$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/738b1998-442d-3e20-8e37-73e5431f39a4.roa File: 738b1998-442d-3e20-8e37-73e5431f39a4.roa (raw, json) Hash identifier: 0JcqLigp8wr5tFanMbuzmx1HhSmnQP29sjuRRFuttlI= Subject key identifier: 31:33:AD:A7:6E:42:24:5D:A9:0E:2B:F2:71:C5:22:7E:8D:B9:83:9F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB981C073F2679FE9D6708740 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/738b1998-442d-3e20-8e37-73e5431f39a4.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 62904 IP address blocks: 107.158.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:c0:73:f2:67:9f:e9:d6:70:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=b42d27a1-72ae-480d-8b9a-47cc40ff6665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:8b:4e:99:cb:8f:e4:1a:0d:17:62:a9:ea: b4:e7:b2:41:a1:79:ad:46:3b:60:2e:52:ed:69:42: 4d:04:6a:74:6e:d1:9c:33:c4:f0:ef:00:a6:9e:bb: e2:7b:04:5e:9b:3a:21:49:10:85:0b:25:60:5e:8a: 98:45:90:5f:ce:06:3c:b8:d9:91:a1:ee:0b:23:d8: 31:d6:be:f5:1b:43:77:89:d1:0c:7e:19:dd:36:f2: cf:bf:9f:e6:14:25:90:ed:6e:67:b2:21:77:0d:d7: 3b:64:ef:c5:b9:75:57:88:60:97:e2:fb:97:8b:42: 54:6f:e5:cb:60:28:23:1d:e1:40:5a:03:2f:25:61: 4d:fa:b1:27:07:40:92:a5:84:8f:fa:4f:e1:3a:10: 6a:a6:27:cc:8e:7b:79:5e:db:26:30:0e:94:29:04: 54:d0:b9:81:95:da:90:da:ef:d1:97:19:a1:58:cd: df:90:dd:7d:05:21:c4:16:cc:1c:3b:f4:6b:32:4b: fb:01:0d:3d:2b:9d:7c:99:e2:1c:e2:81:41:8e:92: b4:5f:8c:87:ee:bc:58:8e:12:da:a7:58:f5:9c:53: b5:c3:b8:95:7f:49:d6:74:83:e7:3a:b2:67:2e:23: d2:70:36:d1:9b:90:f9:3c:7a:f8:47:41:ea:7c:2a: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:33:AD:A7:6E:42:24:5D:A9:0E:2B:F2:71:C5:22:7E:8D:B9:83:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/738b1998-442d-3e20-8e37-73e5431f39a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7e:b3:4d:b0:3e:7d:38:61:8f:09:36:83:17:f0:26:9a:98: 03:0d:aa:00:76:b9:60:3f:bd:03:5d:a7:91:8f:06:e2:22:fc: 03:c0:5a:19:47:fa:b6:30:bb:18:6d:a7:6d:84:9b:cf:1d:95: f5:92:d7:58:c0:a0:d2:af:b2:3a:28:62:5d:fe:90:82:53:9a: d0:bc:e4:ac:bc:11:f8:09:e6:6b:fc:61:01:98:5b:79:53:48: 75:34:32:f0:84:24:2c:b7:00:79:d0:4d:ea:f8:e9:48:0c:0b: 9a:5c:1f:d0:34:d3:91:3d:1c:00:b3:05:c1:07:86:19:92:02: c9:5c:09:e8:ba:8b:bf:c4:58:de:21:42:f7:48:49:29:f3:b4: 65:fc:db:f7:ad:68:4f:61:83:87:78:62:16:75:b2:91:20:fa: d5:02:ae:5f:26:75:22:2c:c8:dd:57:69:c5:a6:46:a2:70:4d: a5:64:76:9a:1e:15:ce:66:f8:6d:d2:b6:0c:5d:d9:57:70:b3: 4e:98:df:d4:81:0a:5d:ea:4c:03:6c:29:7f:5c:d8:ba:91:b2: be:5f:1c:02:99:76:fc:5c:8b:49:d8:0a:ba:56:c5:89:4d:8c: 26:18:e0:e1:c0:6e:51:f7:9b:1e:5f:77:cb:13:31:9f:de:0f: 0b:66:ef:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gcBz8mef6dZwh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk YjQyZDI3YTEtNzJhZS00ODBkLThiOWEtNDdjYzQwZmY2NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDuLTpnLj+QaDRdiqeq057JBoXmtRjtgLlLt aUJNBGp0btGcM8Tw7wCmnrviewRemzohSRCFCyVgXoqYRZBfzgY8uNmRoe4LI9gx 1r71G0N3idEMfhndNvLPv5/mFCWQ7W5nsiF3Ddc7ZO/FuXVXiGCX4vuXi0JUb+XL YCgjHeFAWgMvJWFN+rEnB0CSpYSP+k/hOhBqpifMjnt5XtsmMA6UKQRU0LmBldqQ 2u/RlxmhWM3fkN19BSHEFswcO/RrMkv7AQ09K518meIc4oFBjpK0X4yH7rxYjhLa p1j1nFO1w7iVf0nWdIPnOrJnLiPScDbRm5D5PHr4R0HqfCoOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEzraduQiRdqQ4r8nHFIn6NuYOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNzM4YjE5OTgtNDQyZC0z ZTIwLThlMzctNzNlNTQzMWYzOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa55qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp+s02wPn04YY8JNoMX8CaamAMNqgB2uWA/vQNdp5GPBuIi/APAWhlH +rYwuxhtp22Em88dlfWS11jAoNKvsjooYl3+kIJTmtC85Ky8EfgJ5mv8YQGYW3lT SHU0MvCEJCy3AHnQTer46UgMC5pcH9A005E9HACzBcEHhhmSAslcCei6i7/EWN4h QvdISSnztGX82/etaE9hg4d4YhZ1spEg+tUCrl8mdSIsyN1XacWmRqJwTaVkdpoe Fc5m+G3Stgxd2Vdws06Y39SBCl3qTANsKX9c2LqRsr5fHAKZdvxci0nYCrpWxYlN jCYY4OHAblH3mx5fd8sTMZ/eDwtm76I= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:52 2026 by rpki-client