$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/be3b0bbc-91c7-3ccc-ae43-8d0216676ffa.roa File: be3b0bbc-91c7-3ccc-ae43-8d0216676ffa.roa (raw, json) Hash identifier: 29ZJSBs8uJ58H3P7Cvj6qwMtfYA24jjDMZ5jIWZp/QE= Subject key identifier: C9:38:9C:52:DB:7D:05:23:BC:AC:D7:FC:12:F7:BD:10:E8:67:3E:19 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EF418A9C74982B17264186260 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/be3b0bbc-91c7-3ccc-ae43-8d0216676ffa.roa Signing time: Tue 25 Aug 2026 11:15:27 +0000 ROA not before: Tue 25 Aug 2026 11:15:27 +0000 ROA not after: Mon 23 Nov 2026 12:15:27 +0000 asID: 33667 IP address blocks: 107.158.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:18:a9:c7:49:82:b1:72:64:18:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 25 11:15:27 2026 GMT Not After : Nov 23 12:15:27 2026 GMT Subject: CN=96bc32bc-cc5c-40d0-bc5d-c3bcf1bafd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bf:03:68:fd:0a:15:e0:0b:4f:db:20:f2:71: 20:93:9c:28:04:bb:55:ac:e2:eb:e1:66:47:6f:13: f0:32:24:ee:3d:03:c1:1a:8d:3c:64:ee:f1:0a:7a: 56:16:4d:5c:cc:72:bb:bb:7a:be:a5:db:a3:f1:57: a8:96:5c:1c:b1:42:68:2f:cc:cd:45:5c:09:ef:3f: 35:b6:ae:01:7a:6b:5d:db:5e:b2:0a:b3:cd:60:56: 82:71:f2:db:2e:2b:80:b5:d1:6e:87:9e:be:50:55: 02:60:70:af:0c:3d:03:f3:ed:12:27:ac:9a:b0:8e: 82:c7:36:06:e8:67:4a:37:0d:11:d8:c2:47:29:1e: 2e:f0:6d:33:24:bd:33:a0:b4:9b:e5:ea:3f:43:3d: 23:f7:73:68:b2:af:0b:3d:c9:69:0a:6e:50:3b:ea: 51:52:3f:46:47:4f:db:26:fa:e8:74:90:95:4e:d0: 72:4c:66:04:cb:c4:87:ad:71:d7:8f:62:bd:e9:36: 13:1d:d2:21:06:9b:e9:50:a9:cb:0e:51:7f:d3:2f: 7e:24:18:a8:b3:a2:25:67:3d:24:73:3d:94:75:07: 75:30:a3:f8:7a:ba:52:68:7e:7a:5e:89:50:03:ff: 9d:af:43:9e:85:35:e8:f2:34:81:0e:cf:55:78:c8: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:38:9C:52:DB:7D:05:23:BC:AC:D7:FC:12:F7:BD:10:E8:67:3E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/be3b0bbc-91c7-3ccc-ae43-8d0216676ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:4d:c3:54:40:e4:8c:a1:34:4b:f6:ed:a3:0f:c1:2b:ab: c6:0a:1c:46:22:3e:c0:0c:94:02:1f:29:33:9a:52:53:01:e6: fb:b6:a7:2d:78:74:17:ea:47:66:42:df:e3:81:f0:78:cd:ed: eb:e9:f2:dd:7f:29:51:1d:61:04:41:04:19:b0:a8:64:02:e6: cf:46:7e:9e:7f:b0:8f:50:d5:4e:db:d9:15:8a:09:4c:0f:b2: ea:a0:80:51:74:6c:2a:4b:5d:64:d8:8f:20:f1:30:5f:8e:22: 6c:0b:cc:65:a8:f5:bb:8f:e3:99:93:9c:c5:8d:87:16:55:20: 0a:57:5a:da:b9:1d:83:82:f9:7d:a0:67:b5:a2:f8:15:1e:bd: e3:51:b0:d3:6e:46:e9:b7:ba:68:ea:98:de:d1:6c:e2:4f:39: 42:35:f4:da:bd:0e:e7:b3:c6:b6:e6:b1:2a:61:78:d8:79:1d: cc:b1:c6:fe:b9:6d:09:68:46:da:ed:fd:85:0f:56:56:7f:23: a6:73:12:9f:a3:f5:ee:7a:a0:bc:e4:f5:f6:bc:18:ac:c8:18: 89:d7:6d:aa:00:49:43:cb:84:cd:54:db:93:eb:84:94:36:d4: 8e:37:1d:c6:a1:05:c0:70:47:e8:43:ac:de:43:62:45:dc:a3: c6:61:4f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70GKnHSYKxcmQYYmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDgyNTExMTUyN1oXDTI2MTEyMzEyMTUyN1owLzEtMCsGA1UEAxMk OTZiYzMyYmMtY2M1Yy00MGQwLWJjNWQtYzNiY2YxYmFmZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b8DaP0KFeALT9sg8nEgk5woBLtVrOLr4WZH bxPwMiTuPQPBGo08ZO7xCnpWFk1czHK7u3q+pduj8VeollwcsUJoL8zNRVwJ7z81 tq4Bemtd216yCrPNYFaCcfLbLiuAtdFuh56+UFUCYHCvDD0D8+0SJ6yasI6CxzYG 6GdKNw0R2MJHKR4u8G0zJL0zoLSb5eo/Qz0j93Nosq8LPclpCm5QO+pRUj9GR0/b JvrodJCVTtByTGYEy8SHrXHXj2K96TYTHdIhBpvpUKnLDlF/0y9+JBios6IlZz0k cz2UdQd1MKP4erpSaH56XolQA/+dr0OehTXo8jSBDs9VeMhTVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk4nFLbfQUjvKzX/BL3vRDoZz4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmUzYjBiYmMtOTFjNy0z Y2NjLWFlNDMtOGQwMjE2Njc2ZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa54HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGjTcNUQOSMoTRL9u2jD8Erq8YKHEYiPsAMlAIfKTOaUlMB5vu2py14 dBfqR2ZC3+OB8HjN7evp8t1/KVEdYQRBBBmwqGQC5s9Gfp5/sI9Q1U7b2RWKCUwP suqggFF0bCpLXWTYjyDxMF+OImwLzGWo9buP45mTnMWNhxZVIApXWtq5HYOC+X2g Z7Wi+BUeveNRsNNuRum3umjqmN7RbOJPOUI19Nq9DuezxrbmsSpheNh5Hcyxxv65 bQloRtrt/YUPVlZ/I6ZzEp+j9e56oLzk9fa8GKzIGInXbaoASUPLhM1U25PrhJQ2 1I43HcahBcBwR+hDrN5DYkXco8ZhT+E= -----END CERTIFICATE-----Generated at Sat Aug 29 05:59:41 2026 by rpki-client