$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b53e2a9b-831c-3e6e-9c1d-2c3f584c7913.roa File: b53e2a9b-831c-3e6e-9c1d-2c3f584c7913.roa (raw, json) Hash identifier: x/vOhKrRjyVnuSiNQkH9UxY/2WcwMOXN+7F90FmTOhM= Subject key identifier: DA:D9:B4:95:8E:AF:EA:78:16:BE:4C:41:99:30:B1:65:CF:D1:69:8B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D0DEB7508F2A9B3C7622E3E80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b53e2a9b-831c-3e6e-9c1d-2c3f584c7913.roa Signing time: Wed 04 Mar 2026 07:41:30 +0000 ROA not before: Wed 04 Mar 2026 07:41:30 +0000 ROA not after: Tue 02 Jun 2026 06:41:30 +0000 asID: 2914 IP address blocks: 107.158.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:eb:75:08:f2:a9:b3:c7:62:2e:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 4 07:41:30 2026 GMT Not After : Jun 2 06:41:30 2026 GMT Subject: CN=911df219-532a-451b-b55d-17583333fae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:2f:40:a1:65:6f:6c:f8:c6:87:a3:07:b5: 05:b8:5b:ba:d9:f3:b5:35:11:85:52:45:ea:a3:ae: 74:1f:1c:9b:e2:c3:e3:1f:b9:3d:6e:9b:c4:1b:e3: a8:45:a6:a1:8d:7c:8b:4d:70:2f:0d:fe:6e:08:d5: 50:25:36:cc:73:56:bd:f0:5b:2d:f2:28:e7:5e:18: 36:91:8c:9a:6c:ae:fa:99:dc:e6:5b:bc:dc:fc:cc: dd:f5:6d:1b:d5:6b:97:8e:7e:2f:62:6f:31:f6:1e: b1:9b:a6:3a:54:e0:1a:55:e7:e2:79:d5:72:8f:1f: 63:c6:6b:87:b6:50:bf:9f:23:87:10:96:de:43:3a: f4:58:23:dc:be:10:b4:2c:0a:2a:53:76:d0:e1:9e: 6a:bd:b3:d5:2d:1c:89:1e:71:3f:1d:17:38:5e:0b: 90:95:dc:12:0b:df:6e:28:66:fd:18:0b:97:f0:2b: 23:86:4e:40:56:b1:38:0e:c3:b7:43:5b:a8:bb:aa: 11:ea:4b:b2:a0:5a:72:ec:e8:4d:50:54:72:f9:f5: 98:4c:03:3d:6b:21:5b:71:67:d1:b8:e6:eb:9f:08: 39:75:7b:f2:2a:01:57:e4:f3:a0:a6:1e:6e:fa:bf: 39:fc:23:b3:68:81:65:a0:d2:8d:97:90:2f:19:06: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:B4:95:8E:AF:EA:78:16:BE:4C:41:99:30:B1:65:CF:D1:69:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b53e2a9b-831c-3e6e-9c1d-2c3f584c7913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d2:f2:1b:c4:56:c0:36:b2:3c:c4:7f:37:50:15:da:74:79: e1:71:1e:90:90:1c:cf:45:4c:12:13:37:38:0c:28:20:f2:67: 33:9d:d3:de:a6:b6:bb:42:b4:04:79:c3:fd:53:6c:fe:ff:0e: 1c:05:c4:5f:24:58:9f:5f:7b:19:41:bc:0d:f5:e4:72:bd:46: 4d:c8:7b:07:bc:91:83:ea:4b:5a:55:e5:dc:19:80:10:9a:de: 2b:02:b8:f0:14:e9:6b:1b:83:8d:6b:82:01:b5:70:d2:10:d5: 74:e6:32:27:cf:35:70:04:f2:ab:21:14:31:79:31:35:c0:f7: 9b:60:9f:a8:46:a4:ad:d0:bc:e1:a0:8e:1a:94:bb:57:94:19: c6:b1:f2:5d:77:5c:92:54:9b:a9:82:ce:4e:a3:d6:89:09:0f: 83:c7:77:0c:44:cf:15:5b:ed:a8:cc:81:59:c9:f8:27:53:65: 76:f8:00:29:92:f6:5a:64:00:43:1e:21:ba:4b:8a:c3:d7:6c: 19:d7:47:2e:04:f7:0f:44:16:ce:40:f6:7b:3c:74:f9:3b:68: 09:b1:6e:9d:86:d7:8a:a1:3d:4f:c3:df:b9:e4:da:89:4c:5d: 96:33:f3:2b:13:9c:e5:ca:aa:28:89:d5:9e:10:09:89:4a:d1: 9c:76:6e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0N63UI8qmzx2IuPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMwNDA3NDEzMFoXDTI2MDYwMjA2NDEzMFowLzEtMCsGA1UEAxMk OTExZGYyMTktNTMyYS00NTFiLWI1NWQtMTc1ODMzMzNmYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvQvQKFlb2z4xoejB7UFuFu62fO1NRGFUkXq o650Hxyb4sPjH7k9bpvEG+OoRaahjXyLTXAvDf5uCNVQJTbMc1a98Fst8ijnXhg2 kYyabK76mdzmW7zc/Mzd9W0b1WuXjn4vYm8x9h6xm6Y6VOAaVefiedVyjx9jxmuH tlC/nyOHEJbeQzr0WCPcvhC0LAoqU3bQ4Z5qvbPVLRyJHnE/HRc4XguQldwSC99u KGb9GAuX8Csjhk5AVrE4DsO3Q1uou6oR6kuyoFpy7OhNUFRy+fWYTAM9ayFbcWfR uObrnwg5dXvyKgFX5POgph5u+r85/COzaIFloNKNl5AvGQb5IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrZtJWOr+p4Fr5MQZkwsWXP0WmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjUzZTJhOWItODMxYy0z ZTZlLTljMWQtMmMzZjU4NGM3OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXS8hvEVsA2sjzEfzdQFdp0eeFxHpCQHM9FTBITNzgMKCDyZzOd096m trtCtAR5w/1TbP7/DhwFxF8kWJ9fexlBvA315HK9Rk3Iewe8kYPqS1pV5dwZgBCa 3isCuPAU6Wsbg41rggG1cNIQ1XTmMifPNXAE8qshFDF5MTXA95tgn6hGpK3QvOGg jhqUu1eUGcax8l13XJJUm6mCzk6j1okJD4PHdwxEzxVb7ajMgVnJ+CdTZXb4ACmS 9lpkAEMeIbpLisPXbBnXRy4E9w9EFs5A9ns8dPk7aAmxbp2G14qhPU/D37nk2olM XZYz8ysTnOXKqiiJ1Z4QCYlK0Zx2bpo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:48:07 2026 by rpki-client