$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa File: dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa (raw, json) Hash identifier: KPkjL3rXCromRdp0w+mU0YsTPVD/i3jcFCMVbElqROc= Subject key identifier: E1:76:5B:B7:C9:EF:03:EA:23:06:13:D2:00:1B:94:CE:F8:CE:F0:D0 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D5024F9A5755B246C6A511900 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 6079 IP address blocks: 107.158.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:f9:a5:75:5b:24:6c:6a:51:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=3ac16977-ad68-4fc2-84f5-2ca9a56ead03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:77:2e:26:93:07:9e:db:11:eb:24:ad:46: 5b:31:f4:57:3e:30:9d:6d:f0:c9:e5:1b:97:58:29: 26:72:69:8e:b9:d6:2c:eb:8a:01:28:f5:ff:c4:72: c1:14:8a:3d:60:62:69:f7:98:44:65:d0:c9:1a:1f: 6b:66:84:b6:e5:1c:ce:47:5d:57:bc:ac:57:87:fa: 17:35:72:3b:e0:aa:d5:b2:7b:d9:c4:63:9b:3d:47: 50:cf:48:c4:cc:fe:e9:aa:7d:62:f9:1f:81:d3:0d: 0b:40:20:31:d4:46:2a:d6:05:8c:25:27:03:cf:00: 58:ca:e1:c4:2e:66:6f:9f:d6:e3:69:a6:e1:94:ea: 6d:50:b2:a2:7f:29:fe:44:9d:9a:06:71:3c:9b:83: 18:b6:ee:b8:c4:5e:5b:d3:4b:d6:1f:26:03:1a:24: 7a:74:f0:e5:2f:e5:36:52:79:1c:d6:2f:e1:94:33: be:91:9b:4b:4c:0c:ff:e6:43:a7:12:37:c9:ca:8b: 0d:94:01:4e:a6:c0:eb:a3:4a:a2:b3:9c:2d:36:d2: ac:7b:0a:f3:36:5c:66:c0:18:4c:b0:7e:c3:57:f2: 2d:dd:bf:5f:ae:ca:0a:35:c5:44:2b:a3:19:95:01: 9e:e9:13:a5:53:67:b8:44:b1:34:f5:56:7e:33:6a: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:76:5B:B7:C9:EF:03:EA:23:06:13:D2:00:1B:94:CE:F8:CE:F0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d6:63:81:8d:06:31:9d:9b:79:83:c7:1b:af:20:61:19:4c: 08:9c:38:39:17:95:a4:8e:85:8f:c9:40:1e:e5:0c:0e:07:fa: 87:36:81:b9:c5:5a:6d:67:e8:fd:e7:63:f6:a6:b0:39:9b:6d: e4:64:48:09:b4:c0:b8:e0:cd:4a:91:24:6a:2d:af:da:89:54: f2:1f:34:d5:e4:64:a8:f7:e8:0c:71:82:84:c0:dd:bb:55:07: 78:4a:83:3b:1d:f7:bc:5b:c9:c5:17:79:b5:c2:50:21:bf:a0: 5e:11:87:63:46:81:35:0a:2d:c2:95:73:59:ac:67:c3:08:22: a9:9e:02:c6:41:16:04:05:dc:63:0f:1a:85:d8:96:f9:8d:3a: 2e:99:8c:7c:02:60:be:38:e8:aa:f7:e8:5c:57:1e:af:0a:c0: 40:f7:2c:96:97:79:ca:24:64:93:9a:43:04:e9:47:38:74:4e: 92:02:14:df:b4:6b:c7:a2:86:6c:c3:07:41:16:03:ac:78:f8: c4:49:36:b9:9d:ec:8f:cd:ae:82:0d:3c:7b:64:dc:14:5e:7a: b8:2d:7f:65:fd:f3:42:0b:a9:59:70:38:8c:4a:33:7b:c5:b1: 2c:20:12:14:4b:96:8b:ff:a6:5a:84:57:07:08:c6:ac:f6:b1: bb:3c:93:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPmldVskbGpRGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk M2FjMTY5NzctYWQ2OC00ZmMyLTg0ZjUtMmNhOWE1NmVhZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3t3LiaTB57bEeskrUZbMfRXPjCdbfDJ5RuX WCkmcmmOudYs64oBKPX/xHLBFIo9YGJp95hEZdDJGh9rZoS25RzOR11XvKxXh/oX NXI74KrVsnvZxGObPUdQz0jEzP7pqn1i+R+B0w0LQCAx1EYq1gWMJScDzwBYyuHE LmZvn9bjaabhlOptULKifyn+RJ2aBnE8m4MYtu64xF5b00vWHyYDGiR6dPDlL+U2 Unkc1i/hlDO+kZtLTAz/5kOnEjfJyosNlAFOpsDro0qis5wtNtKsewrzNlxmwBhM sH7DV/It3b9frsoKNcVEK6MZlQGe6ROlU2e4RLE09VZ+M2qaPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF2W7fJ7wPqIwYT0gAblM74zvDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGFlNWQxZDMtMjU5MC0z YzRiLWE1YjktZmI3YzRjNWJjZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa54SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7WY4GNBjGdm3mDxxuvIGEZTAicODkXlaSOhY/JQB7lDA4H+oc2gbnF Wm1n6P3nY/amsDmbbeRkSAm0wLjgzUqRJGotr9qJVPIfNNXkZKj36AxxgoTA3btV B3hKgzsd97xbycUXebXCUCG/oF4Rh2NGgTUKLcKVc1msZ8MIIqmeAsZBFgQF3GMP GoXYlvmNOi6ZjHwCYL446Kr36FxXHq8KwED3LJaXecokZJOaQwTpRzh0TpICFN+0 a8eihmzDB0EWA6x4+MRJNrmd7I/NroINPHtk3BReergtf2X980ILqVlwOIxKM3vF sSwgEhRLlov/plqEVwcIxqz2sbs8k48= -----END CERTIFICATE-----Generated at Sat Apr 18 06:12:24 2026 by rpki-client