$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa File: ace4f36f-3b53-3796-be69-6548ad3e7057.roa (raw, json) Hash identifier: WyhwcK98u4Bgkranb3UDXr1A0w+NwOHt7S2PnwEg/EU= Subject key identifier: AF:19:59:2C:F1:C3:65:91:C7:0C:78:B6:87:56:AD:3F:CC:95:9C:75 Certificate issuer: /CN=d38fa32a-a6da-4615-8255-2c818c06ef15 Certificate serial: 010D0C9F4328584CA5F713F9411856F120095C40 Authority key identifier: B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 400817 IP address blocks: 204.107.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:13:f9:41:18:56:f1:20:09:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38fa32a-a6da-4615-8255-2c818c06ef15 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=2c86876d-ef89-4d39-93bc-57d39bb49ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b4:f8:be:4c:15:d9:b3:8a:f9:ed:f2:64:fe: a2:2f:8d:94:f2:00:44:b8:d5:f1:06:0c:35:8b:ff: e8:a0:4a:e1:f2:49:83:c6:74:7e:9d:70:9a:e8:81: 35:12:b1:a5:09:13:78:c0:25:d5:be:67:35:77:51: e2:7b:48:fe:45:f7:9a:f2:86:6a:59:be:f6:fc:4f: ee:cc:b1:89:15:2c:a3:4f:6e:7f:61:d4:45:de:cb: ed:e5:60:92:f3:aa:c5:c7:10:19:1b:f9:f2:08:f3: 5f:50:d0:04:b6:96:70:67:e2:b8:3d:d1:a2:4a:f5: 41:77:fd:7c:ac:ca:b4:dd:fc:df:65:0c:4e:48:12: 54:aa:f7:88:c3:51:90:b0:06:1b:d5:05:f7:90:6e: 8c:5f:ae:71:49:22:28:90:ab:fc:af:78:db:c6:5a: 92:c1:46:9d:1d:20:7f:79:66:03:37:4c:1e:4b:33: ff:7d:d3:7b:2f:ee:e6:e1:81:d4:00:b5:9b:f7:a9: 26:6e:f1:f9:a4:7c:26:08:ff:a9:25:19:0e:ec:14: 2f:a0:dd:af:0b:7a:31:8c:b7:b2:4a:f4:cc:44:ae: 00:6c:fc:a6:55:81:1c:de:1d:ce:97:26:49:af:24: e0:d8:09:cb:4f:80:33:8a:4f:d4:d5:95:bc:30:38: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:19:59:2C:F1:C3:65:91:C7:0C:78:B6:87:56:AD:3F:CC:95:9C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.crl X509v3 Authority Key Identifier: keyid:B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer sbgp-ipAddrBlock: critical IPv4: 204.107.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fa:3a:17:6c:d4:96:e9:17:9e:b2:b3:0e:f3:ab:bd:e0:35: 5d:b6:65:a7:c4:2e:c1:fd:9d:1b:3a:45:29:25:4a:bb:32:4e: f3:03:cb:3f:82:5a:b6:fb:96:e9:b0:47:b2:c8:15:62:2d:8a: 1c:65:c7:a8:e8:ca:90:43:db:45:27:7d:91:63:15:16:fc:b5: 4a:28:96:c4:f0:dc:56:a4:cc:34:b7:22:5c:4c:a1:34:ba:a0: 16:a2:88:89:fe:21:51:a7:a8:59:64:dc:15:61:9e:a2:af:66: c2:79:ba:e6:1e:7b:48:2d:26:48:4e:56:2d:86:cd:62:7e:c7: 87:63:eb:fc:4e:2b:84:db:ef:0b:d4:59:cb:9e:88:93:ea:87: 8b:8f:b0:aa:c3:7b:f0:7d:11:20:b8:53:c4:79:99:f4:8f:d3: fe:c5:3a:49:43:c2:ee:ad:57:69:76:e0:35:9a:b7:4a:2a:4b: 24:19:95:a3:d6:f4:58:04:1f:2d:f6:1a:fb:25:cd:3e:a5:43: c6:03:44:2f:a0:51:ca:1d:8a:95:84:45:cc:24:b5:0f:37:e5: ac:fb:19:ac:f9:1a:66:77:19:ec:d7:3d:40:36:b3:b6:35:75: 8f:18:82:75:3c:b8:c0:cd:97:cb:26:bd:5a:ac:ef:83:c9:8d: 09:d9:5f:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xP5QRhW8SAJXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM4ZmEzMmEtYTZkYS00NjE1LTgyNTUtMmM4MThjMDZl ZjE1MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MmM4Njg3NmQtZWY4OS00ZDM5LTkzYmMtNTdkMzliYjQ5Y2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLT4vkwV2bOK+e3yZP6iL42U8gBEuNXxBgw1 i//ooErh8kmDxnR+nXCa6IE1ErGlCRN4wCXVvmc1d1Hie0j+Rfea8oZqWb72/E/u zLGJFSyjT25/YdRF3svt5WCS86rFxxAZG/nyCPNfUNAEtpZwZ+K4PdGiSvVBd/18 rMq03fzfZQxOSBJUqveIw1GQsAYb1QX3kG6MX65xSSIokKv8r3jbxlqSwUadHSB/ eWYDN0weSzP/fdN7L+7m4YHUALWb96kmbvH5pHwmCP+pJRkO7BQvoN2vC3oxjLey SvTMRK4AbPymVYEc3h3OlyZJryTg2AnLT4Azik/U1ZW8MDg8FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8ZWSzxw2WRxwx4todWrT/MlZx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMzhm YTMyYS1hNmRhLTQ2MTUtODI1NS0yYzgxOGMwNmVmMTUvYWNlNGYzNmYtM2I1My0z Nzk2LWJlNjktNjU0OGFkM2U3MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDM4ZmEzMmEtYTZkYS00NjE1LTgy NTUtMmM4MThjMDZlZjE1L2QzOGZhMzJhLWE2ZGEtNDYxNS04MjU1LTJjODE4YzA2 ZWYxNS5jcmwwHwYDVR0jBBgwFoAUsGccd1qEVjbOsmlFxW/kox0HB2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kMzhmYTMyYS1hNmRhLTQ2MTUtODI1NS0yYzgx OGMwNmVmMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGtZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX6Ohds1JbpF56ysw7zq73gNV22ZafELsH9nRs6RSklSrsyTvMDyz+C Wrb7lumwR7LIFWItihxlx6joypBD20UnfZFjFRb8tUoolsTw3FakzDS3IlxMoTS6 oBaiiIn+IVGnqFlk3BVhnqKvZsJ5uuYee0gtJkhOVi2GzWJ+x4dj6/xOK4Tb7wvU WcueiJPqh4uPsKrDe/B9ESC4U8R5mfSP0/7FOklDwu6tV2l24DWat0oqSyQZlaPW 9FgEHy32GvslzT6lQ8YDRC+gUcodipWERcwktQ835az7Gaz5GmZ3GezXPUA2s7Y1 dY8YgnU8uMDNl8smvVqs74PJjQnZX7s= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:14 2026 by rpki-client