$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/91849de4-df16-3186-a509-72b14a80f150.roa File: 91849de4-df16-3186-a509-72b14a80f150.roa (raw, json) Hash identifier: kxtV2bjg2S5mPy5bf3ugdqHWArUrvPjQ6mze/Z0jE3c= Subject key identifier: 41:09:79:DD:E6:90:EB:4B:91:2D:3F:29:66:04:7E:38:C6:BC:91:9C Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB981C003C1338E066EA9E880 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/91849de4-df16-3186-a509-72b14a80f150.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 62904 IP address blocks: 107.158.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:c0:03:c1:33:8e:06:6e:a9:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=38a0e7db-628a-4f59-a6f2-178b80cac8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b6:48:db:21:2b:b1:be:4a:ea:16:3e:e1:c0: 33:c3:c4:61:e9:ae:c9:a7:a6:21:5c:fd:f5:55:8c: ce:ca:06:df:9e:1b:3a:41:9e:48:51:d6:e6:85:3e: ea:55:53:9e:2e:fa:67:71:0e:f0:bc:41:37:6d:56: 5f:46:85:48:71:70:55:09:da:e8:4a:a8:51:33:04: 9f:12:3f:01:d6:b8:4e:e4:91:07:82:6b:18:35:48: 53:56:9e:5b:1b:aa:00:ef:4b:ba:78:58:e0:46:8c: df:bc:97:85:7a:91:5f:9d:49:2c:c2:cf:8f:5b:70: 44:44:b3:c3:c2:26:21:2d:21:09:6e:de:71:23:b9: 78:c8:6b:d2:b0:5f:b0:77:1b:0e:32:23:22:40:49: 6d:c7:5b:eb:2e:e1:61:86:43:e8:a2:2c:98:4b:c2: f7:4b:3d:98:f7:cf:06:f1:2f:d1:07:21:8d:65:aa: 47:d2:f6:a8:87:2c:08:f4:72:07:30:ab:78:18:29: be:5e:a1:9c:10:f1:43:a8:53:38:d3:ca:14:40:86: 78:30:b9:c5:79:78:65:a0:35:6c:34:31:89:81:ea: 7e:bb:e0:20:a5:c9:42:dc:db:b5:3b:50:29:be:80: d7:0c:82:7f:06:31:42:3b:07:89:c5:13:42:6d:76: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:09:79:DD:E6:90:EB:4B:91:2D:3F:29:66:04:7E:38:C6:BC:91:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/91849de4-df16-3186-a509-72b14a80f150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:db:2f:18:2f:e7:2c:1a:1e:9c:a2:da:cb:12:7b:ed:4a:b2: ef:02:e8:b8:3d:bf:e7:fb:a0:9d:d1:19:03:74:c0:3f:1f:e4: f2:54:0e:3a:85:f7:0d:f2:db:32:b4:91:ba:a7:d4:f4:a1:85: b7:de:6a:d6:b8:02:18:81:9c:6a:f4:25:92:33:ba:1e:94:3e: db:53:48:5b:86:0e:32:07:c7:d9:63:c9:cb:c6:78:9a:db:1c: a8:2f:fb:69:bd:4f:78:d7:e5:f7:de:c1:87:50:db:d6:9a:c7: 07:e3:47:5f:a7:ac:e2:6c:1a:70:03:57:da:6c:ae:13:c6:06: 70:ee:ec:d7:fe:b9:d0:aa:90:18:bc:89:a2:e8:09:91:c5:c1: 13:46:90:a6:70:30:fb:e8:7c:e9:ac:70:3a:dd:b1:c7:f7:93: c2:8e:2e:5d:73:ab:57:bf:e0:61:83:2b:c2:ed:8c:26:33:54: cb:f4:23:d8:5d:98:9d:06:7e:ff:b0:6f:da:01:81:80:70:0a: 87:c8:de:ae:98:51:ea:67:96:67:66:aa:63:10:be:d0:84:f5: f8:89:9b:6f:08:7e:97:9c:33:3e:c0:9e:2f:82:3c:6e:46:a6: 8f:dc:ef:2f:b1:fa:d4:5a:43:b9:9f:21:7b:f8:72:59:6d:43: 80:2d:2c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gcADwTOOBm6p6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk MzhhMGU3ZGItNjI4YS00ZjU5LWE2ZjItMTc4YjgwY2FjOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLZI2yErsb5K6hY+4cAzw8Rh6a7Jp6YhXP31 VYzOygbfnhs6QZ5IUdbmhT7qVVOeLvpncQ7wvEE3bVZfRoVIcXBVCdroSqhRMwSf Ej8B1rhO5JEHgmsYNUhTVp5bG6oA70u6eFjgRozfvJeFepFfnUksws+PW3BERLPD wiYhLSEJbt5xI7l4yGvSsF+wdxsOMiMiQEltx1vrLuFhhkPooiyYS8L3Sz2Y988G 8S/RByGNZapH0vaohywI9HIHMKt4GCm+XqGcEPFDqFM408oUQIZ4MLnFeXhloDVs NDGJgep+u+AgpclC3Nu1O1ApvoDXDIJ/BjFCOweJxRNCbXZnUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEJed3mkOtLkS0/KWYEfjjGvJGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTE4NDlkZTQtZGYxNi0z MTg2LWE1MDktNzJiMTRhODBmMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa57eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrbLxgv5ywaHpyi2ssSe+1Ksu8C6Lg9v+f7oJ3RGQN0wD8f5PJUDjqF 9w3y2zK0kbqn1PShhbfeata4AhiBnGr0JZIzuh6UPttTSFuGDjIHx9ljycvGeJrb HKgv+2m9T3jX5ffewYdQ29aaxwfjR1+nrOJsGnADV9psrhPGBnDu7Nf+udCqkBi8 iaLoCZHFwRNGkKZwMPvofOmscDrdscf3k8KOLl1zq1e/4GGDK8LtjCYzVMv0I9hd mJ0Gfv+wb9oBgYBwCofI3q6YUepnlmdmqmMQvtCE9fiJm28IfpecMz7Ani+CPG5G po/c7y+x+tRaQ7mfIXv4clltQ4AtLF8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:57:05 2026 by rpki-client