$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d7b651b1-83b8-3d61-8c98-e8171ace3531.roa File: d7b651b1-83b8-3d61-8c98-e8171ace3531.roa (raw, json) Hash identifier: vHlxEsaOkQ7y/Xst/KeDHXw3Ht9vuC82aekyzhj7KR4= Subject key identifier: 63:01:0B:C8:08:3A:83:B6:B7:E7:6E:45:23:04:E8:12:DB:ED:CD:DE Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Certificate serial: 010D0C9F4328584D1F4A1AEA35411EDF33711280 Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d7b651b1-83b8-3d61-8c98-e8171ace3531.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 26714 IP address blocks: 75.108.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1a:ea:35:41:1e:df:33:71:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=09c38350-378c-4e56-bda4-9a23745c5d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:68:3f:a5:2b:c8:b7:e4:cc:d0:c6:ee:70:f0: 25:94:41:24:b5:98:f7:f4:fb:3e:5a:76:bc:47:a5: ae:84:1b:3e:9c:ed:ca:75:71:0f:9e:c9:99:e2:e4: 60:eb:d3:77:27:24:ec:33:8f:fa:64:07:07:7c:b5: 91:5c:7f:9e:b8:48:fd:f6:6e:a5:6f:0d:75:10:d4: 03:a8:0b:a0:e1:2c:3e:e6:0b:57:b0:3f:b2:0f:3d: cc:91:4e:71:14:89:4e:2a:82:0f:15:c3:04:d0:0a: 58:6f:f5:4a:4e:7d:44:ba:ff:26:8a:8a:ac:7d:42: 45:e3:1d:3e:a7:74:6d:b5:e4:23:ee:8d:15:42:b0: cc:93:c1:44:6f:73:ab:6a:fd:3f:cf:e3:fc:17:6b: 35:87:44:05:36:a4:73:9e:e6:99:16:8d:5c:e4:82: 54:4a:a9:07:d7:ce:dc:35:76:c7:09:23:e0:cb:1c: ee:d8:46:2b:9f:1d:91:0b:22:63:08:9c:2e:f6:d5: 99:35:5a:68:22:78:73:87:38:11:0c:aa:67:d8:69: fd:30:d1:0c:aa:22:63:ee:36:e9:7c:3a:f3:83:34: ac:11:06:f4:bc:b6:b2:d1:30:3b:1c:eb:0a:b9:47: 36:86:22:8d:9d:42:15:95:58:fe:0c:00:cf:17:07: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:01:0B:C8:08:3A:83:B6:B7:E7:6E:45:23:04:E8:12:DB:ED:CD:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d7b651b1-83b8-3d61-8c98-e8171ace3531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl X509v3 Authority Key Identifier: keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer sbgp-ipAddrBlock: critical IPv4: 75.108.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:37:be:42:32:12:29:16:19:8a:de:6d:a0:e6:5f:75:5e:0e: e0:27:41:28:ed:d3:c1:e0:06:aa:ff:25:5a:fb:ab:7c:c9:3f: b2:d3:9f:4c:06:84:d5:2d:ce:40:29:22:c2:06:d4:da:aa:73: 34:74:6a:e8:85:7d:12:a5:82:e7:f7:b1:f9:cc:14:58:d1:cf: df:d2:eb:0c:16:3d:5e:a7:9b:80:d5:43:30:8c:45:d1:6e:16: d8:a9:c9:c3:3b:49:6d:46:0c:53:99:db:3d:4a:c6:fe:f3:bc: 20:a2:62:ce:2d:05:78:5c:8a:40:1c:05:1c:59:1b:be:97:5e: 48:84:64:e0:49:ef:52:41:dd:3f:ad:23:31:9c:32:7b:fd:e5: b7:1b:d4:d0:65:f0:15:38:fc:21:f9:57:47:aa:33:4b:dd:ba: d8:66:80:bc:73:8e:29:3c:c8:4a:e6:f0:ba:1c:7e:bf:99:8e: 7a:95:ff:e0:0d:e8:44:6e:f4:5e:be:bb:2d:bb:95:47:ff:6a: a0:99:6c:31:f7:ba:7e:06:51:ef:14:41:85:94:4c:db:62:01: f5:92:ae:f9:e3:7f:59:41:d5:f2:61:10:99:9b:0c:16:7d:82: 74:d2:08:d2:bb:3a:4b:e4:a4:cc:fe:9a:bb:e7:3f:20:36:d6: ee:c1:09:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShrqNUEe3zNxEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFi OGNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MDljMzgzNTAtMzc4Yy00ZTU2LWJkYTQtOWEyMzc0NWM1ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGg/pSvIt+TM0MbucPAllEEktZj39Ps+Wna8 R6WuhBs+nO3KdXEPnsmZ4uRg69N3JyTsM4/6ZAcHfLWRXH+euEj99m6lbw11ENQD qAug4Sw+5gtXsD+yDz3MkU5xFIlOKoIPFcME0ApYb/VKTn1Euv8mioqsfUJF4x0+ p3RtteQj7o0VQrDMk8FEb3Orav0/z+P8F2s1h0QFNqRznuaZFo1c5IJUSqkH187c NXbHCSPgyxzu2EYrnx2RCyJjCJwu9tWZNVpoInhzhzgRDKpn2Gn9MNEMqiJj7jbp fDrzgzSsEQb0vLay0TA7HOsKuUc2hiKNnUIVlVj+DADPFwfFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMBC8gIOoO2t+duRSME6BLb7c3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTdh YmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvZDdiNjUxYjEtODNiOC0z ZDYxLThjOTgtZTgxNzFhY2UzNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2E3YWJlZmYtZmVhYy00Y2M5LTkw NzctODY2ZjBiYjFiOGNjLzdhN2FiZWZmLWZlYWMtNGNjOS05MDc3LTg2NmYwYmIx YjhjYy5jcmwwHwYDVR0jBBgwFoAU+79+OuW9smvC3UATG67xRb6sEjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZm MGJiMWI4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2zJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc3vkIyEikWGYrebaDmX3VeDuAnQSjt08HgBqr/JVr7q3zJP7LTn0wG hNUtzkApIsIG1NqqczR0auiFfRKlguf3sfnMFFjRz9/S6wwWPV6nm4DVQzCMRdFu FtipycM7SW1GDFOZ2z1Kxv7zvCCiYs4tBXhcikAcBRxZG76XXkiEZOBJ71JB3T+t IzGcMnv95bcb1NBl8BU4/CH5V0eqM0vduthmgLxzjik8yErm8Locfr+ZjnqV/+AN 6ERu9F6+uy27lUf/aqCZbDH3un4GUe8UQYWUTNtiAfWSrvnjf1lB1fJhEJmbDBZ9 gnTSCNK7OkvkpMz+mrvnPyA21u7BCd0= -----END CERTIFICATE-----Generated at Fri Mar 13 09:57:48 2026 by rpki-client