$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa File: 3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa (raw, json) Hash identifier: MMz33jI60pcTOKe0Q0LU6WKORdLrrDBIcBQnzOxk8iQ= Subject key identifier: ED:DE:FF:CA:EC:EF:CE:D2:F0:C0:8C:B1:51:7B:F7:80:22:91:8E:DC Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584D15A261C3082BDEB13D9EA84C Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 398414 IP address blocks: 107.191.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:61:c3:08:2b:de:b1:3d:9e:a8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=95657d0a-9d55-4ce9-98de-1e9480cbd433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:8f:53:6e:42:11:97:01:c7:84:63:bb:a8: 42:91:a8:aa:60:9b:2c:bd:1b:bf:59:85:6e:0c:76: 11:98:ad:18:f5:5e:d3:8e:16:40:23:d2:78:1f:a5: 0d:d3:40:68:d5:04:5b:d3:3d:ed:fd:24:24:26:b0: b6:83:55:76:f3:85:1a:2f:d1:08:b4:30:76:46:e7: 16:f1:96:82:77:29:07:4b:69:86:99:a4:72:10:3d: 48:58:94:fd:43:98:d7:ee:55:b3:40:2d:f2:ee:dd: 6b:9d:48:57:13:6b:49:fa:c5:f2:b9:9f:31:76:a2: 1a:6e:89:fd:ec:8a:be:dc:94:d2:c0:a1:f0:c6:da: bc:b4:8d:f7:88:4e:0c:90:2d:b5:ef:bc:0b:c1:cc: ab:5c:bc:14:fd:10:86:d7:4f:3a:63:9e:ae:35:77: d0:2d:75:e4:5a:7a:14:88:bf:9b:7f:d8:78:f3:62: 36:63:83:2c:7f:d0:7f:84:08:96:2e:47:55:11:a9: 0b:a4:77:4e:18:0e:8e:8c:f2:ac:04:06:a6:4a:85: 48:e2:38:28:02:91:be:c0:f0:d4:41:1d:d5:02:d2: 87:3e:1d:53:db:13:54:d2:a5:8e:c3:54:2f:2e:2f: ae:bf:e9:96:15:05:ef:02:13:96:05:e3:52:e6:91: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DE:FF:CA:EC:EF:CE:D2:F0:C0:8C:B1:51:7B:F7:80:22:91:8E:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 107.191.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:30:c3:46:02:c9:cd:ee:ef:94:0d:51:3c:0d:59:72:12:d7: 60:bc:b8:ed:fd:eb:0d:dc:62:fb:98:e0:5f:1c:2c:e8:6b:c6: 22:38:b6:7e:65:d0:33:fd:7f:d7:ba:6b:df:0d:fa:37:5a:19: b6:e2:e7:7a:9d:86:7e:d7:1a:f6:f3:01:28:db:40:4e:de:a7: 9d:28:65:3a:5d:99:e0:16:52:8f:77:3a:31:c5:c9:a8:e5:20: 18:97:3c:f1:be:27:c2:8c:fb:8d:92:d9:cf:ab:9d:47:ef:d4: 5f:61:87:64:38:e3:87:6e:44:07:fa:44:f0:19:e2:d0:31:46: ea:65:53:a3:df:5c:39:dd:8a:fd:0e:1d:6c:01:1b:66:3f:4c: 62:96:a4:f1:66:f7:17:59:cd:89:85:e3:07:43:a0:27:e9:38: d9:10:da:fa:7d:c3:4e:04:84:36:ba:ed:3f:9e:cd:6d:ba:62: 88:e5:18:e8:99:6d:9b:6d:7f:c0:31:21:2c:5e:16:39:cf:32: 7e:db:67:74:91:f4:f9:21:4b:8d:71:ab:bd:00:66:b5:a1:ae: 50:79:d4:26:63:32:1b:0e:0e:89:d3:c3:9e:bc:7a:bc:24:be: 5a:97:60:2e:67:a5:e9:ec:1d:76:b1:8f:49:1e:98:6a:ba:ce: c3:e4:5f:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomHDCCvesT2eqEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk OTU2NTdkMGEtOWQ1NS00Y2U5LTk4ZGUtMWU5NDgwY2JkNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZmPU25CEZcBx4Rju6hCkaiqYJssvRu/WYVu DHYRmK0Y9V7TjhZAI9J4H6UN00Bo1QRb0z3t/SQkJrC2g1V284UaL9EItDB2RucW 8ZaCdykHS2mGmaRyED1IWJT9Q5jX7lWzQC3y7t1rnUhXE2tJ+sXyuZ8xdqIabon9 7Iq+3JTSwKHwxtq8tI33iE4MkC2177wLwcyrXLwU/RCG1086Y56uNXfQLXXkWnoU iL+bf9h482I2Y4Msf9B/hAiWLkdVEakLpHdOGA6OjPKsBAamSoVI4jgoApG+wPDU QR3VAtKHPh1T2xNU0qWOw1QvLi+uv+mWFQXvAhOWBeNS5pGDDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3e/8rs787S8MCMsVF794AikY7cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvM2MyNmNmNWQtNjBmZS0z YmYzLWE5MjAtNTU3NDdjMTEyYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUww0YCyc3u75QNUTwNWXIS12C8uO396w3cYvuY4F8cLOhrxiI4tn5l 0DP9f9e6a98N+jdaGbbi53qdhn7XGvbzASjbQE7ep50oZTpdmeAWUo93OjHFyajl IBiXPPG+J8KM+42S2c+rnUfv1F9hh2Q444duRAf6RPAZ4tAxRuplU6PfXDndiv0O HWwBG2Y/TGKWpPFm9xdZzYmF4wdDoCfpONkQ2vp9w04EhDa67T+ezW26YojlGOiZ bZttf8AxISxeFjnPMn7bZ3SR9PkhS41xq70AZrWhrlB51CZjMhsODonTw568erwk vlqXYC5npensHXaxj0kemGq6zsPkX9I= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:14 2026 by rpki-client