$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa File: c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa (raw, json) Hash identifier: L2HCy2SaSWMYy3GKWDiEFo+zzKIhzWm2O2K+2P6x0Qg= Subject key identifier: DD:6E:53:AC:BD:A6:CE:3A:E8:8B:B3:5F:DF:19:D1:2A:4A:3A:19:3B Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584CCD0C9B200B3D46135B110F80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 22781 IP address blocks: 108.171.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:9b:20:0b:3d:46:13:5b:11:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=ec01e48d-46cb-49b7-b4cc-7b39ef5bd64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8c:24:81:08:86:95:fa:b6:26:11:ad:da:cb: 99:e3:e7:ca:af:57:95:d4:7d:96:a2:8c:58:57:74: 27:ab:23:5c:c4:5c:5d:b5:89:9d:9c:11:cf:4a:d6: 37:9e:2e:5c:31:56:27:01:17:32:d8:3c:54:84:3a: 89:9f:c0:f9:ac:ea:87:cd:24:6d:70:b0:ec:55:ee: d5:48:e2:97:9d:dc:77:42:93:4a:1a:93:ae:f6:ba: 7b:cc:75:bc:09:ca:91:c6:a9:7d:e3:43:9c:3d:31: 9c:c7:66:37:bc:0b:bc:f8:1e:e8:b0:38:74:e7:dc: d2:f8:de:76:f2:d4:7c:a4:2f:54:4f:2d:fe:f5:f7: 43:9b:f6:19:f9:c5:64:90:5e:21:fd:51:7b:b3:56: 3e:b0:36:be:d2:b1:57:d6:31:ef:fc:01:67:6c:e0: 69:da:14:90:08:4e:15:db:f3:d7:92:cd:90:cb:01: 51:1d:60:83:2d:42:03:16:86:7b:d6:d7:b1:b8:13: ee:6e:27:9c:ce:86:3f:03:73:ee:1b:4b:ca:0b:d0: 5e:18:59:94:27:d0:d8:a5:b7:1d:a1:27:3b:4e:14: dc:2a:76:aa:0b:54:ae:a3:53:ff:59:cd:25:e0:3f: c2:2e:fd:c5:da:41:27:26:7e:61:43:36:68:08:40: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:53:AC:BD:A6:CE:3A:E8:8B:B3:5F:DF:19:D1:2A:4A:3A:19:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:54:b6:b5:a9:f3:37:56:44:4f:5d:f3:c0:1d:60:c4:72:7d: 2b:91:31:38:5d:e2:79:90:5c:9d:33:d2:6d:bb:6e:ec:3f:ab: fc:64:53:96:6e:9a:82:d9:7f:e1:c6:4e:0d:17:d7:04:62:c5: ad:c7:6e:85:f3:1e:25:a7:14:01:26:b8:cc:57:f2:88:75:9b: 6b:cb:b5:ee:b2:29:54:55:53:c4:f6:b6:ec:77:69:02:4a:51: 40:0d:21:a1:b9:5f:b4:6b:2c:2c:e7:f4:2c:f1:39:2a:8a:f9: 5a:cc:6a:09:3e:57:ef:44:9a:8d:87:02:d5:8c:94:89:15:f6: 7c:b1:65:e7:cb:6e:c2:06:32:d2:64:2c:c5:9a:4f:52:33:5a: 2d:cb:69:1e:0d:ba:9f:35:67:3f:78:5c:a6:86:ea:c2:1b:7e: 10:fb:4f:8f:b1:38:21:3f:0e:a6:29:ba:b6:76:c4:bf:38:6f: 64:33:90:74:65:5d:58:77:9d:94:ff:3f:42:e3:09:c1:0f:8a: 0e:da:ee:20:08:42:10:95:59:61:97:ec:86:dd:b0:8f:ff:79: 46:f0:d6:2b:64:42:f7:1e:09:b1:8b:48:eb:57:68:a5:7c:61: 09:cf:af:ec:eb:79:44:12:5d:9e:93:dc:ff:ec:b6:9b:3c:ee: 80:c8:f6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJsgCz1GE1sRD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWMwMWU0OGQtNDZjYi00OWI3LWI0Y2MtN2IzOWVmNWJkNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIwkgQiGlfq2JhGt2suZ4+fKr1eV1H2WooxY V3QnqyNcxFxdtYmdnBHPStY3ni5cMVYnARcy2DxUhDqJn8D5rOqHzSRtcLDsVe7V SOKXndx3QpNKGpOu9rp7zHW8CcqRxql940OcPTGcx2Y3vAu8+B7osDh059zS+N52 8tR8pC9UTy3+9fdDm/YZ+cVkkF4h/VF7s1Y+sDa+0rFX1jHv/AFnbOBp2hSQCE4V 2/PXks2QywFRHWCDLUIDFoZ71texuBPubieczoY/A3PuG0vKC9BeGFmUJ9DYpbcd oSc7ThTcKnaqC1Suo1P/Wc0l4D/CLv3F2kEnJn5hQzZoCEBEZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1uU6y9ps466IuzX98Z0SpKOhk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYzc0MzhmMDktMzJhNC0z MDk3LWI5YjQtZmEwN2FjN2EyMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRUtrWp8zdWRE9d88AdYMRyfSuRMThd4nmQXJ0z0m27buw/q/xkU5Zu moLZf+HGTg0X1wRixa3HboXzHiWnFAEmuMxX8oh1m2vLte6yKVRVU8T2tux3aQJK UUANIaG5X7RrLCzn9CzxOSqK+VrMagk+V+9Emo2HAtWMlIkV9nyxZefLbsIGMtJk LMWaT1IzWi3LaR4Nup81Zz94XKaG6sIbfhD7T4+xOCE/DqYpurZ2xL84b2QzkHRl XVh3nZT/P0LjCcEPig7a7iAIQhCVWWGX7IbdsI//eUbw1itkQvceCbGLSOtXaKV8 YQnPr+zreUQSXZ6T3P/stps87oDI9ok= -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:54 2026 by rpki-client