$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa File: b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa (raw, json) Hash identifier: ezIoXCwXU3fU3xxeS+H/+fxGCJxWoMr6zuNMbWr3qqg= Subject key identifier: C1:C9:F1:86:4D:3C:95:77:01:67:1D:78:DA:A0:60:2B:78:BA:D4:F5 Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584D1F4A36273F8755651E26A200 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 3842 IP address blocks: 107.191.113.0/24 maxlen: 24 168.235.72.0/22 maxlen: 24 168.235.76.0/22 maxlen: 24 168.235.84.0/22 maxlen: 24 168.235.92.0/22 maxlen: 24 168.235.96.0/22 maxlen: 24 168.235.104.0/22 maxlen: 24 2604:180:3::/48 maxlen: 48 2604:180:f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:36:27:3f:87:55:65:1e:26:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=625aba47-8eda-4ac6-949a-4397b2cba7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:32:c5:92:f2:bf:de:69:b7:f5:84:4b:46: 86:f4:c0:39:21:d9:2e:fa:87:b9:1c:5b:a8:6e:f9: ff:a4:1c:42:31:1a:57:c3:5b:e1:78:99:18:a1:bf: 82:6e:67:fa:14:8f:4d:67:bf:b3:94:c2:92:70:63: fe:9d:6a:35:f3:da:4b:4c:e4:1f:15:5b:53:48:e2: 9f:dd:26:f1:03:36:78:33:67:00:a2:46:8a:b3:4c: 9a:89:72:2f:c1:a4:ad:be:32:97:a4:b7:08:eb:df: 95:e4:2a:f2:52:ff:be:b4:71:82:d0:1b:ff:16:95: dd:fa:d6:16:0c:c0:8d:c7:5e:1a:8d:66:2e:0e:50: c1:fd:46:36:c6:24:d6:5c:19:3f:7a:5c:58:03:3c: 81:a8:22:31:8b:16:6d:66:8a:f7:2c:14:6b:90:e6: 87:4e:78:61:79:72:74:25:2f:9e:b7:7e:c5:1c:ea: 31:50:1d:be:5c:87:3e:b1:e4:02:47:6b:8e:e1:dc: 58:c3:9d:f3:90:2a:1a:4a:c7:76:1a:3c:c8:30:cf: 48:d7:33:80:3e:1c:60:c1:7d:50:9d:86:e5:b3:9a: 44:84:c1:c1:13:95:3e:51:52:6f:03:82:2d:13:50: 6d:74:9d:61:be:2b:02:c4:91:9d:ad:53:21:40:54: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C9:F1:86:4D:3C:95:77:01:67:1D:78:DA:A0:60:2B:78:BA:D4:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/b710ca62-dd3a-32c2-9716-4b9f38c059ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 107.191.113.0/24 168.235.72.0/21 168.235.84.0/22 168.235.92.0-168.235.99.255 168.235.104.0/22 IPv6: 2604:180:3::/48 2604:180:f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:09:84:68:ff:8c:2f:c7:ae:72:6e:fc:17:bd:5b:97:72:90: 61:fa:2c:64:f9:79:78:5f:2f:40:e0:7b:95:5c:02:dd:52:31: ce:ec:85:2d:cd:c2:54:77:50:bf:b6:cb:29:51:7d:fd:71:bf: 84:90:06:64:6a:4e:59:59:77:a1:0d:9e:3a:93:8d:cf:45:b4: 0e:0d:f5:5e:41:11:be:c9:e3:dd:64:d1:b6:e2:32:87:fa:9e: 03:be:5d:80:fd:d3:a6:c6:5a:aa:aa:bc:af:34:c4:0d:24:2a: 4f:b4:0e:b3:62:02:04:57:a6:75:0a:3c:e6:84:8e:ee:7e:f7: 6d:a6:50:cc:c8:e1:c8:83:a5:3c:20:79:a3:87:90:c8:d4:50: d2:5a:cd:31:fe:96:c3:71:eb:f6:ec:83:7e:dd:c6:4e:02:0c: 6f:c2:e1:a9:c5:92:8c:5e:45:aa:14:ea:87:8a:79:bf:d0:0a: 89:f4:b9:11:52:05:75:c8:19:68:1e:6e:77:90:1a:93:52:4c: 4d:94:c0:c8:83:23:51:e1:f4:fc:0c:07:c4:c6:e4:cf:19:0d: 56:5e:35:36:cd:64:03:9b:f5:e0:85:95:69:6c:35:86:e1:c9: a9:7d:ab:62:a4:e2:37:39:ea:94:9e:c3:14:d6:15:1b:4a:95: 71:9e:6c:90 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWE0fSjYnP4dVZR4mogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NjI1YWJhNDctOGVkYS00YWM2LTk0OWEtNDM5N2IyY2JhN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1UyxZLyv95pt/WES0aG9MA5Idku+oe5HFuo bvn/pBxCMRpXw1vheJkYob+Cbmf6FI9NZ7+zlMKScGP+nWo189pLTOQfFVtTSOKf 3SbxAzZ4M2cAokaKs0yaiXIvwaStvjKXpLcI69+V5CryUv++tHGC0Bv/FpXd+tYW DMCNx14ajWYuDlDB/UY2xiTWXBk/elxYAzyBqCIxixZtZor3LBRrkOaHTnhheXJ0 JS+et37FHOoxUB2+XIc+seQCR2uO4dxYw53zkCoaSsd2GjzIMM9I1zOAPhxgwX1Q nYbls5pEhMHBE5U+UVJvA4ItE1BtdJ1hvisCxJGdrVMhQFSN9wIDAQABo4IDjzCC A4swHQYDVR0OBBYEFMHJ8YZNPJV3AWcdeNqgYCt4utT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvYjcxMGNhNjItZGQzYS0z MmMyLTk3MTYtNGI5ZjM4YzA1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDAsBAIAATAmAwQAa79xAwQD qOtIAwQCqOtUMAwDBAKo61wDBAKo62ADBAKo62gwGAQCAAIwEgMHACYEAYAAAwMH ACYEAYAA9DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCuCYRo/4wvx65ybvwXvVuXcpBh+ixk+Xl4Xy9A4HuV XALdUjHO7IUtzcJUd1C/tsspUX39cb+EkAZkak5ZWXehDZ46k43PRbQODfVeQRG+ yePdZNG24jKH+p4Dvl2A/dOmxlqqqryvNMQNJCpPtA6zYgIEV6Z1CjzmhI7ufvdt plDMyOHIg6U8IHmjh5DI1FDSWs0x/pbDcev27IN+3cZOAgxvwuGpxZKMXkWqFOqH inm/0AqJ9LkRUgV1yBloHm53kBqTUkxNlMDIgyNR4fT8DAfExuTPGQ1WXjU2zWQD m/XghZVpbDWG4cmpfatipOI3OeqUnsMU1hUbSpVxnmyQ -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:34 2026 by rpki-client