3e:fa:dd:fe:ef:5a:aa:7f:98:80: 25:b3:6b:75:de:66:4c:ce:7c:49:c8:aa:ba:4f:5a:04:ce:04: ad:7c:92:e1:6f:6e:ec:82:b9:a0:c9:8d:b6:0b:5a:68:fd:f4: cb:ed:9c:95:f6:f8:1f:cd:70:8d:08:78:bc:79:f4:09:c9:0f: ae:55:22:3f:ec:a6:c9:dc:c6:cf:a6:6c:21:65:79:81:e6:26: 4d:33:e6:b3:12:51:c5:86:40:ca:c2:32:b0:dd:dd:b5:44:d2: 36:dd:40:87:89:b5:23:04:8a:87:a8:83:4e:ae:d0:9b:56:d9: 4f:43:01:c8:9b:b8:40:cb:0c:4e:b7:6c:98:b4:ac:d6:3f:d8: e2:02:e9:41:21:bd:a8:2a:af:2a:5e:97:07:c4:64:44:6b:ec: 08:b7:de:44:2d:3f:7a:0a:f3:42:61:07:8e:6a:ae:bd:00:a0: 86:86:3f:da:ae:5b:d4:72:60:0f:fb:e8:70:b4:01:ad:06:75: f6:2d:c3:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbSZ3Y3pT+QIcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OGZjZWFhYzYtMTEwOC00YmNmLTk3YTEtNDhjZGI3YjU1YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy14iIFL74zpkHNdf1OFPFNuc5f5c46w+6nG Hj7pVuplB5gFQ1lbCFjBPppjWYG37bdUUVUG63Z85NFDMHKPLpL+5EWoR0CUAfp7 +WhkcN9fO5AcPW+UbFfOvSIXIsMiEpooxp/Jpq5c0c68XCdjxTKun8uBW5oy81EB U2hzZjcp+bfailewFT3I0/F8lRcshWrUWUjfcsHRKzW2h2S5xVQdr+TJF5iXyAXl o6nkF2fgdU1+xeMweruuiHHPDjemAPA069ZjdLsNTdEp1mn226RXxjfxd2YloChM gzFCvrU/CfT5xwcuF2UxKz/DmjI1nMksr5ghj3pGg1//dp47bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxxxKaNMIHdwqKQZxRFrMrRGDCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzI2ODFhYjUtMjY3Yi0z MGEyLTk3NDgtNDAyYTU1ZTNjMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpCRaXamgjEC4DbrU9dUKTEj/2SOedDL+Gkvi84wAZwK/CG9yWqFhzy yClFnGoWVm+kqDnKmjnJZPorIY5GPvrd/u9aqn+YgCWza3XeZkzOfEnIqrpPWgTO BK18kuFvbuyCuaDJjbYLWmj99MvtnJX2+B/NcI0IeLx59AnJD65VIj/spsncxs+m bCFleYHmJk0z5rMSUcWGQMrCMrDd3bVE0jbdQIeJtSMEioeog06u0JtW2U9DAcib uEDLDE63bJi0rNY/2OIC6UEhvagqrypelwfEZERr7Ai33kQtP3oK80JhB45qrr0A oIaGP9quW9RyYA/76HC0Aa0GdfYtw+k= -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:55 2026 by rpki-client