$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d23de7b1-d828-350a-a73e-1a9680ddda0a.roa File: d23de7b1-d828-350a-a73e-1a9680ddda0a.roa (raw, json) Hash identifier: l3n6ZZMKABm+WweKNK6MeHhsDuaBx++rPfkW5NPbVTs= Subject key identifier: 88:2D:80:D0:A4:44:F0:D3:3D:97:D4:24:24:B4:D0:6B:F1:38:3F:D0 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB981C03DB8CBFB1E0150BA80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d23de7b1-d828-350a-a73e-1a9680ddda0a.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 62904 IP address blocks: 107.158.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:c0:3d:b8:cb:fb:1e:01:50:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=4cb22465-1b3e-462a-8693-212bbfd4be8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:70:1a:69:74:fc:a0:0f:0d:14:ec:da:f9: d3:4b:e8:ef:20:8b:b1:d8:0b:c5:83:c5:a4:f6:cb: 8e:09:b0:33:bc:79:35:1b:6f:d2:d1:75:93:5c:5f: 61:3f:b8:66:e3:71:49:68:db:1a:eb:de:b0:77:71: 14:13:a5:74:cb:fb:f1:29:e9:4c:c4:59:b8:8e:92: 7b:0c:28:ad:49:cb:8b:eb:d9:56:b1:54:4d:f6:57: fa:de:58:69:e0:09:77:7c:20:63:e9:b5:a7:0b:17: 69:23:24:10:d5:cc:da:99:62:56:4f:d0:13:8b:1c: ba:fd:11:c1:bc:51:6d:7b:e7:14:9c:5a:0d:84:dc: dc:e8:d2:99:e6:0f:a8:a5:e3:20:49:7e:79:29:e4: 65:8c:37:74:e4:6e:0b:16:2f:b1:5e:4f:cb:50:4e: f8:d1:39:15:1c:d0:9f:0a:92:bc:e4:eb:e9:f5:2b: c3:71:b2:56:fa:05:29:06:ab:35:3d:dd:d2:af:ba: 2b:b3:6f:fd:a0:5c:03:76:a6:8e:5b:f6:69:7c:c1: 22:1a:68:5e:88:a5:b7:7f:a0:ab:33:47:a1:7a:34: 51:3e:63:1b:57:b7:91:7f:a4:5a:9e:02:aa:16:37: 5b:af:af:12:77:a2:81:28:9d:6b:7b:45:81:91:75: 3c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:80:D0:A4:44:F0:D3:3D:97:D4:24:24:B4:D0:6B:F1:38:3F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d23de7b1-d828-350a-a73e-1a9680ddda0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8d:6b:dc:a3:3b:1d:2d:9d:ab:12:b4:34:58:43:e2:ab:ca: 9f:ae:81:cb:bc:86:ea:5e:f5:b6:f9:ba:fb:b8:ad:e9:d8:17: 0b:f8:d4:ab:2b:07:a7:8e:22:f1:32:95:91:f8:3a:dc:5e:c3: 6e:9a:79:1b:13:af:bf:f2:3a:14:65:d6:b7:d5:0a:f1:fa:a2: 59:ad:ee:79:06:97:d6:10:f9:76:61:bc:5a:cd:02:ce:5b:e3: 03:1b:da:9d:8d:b4:38:0d:82:4f:1d:37:05:e9:6e:66:13:52: d3:8a:9d:63:10:de:78:1b:ac:9e:c5:4b:85:8b:53:ad:14:ad: 7c:d5:e2:28:76:60:02:e5:9c:5d:5b:a8:54:8c:f9:22:cb:e5: 55:f0:bc:ff:5e:d7:e3:26:93:17:47:aa:9c:b7:76:56:17:4c: a2:4e:43:6e:2f:4d:cd:98:5f:1e:89:32:30:67:ef:d9:82:fd: 6e:a6:ad:be:cc:02:43:64:de:7a:62:03:88:25:eb:8f:31:92: 46:32:67:57:36:22:0a:2d:14:ba:6f:86:4c:63:05:c8:40:66: f0:ea:b3:03:7d:ca:45:c1:c6:d4:c6:ae:28:88:e6:58:11:76: 7c:40:e7:16:d1:dc:60:30:70:ae:58:69:73:4d:d2:98:d8:a4: 7e:37:ee:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gcA9uMv7HgFQuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk NGNiMjI0NjUtMWIzZS00NjJhLTg2OTMtMjEyYmJmZDRiZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLRwGml0/KAPDRTs2vnTS+jvIIux2AvFg8Wk 9suOCbAzvHk1G2/S0XWTXF9hP7hm43FJaNsa696wd3EUE6V0y/vxKelMxFm4jpJ7 DCitScuL69lWsVRN9lf63lhp4Al3fCBj6bWnCxdpIyQQ1czamWJWT9ATixy6/RHB vFFte+cUnFoNhNzc6NKZ5g+opeMgSX55KeRljDd05G4LFi+xXk/LUE740TkVHNCf CpK85Ovp9SvDcbJW+gUpBqs1Pd3Sr7ors2/9oFwDdqaOW/ZpfMEiGmheiKW3f6Cr M0ehejRRPmMbV7eRf6RangKqFjdbr68Sd6KBKJ1re0WBkXU8AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgtgNCkRPDTPZfUJCS00GvxOD/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDIzZGU3YjEtZDgyOC0z NTBhLWE3M2UtMWE5NjgwZGRkYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa56+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiNa9yjOx0tnasStDRYQ+Kryp+ugcu8hupe9bb5uvu4renYFwv41Ksr B6eOIvEylZH4Otxew26aeRsTr7/yOhRl1rfVCvH6olmt7nkGl9YQ+XZhvFrNAs5b 4wMb2p2NtDgNgk8dNwXpbmYTUtOKnWMQ3ngbrJ7FS4WLU60UrXzV4ih2YALlnF1b qFSM+SLL5VXwvP9e1+MmkxdHqpy3dlYXTKJOQ24vTc2YXx6JMjBn79mC/W6mrb7M AkNk3npiA4gl648xkkYyZ1c2IgotFLpvhkxjBchAZvDqswN9ykXBxtTGriiI5lgR dnxA5xbR3GAwcK5YaXNN0pjYpH437mQ= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:45 2026 by rpki-client