$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d23de7b1-d828-350a-a73e-1a9680ddda0a.roa File: d23de7b1-d828-350a-a73e-1a9680ddda0a.roa (raw, json) Hash identifier: 1hSjG0NqD3FzeuM5eAox5/zUg1ruAFvyVnsZ6712HOw= Subject key identifier: A1:57:98:F8:51:E2:8F:6F:25:44:C2:CE:74:8B:8F:BC:4D:76:90:77 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D9A2030D779E908E27951A200 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d23de7b1-d828-350a-a73e-1a9680ddda0a.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 62904 IP address blocks: 107.158.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:30:d7:79:e9:08:e2:79:51:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=4ddfc9c2-d1c9-4bff-bcd6-a8e9dd239cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:88:b4:54:0d:b0:17:4b:d6:da:10:43:d0: d1:10:4c:c3:8c:b4:85:26:27:67:7a:08:a8:db:d8: f9:d4:c7:ff:98:81:96:21:44:10:32:b1:5f:25:98: 22:07:dc:ad:bf:82:ab:aa:14:b0:70:e3:56:c9:82: f8:ee:33:9c:73:fb:ce:c4:6f:ed:cd:c1:c9:4b:3d: 4a:61:7b:dd:f2:86:63:87:02:e1:e9:cc:81:f3:97: bb:57:1e:b4:97:27:82:76:55:96:f2:84:f7:27:53: f7:46:72:a2:ca:30:49:ad:f9:3a:f9:49:c2:1b:39: 10:8d:11:6a:98:86:19:71:16:54:90:76:f2:29:1c: ad:0b:f5:6a:b1:a9:af:e2:12:33:bb:6d:f6:60:4f: 6f:26:ce:02:b9:1f:95:85:33:b2:4e:99:5c:30:ad: 54:cd:c0:ba:22:cc:39:6b:bf:48:23:f7:6e:55:53: f3:a8:a4:57:82:ec:2a:8e:c4:30:ae:34:73:2d:13: d5:89:fd:83:4f:64:4d:52:c6:4d:44:a4:7a:4e:54: 99:c1:d6:bc:03:94:6f:66:88:0f:b8:0a:15:c5:c8: 86:72:04:b7:d5:fb:08:90:9b:a8:b4:74:ae:3f:7b: ed:54:eb:6b:81:9b:42:21:a2:6f:32:8b:34:b7:be: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:57:98:F8:51:E2:8F:6F:25:44:C2:CE:74:8B:8F:BC:4D:76:90:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d23de7b1-d828-350a-a73e-1a9680ddda0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:19:f5:11:6a:94:7a:24:50:96:62:a9:a8:61:79:a9:f9:15: 6a:3a:b3:35:2b:3e:78:cf:11:88:95:a0:3d:ae:c5:e7:96:4b: 01:43:c7:ad:ea:ec:60:8f:45:cf:d3:ee:e2:39:5a:e4:f9:28: 36:90:83:12:2d:7d:2f:19:1a:3d:17:68:e8:fd:04:84:4c:9a: 81:2a:26:70:80:bb:1a:86:8a:15:3f:9b:4a:e6:c1:58:97:3a: 12:fa:eb:9f:66:3a:42:66:dd:32:fd:f1:fc:58:18:ef:ec:e9: 90:d8:c6:11:23:5d:eb:ab:48:e8:6c:82:ea:e3:ee:1d:4b:7b: 09:8a:79:07:80:b2:e4:0f:4b:0b:05:d1:21:84:b4:07:d3:dd: 19:74:72:a7:29:95:53:28:59:32:dd:d1:6c:e5:fc:e8:76:91: 95:0c:49:a8:51:6d:8b:10:a0:03:8a:fe:30:aa:ed:28:c8:90: 3f:d0:b0:7c:7b:e7:93:15:76:5f:50:48:05:0a:68:c5:d3:7e: ef:6a:e6:79:9f:ae:89:e9:9f:00:c5:ac:e3:cd:a1:d9:6b:cd: d9:38:e5:93:57:8e:76:75:c5:fa:6f:0b:1a:ff:6e:c2:49:dd: dc:36:7a:11:41:b5:c2:fb:bd:9e:0a:c3:23:95:4e:29:82:0e: bd:c2:be:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDDXeekI4nlRogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NGRkZmM5YzItZDFjOS00YmZmLWJjZDYtYThlOWRkMjM5Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiviItFQNsBdL1toQQ9DREEzDjLSFJidnegio 29j51Mf/mIGWIUQQMrFfJZgiB9ytv4KrqhSwcONWyYL47jOcc/vOxG/tzcHJSz1K YXvd8oZjhwLh6cyB85e7Vx60lyeCdlWW8oT3J1P3RnKiyjBJrfk6+UnCGzkQjRFq mIYZcRZUkHbyKRytC/Vqsamv4hIzu232YE9vJs4CuR+VhTOyTplcMK1UzcC6Isw5 a79II/duVVPzqKRXguwqjsQwrjRzLRPVif2DT2RNUsZNRKR6TlSZwda8A5RvZogP uAoVxciGcgS31fsIkJuotHSuP3vtVOtrgZtCIaJvMos0t76BbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFXmPhR4o9vJUTCznSLj7xNdpB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDIzZGU3YjEtZDgyOC0z NTBhLWE3M2UtMWE5NjgwZGRkYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa56+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsZ9RFqlHokUJZiqahhean5FWo6szUrPnjPEYiVoD2uxeeWSwFDx63q 7GCPRc/T7uI5WuT5KDaQgxItfS8ZGj0XaOj9BIRMmoEqJnCAuxqGihU/m0rmwViX OhL6659mOkJm3TL98fxYGO/s6ZDYxhEjXeurSOhsgurj7h1LewmKeQeAsuQPSwsF 0SGEtAfT3Rl0cqcplVMoWTLd0Wzl/Oh2kZUMSahRbYsQoAOK/jCq7SjIkD/QsHx7 55MVdl9QSAUKaMXTfu9q5nmfronpnwDFrOPNodlrzdk45ZNXjnZ1xfpvCxr/bsJJ 3dw2ehFBtcL7vZ4KwyOVTimCDr3CvmM= -----END CERTIFICATE-----Generated at Wed May 13 13:23:36 2026 by rpki-client