$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa File: c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa (raw, json) Hash identifier: kO9QvMM3Uy3K57ISOABOi5yY1Y6tyjYtR49HE1twYeg= Subject key identifier: 5D:FF:49:57:91:87:D4:35:6B:DC:FE:6B:A9:A2:58:3C:DA:C6:E0:19 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DADAADDB6FF61DEF171F1FB80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 22781 IP address blocks: 108.171.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:dd:b6:ff:61:de:f1:71:f1:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=ef64f20c-d310-4230-860e-2ccf250a18a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:5a:bd:c3:e2:98:b4:c6:07:b3:fc:39:72: bd:6f:6e:59:6c:de:29:5b:7a:49:fe:f5:43:d6:69: a0:a6:79:18:d0:a2:41:8b:60:a2:80:bf:90:5b:7f: 5b:7d:52:bf:9b:db:98:b4:44:2e:ea:d9:9d:c7:66: 10:1c:25:01:76:5c:79:59:cf:3b:d4:6b:b5:40:be: 11:ed:5d:22:6e:e9:44:ae:3f:be:72:34:25:c2:9c: ae:83:f1:08:d7:cc:93:fd:e6:41:74:45:b8:fc:be: 5e:cf:15:38:0f:4f:ea:d8:3e:3d:95:fe:65:50:c4: e7:af:de:74:79:d1:b0:65:a7:51:42:53:94:df:42: 38:f9:3b:85:a8:b9:6a:a9:84:c7:1d:ff:d5:77:c2: 7c:0f:14:03:9d:65:7e:e3:96:a4:c7:df:f0:fd:30: 3f:40:70:98:86:41:af:71:8b:c3:6b:35:e7:7b:a7: b6:10:d9:7a:e3:b6:e2:1a:01:8e:ed:2e:c1:dc:5e: 33:58:5a:dd:24:a8:fe:f1:b3:ad:15:0a:39:68:fc: 40:d4:bb:08:44:7c:2b:97:12:d8:76:90:15:fa:d8: d0:96:08:50:38:b7:a8:4e:cf:ae:78:30:06:80:41: 90:af:5c:7b:42:6e:fc:69:c2:36:30:07:3c:37:fe: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FF:49:57:91:87:D4:35:6B:DC:FE:6B:A9:A2:58:3C:DA:C6:E0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:eb:42:d0:e0:b0:f4:07:1b:0f:8e:b0:f9:19:9f:08:05:89: 72:cc:a6:5f:d5:41:fa:65:03:67:76:de:a8:75:0c:56:15:e8: ed:d5:90:f0:fd:3e:96:27:76:83:b4:fd:d4:89:20:d7:de:ce: 9e:bc:28:20:01:c8:41:36:7b:af:2e:d1:22:ff:9f:2a:8f:38: 2a:7c:75:6d:6e:55:64:89:3d:85:28:f7:4c:44:91:f2:e9:ca: df:79:17:2d:73:8c:25:00:37:52:ec:20:db:88:68:33:c4:16: 00:82:cf:4b:08:7b:5f:f2:e5:e3:13:e2:1a:2e:3b:40:70:b8: b5:a8:74:e1:83:d4:23:91:b7:d2:45:88:7e:30:ce:15:be:6c: e1:80:80:08:fc:c8:ec:f9:41:60:19:49:31:b4:7e:80:8e:4c: ac:ee:ba:f1:f6:f3:ae:1d:17:62:aa:fb:fb:1d:93:2d:63:e3: 3f:95:22:a1:d9:04:1e:c5:81:0a:89:04:c7:30:59:75:22:c1: 0c:ab:3a:22:6e:85:50:50:2b:4b:98:dc:76:81:64:76:bd:aa: c3:df:f9:41:96:9b:a6:45:f7:6a:e9:55:f8:e4:7d:19:2d:f3: aa:7e:60:ce:d6:d4:b3:a2:25:30:84:4c:f9:5e:fc:c7:e5:55: 9f:13:15:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqt22/2He8XHx+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZWY2NGYyMGMtZDMxMC00MjMwLTg2MGUtMmNjZjI1MGExOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTdavcPimLTGB7P8OXK9b25ZbN4pW3pJ/vVD 1mmgpnkY0KJBi2CigL+QW39bfVK/m9uYtEQu6tmdx2YQHCUBdlx5Wc871Gu1QL4R 7V0ibulErj++cjQlwpyug/EI18yT/eZBdEW4/L5ezxU4D0/q2D49lf5lUMTnr950 edGwZadRQlOU30I4+TuFqLlqqYTHHf/Vd8J8DxQDnWV+45akx9/w/TA/QHCYhkGv cYvDazXne6e2ENl647biGgGO7S7B3F4zWFrdJKj+8bOtFQo5aPxA1LsIRHwrlxLY dpAV+tjQlghQOLeoTs+ueDAGgEGQr1x7Qm78acI2MAc8N/5fXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3/SVeRh9Q1a9z+a6miWDzaxuAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYzc0MzhmMDktMzJhNC0z MDk3LWI5YjQtZmEwN2FjN2EyMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDrQtDgsPQHGw+OsPkZnwgFiXLMpl/VQfplA2d23qh1DFYV6O3VkPD9 PpYndoO0/dSJINfezp68KCAByEE2e68u0SL/nyqPOCp8dW1uVWSJPYUo90xEkfLp yt95Fy1zjCUAN1LsINuIaDPEFgCCz0sIe1/y5eMT4houO0BwuLWodOGD1CORt9JF iH4wzhW+bOGAgAj8yOz5QWAZSTG0foCOTKzuuvH2864dF2Kq+/sdky1j4z+VIqHZ BB7FgQqJBMcwWXUiwQyrOiJuhVBQK0uY3HaBZHa9qsPf+UGWm6ZF92rpVfjkfRkt 86p+YM7W1LOiJTCETPle/MflVZ8TFRI= -----END CERTIFICATE-----Generated at Wed May 13 15:34:09 2026 by rpki-client