$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa File: 57d3021b-d699-3504-9528-d82afc503970.roa (raw, json) Hash identifier: vAKsnF9RYHVqgebdJnH31il5n1Ezdy3LPiHT4MX02Bs= Subject key identifier: 1D:08:86:96:7A:2A:32:E7:C5:37:8A:6D:09:91:09:CD:F7:6A:E6:B0 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DBA3AE5DA8127462959D91980 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22781 IP address blocks: 108.171.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e5:da:81:27:46:29:59:d9:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=5d6b53b7-5b1f-4876-b120-562710d88f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:0e:01:9b:fc:88:09:95:f8:e7:07:a9:18: 77:ba:28:62:c2:c1:3f:34:a3:63:87:84:14:33:25: ae:a2:62:cf:1e:7e:06:8d:62:94:26:1c:6f:ac:8e: c5:5e:62:9e:a2:8f:f8:36:95:88:a7:5b:50:b6:c3: 7d:87:c1:fb:8b:4e:20:24:7d:cd:19:4d:01:03:7c: db:6b:28:9c:42:70:3f:e0:4f:84:86:0d:1f:f0:d3: 57:47:f7:6f:94:c0:57:89:f9:0c:02:61:bd:fb:e1: fe:d0:a2:95:97:a9:d1:91:42:54:93:2b:a5:dd:6b: b5:dc:34:1f:39:1c:9b:6f:f6:36:9d:04:a4:da:63: 9c:3d:ac:f9:5a:aa:2f:45:4b:47:0a:6a:f4:c6:0c: 1b:ef:ed:b4:bd:0e:64:57:77:20:8d:58:10:b3:0c: 11:79:7e:94:39:6e:0b:81:4b:f6:ec:d9:62:37:a8: 91:ad:22:fa:66:b6:ac:87:ce:ae:76:af:85:57:a5: c9:cc:2d:f8:cf:a8:12:4c:ac:e8:63:9f:71:07:19: 7d:fa:59:a9:25:7e:db:4c:4c:56:f4:86:44:6e:ef: 45:42:d5:b2:97:d3:dc:43:3b:bc:4d:05:8f:bf:bc: a6:29:31:fa:85:30:cf:18:14:00:ab:04:c5:b2:7c: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:86:96:7A:2A:32:E7:C5:37:8A:6D:09:91:09:CD:F7:6A:E6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f0:f3:73:ad:09:1a:39:4f:67:54:72:73:38:f2:74:e0:9a: 92:72:f7:06:67:2e:a2:1d:a7:b8:93:27:26:30:14:d3:2d:5f: f6:d9:38:02:58:0d:36:fc:b4:8b:3c:8c:32:76:9a:5d:05:f0: 02:53:1c:9b:1b:57:47:61:5b:a3:f7:50:da:fb:0e:74:2d:d9: 6c:f2:ef:eb:74:3c:22:23:25:76:fb:04:08:f4:9e:de:25:e0: 16:35:c4:3e:99:3f:97:cf:18:aa:ec:8a:4e:71:4a:3b:6f:8f: b5:96:8b:93:c3:8a:cb:eb:23:46:45:4e:38:40:cd:a5:99:d9: 25:1d:62:b9:9a:49:d8:1a:72:73:82:f6:b7:ee:1a:e5:8f:7e: cd:a8:12:51:fd:51:41:1c:d9:17:9f:ca:56:00:ea:96:3b:d0: 91:36:9f:4d:75:9f:70:71:de:1c:55:96:c1:c8:0f:40:fd:4d: 6e:94:04:24:68:18:59:fc:a3:f8:39:5c:68:b4:37:f3:17:d2: 75:3f:89:30:b0:a2:74:4b:b3:dd:31:05:5c:ec:03:5e:b2:31: 24:c8:da:bd:34:56:9d:86:c9:34:ac:a0:4c:e1:b2:51:37:10: 7f:31:bc:e5:53:e4:46:3e:24:c0:8b:9b:f7:17:b6:6d:c8:01: 4d:a7:a6:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuXagSdGKVnZGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NWQ2YjUzYjctNWIxZi00ODc2LWIxMjAtNTYyNzEwZDg4ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSAOAZv8iAmV+OcHqRh3uihiwsE/NKNjh4QU MyWuomLPHn4GjWKUJhxvrI7FXmKeoo/4NpWIp1tQtsN9h8H7i04gJH3NGU0BA3zb ayicQnA/4E+Ehg0f8NNXR/dvlMBXifkMAmG9++H+0KKVl6nRkUJUkyul3Wu13DQf ORybb/Y2nQSk2mOcPaz5WqovRUtHCmr0xgwb7+20vQ5kV3cgjVgQswwReX6UOW4L gUv27NliN6iRrSL6Zrash86udq+FV6XJzC34z6gSTKzoY59xBxl9+lmpJX7bTExW 9IZEbu9FQtWyl9PcQzu8TQWPv7ymKTH6hTDPGBQAqwTFsnxc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0IhpZ6KjLnxTeKbQmRCc33auawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTdkMzAyMWItZDY5OS0z NTA0LTk1MjgtZDgyYWZjNTAzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALw83OtCRo5T2dUcnM48nTgmpJy9wZnLqIdp7iTJyYwFNMtX/bZOAJY DTb8tIs8jDJ2ml0F8AJTHJsbV0dhW6P3UNr7DnQt2Wzy7+t0PCIjJXb7BAj0nt4l 4BY1xD6ZP5fPGKrsik5xSjtvj7WWi5PDisvrI0ZFTjhAzaWZ2SUdYrmaSdgacnOC 9rfuGuWPfs2oElH9UUEc2RefylYA6pY70JE2n011n3Bx3hxVlsHID0D9TW6UBCRo GFn8o/g5XGi0N/MX0nU/iTCwonRLs90xBVzsA16yMSTI2r00Vp2GyTSsoEzhslE3 EH8xvOVT5EY+JMCLm/cXtm3IAU2npsg= -----END CERTIFICATE-----Generated at Wed May 13 17:15:55 2026 by rpki-client