$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa File: d4c71e90-c45a-3390-94ca-0437b1719610.roa (raw, json) Hash identifier: lTqAsmdYQC306SNakxXzylCmkTuZRLzXhkYKB2AWnD0= Subject key identifier: A7:9A:38:BF:21:85:E3:8D:53:36:5C:38:CA:B7:C7:CF:0A:4C:37:1F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D492A801B36D6C726A9B8FA20 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 215595 IP address blocks: 107.158.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:80:1b:36:d6:c7:26:a9:b8:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=d688e6cc-6e3f-4ce4-98d9-415b489ce08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:59:06:1b:13:78:e6:96:27:fa:5c:f2:32: d1:40:64:bc:32:c1:1a:ec:e8:c1:b8:a8:d5:ee:38: 3b:c5:ca:fb:fd:1c:94:c4:fe:dd:d7:57:4c:ab:4a: bc:e5:af:ce:bb:3f:f9:8f:b7:f4:0e:51:36:64:90: 27:d4:76:a5:03:e5:1e:9e:bd:51:e0:b2:c0:2e:c2: 9a:16:56:17:76:85:35:19:52:32:26:7f:fc:6f:d7: 2b:00:4e:5a:59:7b:b9:4d:ab:a8:c5:ef:f7:78:3f: 84:8d:ae:38:36:db:5d:83:e0:33:c7:2e:c5:85:c3: a0:91:0f:d4:dd:71:a4:a4:26:b0:c9:8f:8a:61:97: 68:bb:8c:25:70:ea:d8:e8:0e:d7:c5:bd:7e:4e:53: df:0c:53:83:87:13:41:ff:d5:0b:7c:c6:63:e1:b6: d9:33:22:fe:f2:68:90:31:47:81:38:04:e2:9b:8e: 12:bb:12:e7:59:62:18:8e:c7:dc:b5:3c:fb:30:8c: 18:bd:c3:56:61:de:b5:af:14:29:d6:c2:ce:fb:92: d0:3f:28:41:d2:c7:c9:2a:8d:cd:5c:8c:a9:6a:9e: b1:c4:c6:fa:cd:68:ba:35:8e:21:e3:52:5e:08:39: ce:38:6f:bd:c5:b4:75:37:c7:37:d4:93:cc:68:29: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9A:38:BF:21:85:E3:8D:53:36:5C:38:CA:B7:C7:CF:0A:4C:37:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:dd:f4:55:34:1e:52:18:14:31:d5:46:e9:f7:9a:8b:2a:02: 57:03:46:77:8e:d8:bf:ae:38:e5:d2:4f:7c:96:9d:eb:be:b4: 18:c5:7f:2b:06:4f:09:c5:eb:b1:2b:ce:cd:dc:9b:d7:b9:4e: f0:92:b7:24:98:8a:e2:a2:15:cb:5b:ca:8d:66:02:d0:b4:d6: 23:7d:6c:b4:c9:ae:ad:1d:ca:ab:18:78:92:aa:0d:bc:3d:2e: d4:7f:f2:4a:00:74:a0:4a:e7:08:1d:4e:d0:4a:54:95:96:d5: 04:02:1a:2f:2b:e0:92:27:72:0d:6a:8a:35:16:10:2f:60:75: d9:b1:c9:ef:da:ff:37:eb:28:6f:fe:9b:91:bf:7c:89:c1:da: c4:c7:a3:fe:53:66:dc:9f:0b:ad:12:74:f6:c8:42:51:c5:23: b0:46:79:5e:c1:ab:e9:1e:ee:f8:41:f3:77:fa:fc:7e:f8:d1: d6:5b:59:02:77:11:36:30:61:ba:8c:4a:e4:9f:46:e4:dd:f8: b3:14:4d:bd:39:bf:f3:5e:de:bc:da:16:fc:8f:fd:ef:90:8a: fa:23:d4:3e:7f:40:e6:da:28:12:d5:ad:93:21:5d:82:bb:7a: de:ee:d4:a2:23:35:ed:34:2f:92:bb:de:7c:0e:e2:67:47:b5: cb:ce:21:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKoAbNtbHJqm4+iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDY4OGU2Y2MtNmUzZi00Y2U0LTk4ZDktNDE1YjQ4OWNlMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK1ZBhsTeOaWJ/pc8jLRQGS8MsEa7OjBuKjV 7jg7xcr7/RyUxP7d11dMq0q85a/Ouz/5j7f0DlE2ZJAn1HalA+Uenr1R4LLALsKa FlYXdoU1GVIyJn/8b9crAE5aWXu5Tauoxe/3eD+Eja44Nttdg+Azxy7FhcOgkQ/U 3XGkpCawyY+KYZdou4wlcOrY6A7Xxb1+TlPfDFODhxNB/9ULfMZj4bbZMyL+8miQ MUeBOATim44SuxLnWWIYjsfctTz7MIwYvcNWYd61rxQp1sLO+5LQPyhB0sfJKo3N XIypap6xxMb6zWi6NY4h41JeCDnOOG+9xbR1N8c31JPMaCkj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeaOL8hheONUzZcOMq3x88KTDcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDRjNzFlOTAtYzQ1YS0z MzkwLTk0Y2EtMDQzN2IxNzE5NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa56CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbd9FU0HlIYFDHVRun3mosqAlcDRneO2L+uOOXST3yWneu+tBjFfysG TwnF67Erzs3cm9e5TvCStySYiuKiFctbyo1mAtC01iN9bLTJrq0dyqsYeJKqDbw9 LtR/8koAdKBK5wgdTtBKVJWW1QQCGi8r4JIncg1qijUWEC9gddmxye/a/zfrKG/+ m5G/fInB2sTHo/5TZtyfC60SdPbIQlHFI7BGeV7Bq+ke7vhB83f6/H740dZbWQJ3 ETYwYbqMSuSfRuTd+LMUTb05v/Ne3rzaFvyP/e+Qivoj1D5/QObaKBLVrZMhXYK7 et7u1KIjNe00L5K73nwO4mdHtcvOIfE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:13:28 2026 by rpki-client