$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa File: 1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa (raw, json) Hash identifier: cKY57iMLO14Ov/FRcUcHshsZG0nBShV/HRUMkpYGJM0= Subject key identifier: A2:6E:F8:1E:F2:9A:7F:21:CD:1E:82:20:DE:B2:9C:34:4F:8D:5D:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D1F4A50DB1EFB48ECCA775700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 107.167.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:50:db:1e:fb:48:ec:ca:77:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=46ff1bdb-da30-4157-8b72-4e788617ee8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:e0:e6:43:42:95:ae:50:28:97:a9:66:58: e3:33:72:92:e3:08:64:67:30:10:40:42:c3:7b:b8: ec:13:7e:e1:b8:fb:64:a0:25:ea:e7:cb:f3:b1:3a: 2c:8c:ef:7a:e3:64:fe:a4:78:d3:64:a6:7f:3e:56: 38:84:ee:fe:ed:69:85:f6:c7:fc:8d:a5:7c:d7:0c: 61:ac:08:f6:12:94:8a:f9:e4:7a:9c:66:cd:eb:d9: 7a:75:29:78:f3:34:c4:63:68:9a:d4:d0:ec:c1:1b: bd:12:03:2b:87:55:9b:36:09:35:4b:9d:1b:92:7d: 15:38:c3:10:0b:22:83:69:41:b2:07:65:1a:27:1b: 43:54:cc:3b:b7:fa:20:c4:d4:f4:34:ea:ce:e9:9b: 13:b8:b7:01:e5:7a:ea:6b:5b:3e:70:0f:80:7e:ae: 22:d0:71:df:34:ab:04:db:bb:90:ad:9e:b7:39:8e: 59:5c:e0:6c:65:46:56:65:6f:2e:ef:98:f6:cc:b1: 6a:a2:47:9d:93:9b:d6:2f:ff:f7:2d:b7:1f:75:7b: 59:1a:ab:b4:1f:e6:db:a6:50:ee:5a:ab:4a:41:f2: 3d:ff:c7:9b:7a:15:10:5e:51:a3:1c:cd:fd:0b:8b: a4:a7:7f:1c:e6:02:6e:25:21:13:b2:8d:a4:ab:d7: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:F8:1E:F2:9A:7F:21:CD:1E:82:20:DE:B2:9C:34:4F:8D:5D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c2:a4:f3:0f:54:3d:8c:24:93:da:31:6a:d5:39:d2:c2:e6: 74:60:4c:1a:40:10:c4:8a:a3:f2:a8:36:fd:03:e3:9f:15:49: f3:bf:b0:9a:93:24:9b:41:a9:00:e2:6b:3b:aa:d6:40:5a:c3: 22:07:38:7c:48:e4:4b:d3:47:95:c0:10:5a:51:76:c2:32:a6: 16:94:6f:9b:9c:68:5f:c3:25:11:5b:28:8a:81:b4:7b:32:5a: 76:32:54:26:20:6d:7e:76:dc:b5:fb:34:8d:58:eb:81:4a:f0: 21:05:90:11:b5:59:fc:7b:87:b2:8a:eb:b9:47:9a:6e:51:f4: 4c:9d:dd:01:12:0d:2d:84:ef:bf:c2:11:81:f7:b0:b4:35:17: b1:21:1d:6f:96:ac:1b:b6:79:76:46:7c:77:14:30:7a:41:22: ec:5f:b0:e2:be:49:44:ad:dc:31:dd:02:57:5e:78:f3:11:2a: c1:f9:2e:ea:9b:55:53:6e:58:5f:97:15:4f:54:0d:5c:ed:4f: 6a:35:18:e4:38:9b:dd:ba:31:e2:79:dd:91:d9:e3:8f:4c:51: 94:ff:35:8b:c3:c2:eb:27:34:c4:5b:21:30:5e:3e:16:e6:1c: 12:4d:fc:fd:d1:6a:93:98:23:d8:8b:ff:42:5e:90:2a:26:1e: 07:1b:c1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlDbHvtI7Mp3VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDZmZjFiZGItZGEzMC00MTU3LThiNzItNGU3ODg2MTdlZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Tg5kNCla5QKJepZljjM3KS4whkZzAQQELD e7jsE37huPtkoCXq58vzsTosjO9642T+pHjTZKZ/PlY4hO7+7WmF9sf8jaV81wxh rAj2EpSK+eR6nGbN69l6dSl48zTEY2ia1NDswRu9EgMrh1WbNgk1S50bkn0VOMMQ CyKDaUGyB2UaJxtDVMw7t/ogxNT0NOrO6ZsTuLcB5Xrqa1s+cA+Afq4i0HHfNKsE 27uQrZ63OY5ZXOBsZUZWZW8u75j2zLFqokedk5vWL//3LbcfdXtZGqu0H+bbplDu WqtKQfI9/8ebehUQXlGjHM39C4ukp38c5gJuJSETso2kq9fc9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJu+B7ymn8hzR6CIN6ynDRPjV1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ4N2FjMDItYzNjYy0z ZmQwLWE1ZGQtN2VhNGJlMjBmNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6e/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnCpPMPVD2MJJPaMWrVOdLC5nRgTBpAEMSKo/KoNv0D458VSfO/sJqT JJtBqQDiazuq1kBawyIHOHxI5EvTR5XAEFpRdsIyphaUb5ucaF/DJRFbKIqBtHsy WnYyVCYgbX523LX7NI1Y64FK8CEFkBG1Wfx7h7KK67lHmm5R9Eyd3QESDS2E77/C EYH3sLQ1F7EhHW+WrBu2eXZGfHcUMHpBIuxfsOK+SUSt3DHdAldeePMRKsH5Luqb VVNuWF+XFU9UDVztT2o1GOQ4m926MeJ53ZHZ449MUZT/NYvDwusnNMRbITBePhbm HBJN/P3RapOYI9iL/0JekComHgcbwe0= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:48 2026 by rpki-client