$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff00a3ab-2944-3de3-8917-4b5f68b87751.roa File: ff00a3ab-2944-3de3-8917-4b5f68b87751.roa (raw, json) Hash identifier: +LqXF0epdLWlAJcvrs1IItVCkp0HFNsmq5idOX//Dm8= Subject key identifier: BB:8C:9C:F3:EC:BE:83:4B:3F:87:0C:D5:72:D7:BC:A0:F4:89:79:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D52435CA9E2F93B4F88328480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff00a3ab-2944-3de3-8917-4b5f68b87751.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13367 IP address blocks: 107.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5c:a9:e2:f9:3b:4f:88:32:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=ded71ebf-593a-43b0-8670-98f8da19d958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:5a:e3:5c:90:4c:61:fb:84:43:fc:3b:85: 39:2b:4c:50:78:d8:25:c6:c5:67:71:23:9b:7c:0d: 74:d3:b9:46:e0:b1:7d:ce:16:c2:8e:66:75:35:62: 7c:83:84:f1:8a:67:a5:16:cd:2b:b4:03:8d:8a:a1: 10:9b:cc:30:7e:40:c0:87:cc:98:18:91:b0:d2:70: af:ae:67:4b:f9:8a:91:f9:02:8e:1f:72:07:bd:0b: e4:ca:1d:41:1b:5e:67:01:b6:6a:85:06:73:62:91: c2:78:d7:3b:84:9a:09:98:0e:e8:5c:cb:7a:df:8e: 41:fd:3e:b4:87:31:35:56:7c:58:ea:6e:26:b5:33: 54:ad:40:7d:d3:5d:68:44:e7:56:f0:a9:bf:ac:86: 01:51:ed:a0:6d:3b:8f:58:37:48:70:b0:83:da:d3: 16:2e:fc:05:40:c7:ae:74:7e:da:36:e1:57:79:f2: 13:42:6a:d2:90:4b:af:21:bf:59:39:b4:47:c0:bf: 50:4a:dd:05:08:3b:06:fe:19:07:66:dc:2f:d3:8f: b1:4f:5e:28:2b:b3:8f:38:a9:aa:b5:77:b0:9c:43: fe:48:64:fb:92:df:10:5a:43:8d:0a:50:d9:c2:e3: ea:90:83:e7:cc:f2:b8:77:3e:4e:9e:97:40:b5:a7: 49:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8C:9C:F3:EC:BE:83:4B:3F:87:0C:D5:72:D7:BC:A0:F4:89:79:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff00a3ab-2944-3de3-8917-4b5f68b87751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:22:32:92:7a:42:5b:56:f2:44:8f:98:4d:2c:a4:1e:6a:2f: 63:2a:99:53:84:b8:2e:02:86:21:a6:35:d7:61:69:9a:56:c4: e4:b9:43:6e:fa:c8:9b:50:fd:89:1d:bc:44:1e:21:e2:9f:ef: f3:9c:38:96:96:88:1e:10:bb:7f:bb:51:5e:d4:55:08:02:ff: 8e:cf:65:c4:c7:ae:a8:43:18:f4:68:1d:1b:22:20:d8:ce:b3: a2:d7:20:82:2b:e7:89:b3:c7:22:be:19:86:34:3e:f8:a7:4e: c3:94:9c:0a:c5:5f:e0:b6:38:ce:a6:35:d9:47:a7:73:83:63: 21:5e:f8:08:9e:fd:25:d6:ef:a2:7e:3d:05:c6:75:21:af:35: ab:60:59:8f:af:de:b7:c0:a2:3a:0f:1c:d0:4e:80:8b:c9:99: 36:9a:6e:99:22:78:ff:7e:2a:ad:87:c3:27:c0:0e:95:f3:df: 10:9e:82:0c:3f:13:ee:b0:f5:d6:0e:74:18:c3:ac:d1:fe:02: 36:ca:c7:69:26:b0:d2:ac:1f:f3:c8:38:3d:9d:62:b1:c8:d8: 02:fc:94:20:fe:d4:3d:38:6d:b8:7b:44:15:66:54:6a:7c:0c: 43:79:0a:08:4c:49:f3:6d:64:1f:b3:fe:98:33:8a:b7:13:35: 37:71:f6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1yp4vk7T4gyhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZGVkNzFlYmYtNTkzYS00M2IwLTg2NzAtOThmOGRhMTlkOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR9a41yQTGH7hEP8O4U5K0xQeNglxsVncSOb fA1007lG4LF9zhbCjmZ1NWJ8g4TximelFs0rtAONiqEQm8wwfkDAh8yYGJGw0nCv rmdL+YqR+QKOH3IHvQvkyh1BG15nAbZqhQZzYpHCeNc7hJoJmA7oXMt6345B/T60 hzE1VnxY6m4mtTNUrUB9011oROdW8Km/rIYBUe2gbTuPWDdIcLCD2tMWLvwFQMeu dH7aNuFXefITQmrSkEuvIb9ZObRHwL9QSt0FCDsG/hkHZtwv04+xT14oK7OPOKmq tXewnEP+SGT7kt8QWkONClDZwuPqkIPnzPK4dz5OnpdAtadJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuMnPPsvoNLP4cM1XLXvKD0iXlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmYwMGEzYWItMjk0NC0z ZGUzLTg5MTctNGI1ZjY4Yjg3NzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgiMpJ6QltW8kSPmE0spB5qL2MqmVOEuC4ChiGmNddhaZpWxOS5Q276 yJtQ/YkdvEQeIeKf7/OcOJaWiB4Qu3+7UV7UVQgC/47PZcTHrqhDGPRoHRsiINjO s6LXIIIr54mzxyK+GYY0PvinTsOUnArFX+C2OM6mNdlHp3ODYyFe+Aie/SXW76J+ PQXGdSGvNatgWY+v3rfAojoPHNBOgIvJmTaabpkieP9+Kq2HwyfADpXz3xCeggw/ E+6w9dYOdBjDrNH+AjbKx2kmsNKsH/PIOD2dYrHI2AL8lCD+1D04bbh7RBVmVGp8 DEN5CghMSfNtZB+z/pgzircTNTdx9ss= -----END CERTIFICATE-----Generated at Fri Apr 17 05:30:31 2026 by rpki-client