$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa File: 9637676f-8811-3a4f-93c6-1c237745e195.roa (raw, json) Hash identifier: eqTksDzRDYh8z7N0VrpkoCw/exDZFacH4oRayrnhFNw= Subject key identifier: 2C:B8:8D:81:72:9D:1B:9B:28:02:D6:FC:13:68:B1:6C:35:AA:B0:53 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D300A27E02B427F5A9ACFF680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 174 IP address blocks: 107.158.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:27:e0:2b:42:7f:5a:9a:cf:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0626b423-8d43-450a-a393-f5c5162b863f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:d1:2d:ad:90:e7:c3:0f:8a:0f:d0:0e:be: 09:8b:dc:1f:97:36:6c:d7:c6:bc:9c:a6:c1:3b:ee: f8:35:20:ff:4e:49:f3:16:0a:4b:6b:56:cf:f6:c7: 9e:61:2b:cf:03:09:8f:08:fa:41:32:74:87:c8:44: bf:c2:b0:57:f4:5c:8d:84:43:78:5d:a7:ee:1d:35: 19:35:8d:51:b9:d7:f6:8b:ec:47:65:49:cd:03:2b: 94:b2:12:3e:40:0c:ae:05:45:59:11:47:22:2b:c1: b5:81:dc:23:8b:d2:59:82:b5:ad:d1:41:9f:61:79: 6e:c1:8c:9e:2e:65:bd:0c:15:0f:bf:08:7e:cf:ae: 9d:f2:58:c9:97:ff:c5:b4:e5:b7:66:2a:fe:e7:2d: 12:9d:91:9a:79:30:64:2c:40:bc:d3:f8:ec:36:1a: 76:37:2f:65:4a:60:01:44:46:d2:8f:8d:19:bb:d4: 39:81:d1:dc:57:7c:8e:12:06:28:07:fe:e1:27:77: a7:bb:27:81:47:01:5d:60:e5:4c:13:85:89:7a:ff: 46:65:c6:66:68:23:e0:5b:3f:32:5f:41:2e:e0:cf: 78:d3:82:1d:07:68:04:9c:cb:eb:82:eb:a3:d4:f9: dd:20:99:48:58:58:c2:f9:f2:22:70:bf:79:5a:e4: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B8:8D:81:72:9D:1B:9B:28:02:D6:FC:13:68:B1:6C:35:AA:B0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5c:7e:14:a6:58:c6:23:80:19:21:bc:f3:5a:83:3a:da:70: d1:70:a3:e8:ae:61:ca:dd:a6:7a:a3:b9:dc:e6:6d:43:d2:8c: b0:75:cf:91:7b:7e:7d:5f:7e:dc:6e:02:27:17:31:cc:63:b8: 8a:0a:77:ac:b9:8e:b7:12:19:fd:f6:9c:14:91:53:a4:b8:5e: 9f:fa:40:dc:56:28:09:09:aa:20:1d:e4:10:f0:17:f4:fe:f5: 47:66:67:ea:a7:e6:3e:9b:7f:ff:02:e5:91:90:48:58:c5:6a: b2:86:e0:32:82:93:b5:07:47:63:a4:5e:7e:03:cf:95:d3:59: be:d1:f8:91:60:65:78:55:cc:82:62:d9:71:c4:c8:4a:f4:14: e7:e8:1d:6d:12:ff:c6:66:bb:0c:48:2d:cd:18:fd:bb:2f:77: 4b:4c:2a:8c:90:db:53:4f:09:78:57:75:2c:ae:dc:dd:f8:ca: fe:c8:20:b7:a5:40:47:b4:ac:eb:05:88:14:6e:07:e4:67:a2: 43:b0:fe:40:cb:f7:10:5c:92:e2:de:6a:bb:3b:94:93:17:d9: 60:7a:e7:3f:29:5d:9e:94:a2:81:fa:ca:8f:83:2f:15:14:e1: 9e:7e:44:72:5f:08:c4:61:54:ec:d2:40:20:9c:8f:63:25:7d: ad:b4:5e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCifgK0J/WprP9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDYyNmI0MjMtOGQ0My00NTBhLWEzOTMtZjVjNTE2MmI4NjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SXRLa2Q58MPig/QDr4Ji9wflzZs18a8nKbB O+74NSD/TknzFgpLa1bP9seeYSvPAwmPCPpBMnSHyES/wrBX9FyNhEN4XafuHTUZ NY1Rudf2i+xHZUnNAyuUshI+QAyuBUVZEUciK8G1gdwji9JZgrWt0UGfYXluwYye LmW9DBUPvwh+z66d8ljJl//FtOW3Zir+5y0SnZGaeTBkLEC80/jsNhp2Ny9lSmAB REbSj40Zu9Q5gdHcV3yOEgYoB/7hJ3enuyeBRwFdYOVME4WJev9GZcZmaCPgWz8y X0Eu4M9404IdB2gEnMvrguuj1PndIJlIWFjC+fIicL95WuSlQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy4jYFynRubKALW/BNosWw1qrBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTYzNzY3NmYtODgxMS0z YTRmLTkzYzYtMWMyMzc3NDVlMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItcfhSmWMYjgBkhvPNagzracNFwo+iuYcrdpnqjudzmbUPSjLB1z5F7 fn1fftxuAicXMcxjuIoKd6y5jrcSGf32nBSRU6S4Xp/6QNxWKAkJqiAd5BDwF/T+ 9UdmZ+qn5j6bf/8C5ZGQSFjFarKG4DKCk7UHR2OkXn4Dz5XTWb7R+JFgZXhVzIJi 2XHEyEr0FOfoHW0S/8ZmuwxILc0Y/bsvd0tMKoyQ21NPCXhXdSyu3N34yv7IILel QEe0rOsFiBRuB+RnokOw/kDL9xBckuLears7lJMX2WB65z8pXZ6UooH6yo+DLxUU 4Z5+RHJfCMRhVOzSQCCcj2Mlfa20Xh8= -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:36 2026 by rpki-client