$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa File: ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa (raw, json) Hash identifier: Z4HMSRzJgJSpWvB9CGoR2MHgO3WCpXAEw8Iqnxdg2JY= Subject key identifier: 57:F9:1E:B3:C0:48:F4:37:2A:41:30:FF:8B:43:49:11:85:C0:6D:10 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584CF42224845DAC314789841600 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 40628 IP address blocks: 204.144.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:24:84:5d:ac:31:47:89:84:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=586a5b2e-0395-4d55-8c86-ead53afe45de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:25:38:83:b4:2d:88:71:4b:77:5b:52:12: 8b:13:6a:d6:4b:ab:19:c1:92:31:84:83:7d:be:34: 70:1d:0c:d4:c0:b9:c0:22:93:31:51:ec:e1:40:ee: cb:d8:f7:61:fc:e7:41:10:ce:8f:50:bd:92:1a:93: be:a3:e6:cf:25:e9:64:d5:2e:b2:02:20:fe:5d:be: 26:a5:45:b1:97:f3:c7:6e:c1:1b:0d:ba:08:d6:0b: 63:c2:85:f1:be:f2:bf:1e:47:a4:c9:9e:39:50:68: 11:80:3e:b1:05:f2:76:fa:b6:67:28:af:cc:9d:ae: e8:5c:cb:59:f2:35:6e:50:52:00:09:72:12:8c:cb: 5b:9c:59:ef:4f:5a:18:5e:d4:6a:2c:d7:a1:70:f4: 15:9b:dc:90:33:5b:7a:f0:3c:59:52:c3:83:ef:b2: e2:34:3a:78:93:53:58:60:9c:d3:3e:a8:52:df:09: b6:60:d3:28:62:32:34:f3:ce:a6:4d:52:ea:de:04: 2d:8d:0d:8a:ce:01:c2:09:8a:da:0a:62:9e:ab:01: b6:de:0b:84:05:46:f9:e7:03:7f:23:ff:85:d2:e0: fe:02:e5:35:c6:44:f7:4d:84:ab:88:af:7f:92:07: 85:f7:1a:36:9c:80:e1:10:3d:68:5e:63:f9:e1:f4: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F9:1E:B3:C0:48:F4:37:2A:41:30:FF:8B:43:49:11:85:C0:6D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 204.144.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8b:ae:7c:09:b6:75:af:2a:e1:2b:5b:2c:6f:fc:3c:3f:5d: 1b:6f:18:0b:fb:12:df:d6:b3:95:8b:2f:63:87:e4:10:ff:1d: 58:a1:23:5e:e3:02:27:e5:ce:ab:5e:84:e1:2c:75:1c:6e:c1: 0e:8f:8b:95:bf:a6:7a:16:6e:a7:e5:c5:d3:8a:66:42:25:f8: 99:1d:ea:6f:32:a4:5c:1f:be:45:87:50:f5:2b:2d:62:d8:0c: 61:63:52:27:f6:bb:dc:c2:8f:aa:37:bd:60:d1:23:1f:97:05: f4:ec:ff:0e:28:1e:c7:f3:bf:70:a9:a1:af:91:4e:b5:54:dc: b4:df:d9:a9:6f:07:a9:92:6b:ab:79:8a:aa:98:b4:f5:5a:8c: a6:2e:01:31:8d:44:88:58:55:68:8b:40:14:32:e0:78:f2:27: 55:62:e2:1e:a3:aa:7f:34:61:c0:b8:f5:eb:d6:8a:8f:0c:f6: 14:59:25:91:89:2a:af:1f:32:f3:b3:66:02:c3:7a:8d:d4:eb: a2:91:d9:95:7c:99:c1:d6:9d:39:c9:2d:21:c9:5d:e0:a8:a8: 85:0e:15:e0:21:d8:b9:d8:9d:02:90:ea:62:3a:a3:fb:a0:bd: f9:34:20:0b:f6:68:32:ac:d1:ba:9b:19:00:54:e4:8d:cd:c7: 20:d1:f2:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiSEXawxR4mEFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk NTg2YTViMmUtMDM5NS00ZDU1LThjODYtZWFkNTNhZmU0NWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF4lOIO0LYhxS3dbUhKLE2rWS6sZwZIxhIN9 vjRwHQzUwLnAIpMxUezhQO7L2Pdh/OdBEM6PUL2SGpO+o+bPJelk1S6yAiD+Xb4m pUWxl/PHbsEbDboI1gtjwoXxvvK/HkekyZ45UGgRgD6xBfJ2+rZnKK/Mna7oXMtZ 8jVuUFIACXISjMtbnFnvT1oYXtRqLNehcPQVm9yQM1t68DxZUsOD77LiNDp4k1NY YJzTPqhS3wm2YNMoYjI0886mTVLq3gQtjQ2KzgHCCYraCmKeqwG23guEBUb55wN/ I/+F0uD+AuU1xkT3TYSriK9/kgeF9xo2nIDhED1oXmP54fQzbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf5HrPASPQ3KkEw/4tDSRGFwG0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvZWY2NTdhMTgtYmE2ZS0z ZWE2LWIwMGYtZTU2MDJlOTI1MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJBRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaLrnwJtnWvKuErWyxv/Dw/XRtvGAv7Et/Ws5WLL2OH5BD/HVihI17j AiflzqtehOEsdRxuwQ6Pi5W/pnoWbqflxdOKZkIl+Jkd6m8ypFwfvkWHUPUrLWLY DGFjUif2u9zCj6o3vWDRIx+XBfTs/w4oHsfzv3Cpoa+RTrVU3LTf2alvB6mSa6t5 iqqYtPVajKYuATGNRIhYVWiLQBQy4HjyJ1Vi4h6jqn80YcC49evWio8M9hRZJZGJ Kq8fMvOzZgLDeo3U66KR2ZV8mcHWnTnJLSHJXeCoqIUOFeAh2LnYnQKQ6mI6o/ug vfk0IAv2aDKs0bqbGQBU5I3NxyDR8sQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:25 2026 by rpki-client