$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa File: cdf3bcf2-7df6-3f72-b855-028d59105e18.roa (raw, json) Hash identifier: T5989L6x7CiDfHBklZnYUf3suNFRFd8tZKBt+pea2PM= Subject key identifier: 84:DF:39:96:2C:90:05:B9:3F:45:C5:7F:DF:8F:24:36:E0:A2:0A:39 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584F7BB30F87AA6E6850CC50EEC0 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 20016 IP address blocks: 198.145.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:0f:87:aa:6e:68:50:cc:50:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=2eb987b1-99f4-42bc-8495-83a251d893e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:99:5a:8d:cd:c6:91:a2:5c:9e:95:ad:f6: 67:96:9d:2d:c3:ee:68:bf:02:7d:c7:c6:5b:f9:8e: 2f:cb:b6:d2:4e:56:4e:52:2f:93:80:64:38:f5:68: 07:77:4b:fd:1e:c7:1e:22:5a:8e:e7:d9:96:b5:a8: fc:89:70:f6:9c:2a:cf:1f:a8:f8:ce:57:e0:0e:c1: a2:d6:96:9a:0f:86:e1:c4:8c:a6:55:94:4f:f0:95: ea:48:8a:0c:57:a8:2b:d0:e0:6f:fd:95:48:42:69: f8:cf:b2:3a:93:cf:1a:a4:52:a6:a4:74:2c:00:e0: 2b:4f:d7:b1:4f:3a:ce:6f:71:aa:5a:30:65:03:e9: a2:2b:98:99:d6:04:1c:40:45:0a:31:7d:6d:b6:d7: 5f:12:11:07:25:48:a7:c9:64:12:58:44:95:9e:77: d7:10:5e:18:ce:54:73:d1:32:35:bb:76:5c:e6:a5: fa:11:98:c2:cd:58:cf:26:1b:eb:65:ba:8a:6a:71: cf:09:b9:4a:14:66:c3:aa:2f:dc:54:2b:19:91:d7: 16:a3:5b:99:e9:94:f5:a3:61:92:38:d9:2d:5a:95: a8:13:95:05:59:1a:df:b0:ae:79:10:d0:b3:14:3e: 92:1d:ab:0b:63:62:97:59:f7:36:f5:94:e9:9a:b8: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DF:39:96:2C:90:05:B9:3F:45:C5:7F:DF:8F:24:36:E0:A2:0A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a5:87:44:b5:1a:93:f7:63:33:d7:84:a6:97:8f:32:ef:d8: 31:f8:af:07:6f:58:d4:36:ae:fe:d4:a9:cb:e7:4e:a2:ce:16: f6:d3:3f:bf:f0:5e:81:fb:a3:f1:a5:59:6b:6a:56:5d:c5:df: ac:05:66:e1:f0:02:9d:a5:ab:07:7d:56:17:27:bf:1e:ed:04: ed:de:39:df:c5:e3:8f:4d:84:f0:e5:99:c5:c6:53:fc:b7:87: 50:39:d7:03:ae:0d:b8:bb:f8:7d:58:c3:fc:09:49:cd:a6:53: 67:e7:4c:a2:51:92:bd:a2:9d:40:10:38:1c:34:7c:86:fa:02: 44:30:b7:3b:e5:0c:7a:18:e9:3b:d5:d3:5e:89:d7:9a:a4:19: 90:da:b5:5d:75:c4:bc:96:6b:d7:37:b9:b8:ee:0b:4a:82:a1: c6:be:17:db:8c:8a:f6:db:a2:31:59:f4:46:4a:ee:90:59:84: d8:fd:f9:d6:71:c9:b6:37:4a:26:fb:bd:54:45:77:e2:31:06: bc:18:ac:d2:73:6c:ca:89:d9:6b:fd:24:42:26:4b:58:d5:40: 7f:23:50:86:35:68:50:df:ec:5a:85:91:a3:e9:dd:30:54:b2: e1:b3:9d:8c:c5:1f:3f:2c:5b:f1:be:a6:e1:51:c4:9f:af:22: a6:77:49:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sw+Hqm5oUMxQ7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MmViOTg3YjEtOTlmNC00MmJjLTg0OTUtODNhMjUxZDg5M2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW+ZWo3NxpGiXJ6VrfZnlp0tw+5ovwJ9x8Zb +Y4vy7bSTlZOUi+TgGQ49WgHd0v9HsceIlqO59mWtaj8iXD2nCrPH6j4zlfgDsGi 1paaD4bhxIymVZRP8JXqSIoMV6gr0OBv/ZVIQmn4z7I6k88apFKmpHQsAOArT9ex TzrOb3GqWjBlA+miK5iZ1gQcQEUKMX1tttdfEhEHJUinyWQSWESVnnfXEF4YzlRz 0TI1u3Zc5qX6EZjCzVjPJhvrZbqKanHPCblKFGbDqi/cVCsZkdcWo1uZ6ZT1o2GS ONktWpWoE5UFWRrfsK55ENCzFD6SHasLY2KXWfc29ZTpmriFbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITfOZYskAW5P0XFf9+PJDbgogo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvY2RmM2JjZjItN2RmNi0z ZjcyLWI4NTUtMDI4ZDU5MTA1ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJalh0S1GpP3YzPXhKaXjzLv2DH4rwdvWNQ2rv7UqcvnTqLOFvbTP7/w XoH7o/GlWWtqVl3F36wFZuHwAp2lqwd9Vhcnvx7tBO3eOd/F449NhPDlmcXGU/y3 h1A51wOuDbi7+H1Yw/wJSc2mU2fnTKJRkr2inUAQOBw0fIb6AkQwtzvlDHoY6TvV 016J15qkGZDatV11xLyWa9c3ubjuC0qCoca+F9uMivbbojFZ9EZK7pBZhNj9+dZx ybY3Sib7vVRFd+IxBrwYrNJzbMqJ2Wv9JEImS1jVQH8jUIY1aFDf7FqFkaPp3TBU suGznYzFHz8sW/G+puFRxJ+vIqZ3Sfc= -----END CERTIFICATE-----Generated at Sun Nov 15 11:21:17 2026 by rpki-client