$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa File: eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa (raw, json) Hash identifier: eRCJ3QsfixtCvT5TY/pRF24QpBVzu0J0LcrT/r6Ts9w= Subject key identifier: 6C:22:3A:0B:44:DE:B5:EF:A6:4E:8F:01:90:DF:71:92:65:FE:59:AF Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584D1F4A21B1FDCA81D381C99480 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 54905 IP address blocks: 23.250.128.0/17 maxlen: 17 107.166.128.0/17 maxlen: 17 162.220.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:21:b1:fd:ca:81:d3:81:c9:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=911022cd-042f-4e22-afcd-a9c250b4a029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:53:f8:50:4b:5e:cf:67:76:6e:75:d5:8c: 9b:db:68:2c:73:a6:22:0c:38:81:af:0a:0a:b2:b0: 39:66:c1:40:7f:57:05:25:7e:c9:b2:9e:69:33:20: dd:96:f5:85:ab:0d:f5:97:82:86:b9:0c:a5:1e:b5: 16:c1:8c:31:e8:db:fe:68:40:d7:7d:a5:7b:90:30: 4a:9b:c3:82:14:32:eb:c7:b5:aa:e4:7a:85:10:09: e0:a0:6e:74:bf:58:d9:75:d9:bf:e0:fa:31:94:dc: 57:0b:b8:1f:04:f5:c3:47:d3:0b:89:ac:26:ba:7a: 61:fb:4c:1d:c5:58:7d:6e:51:fb:7a:22:03:a3:26: ef:b8:84:1c:c7:ce:aa:a0:c4:ab:60:67:19:32:5b: b5:0b:1a:27:34:de:8b:c0:75:1a:f1:9d:0d:63:96: ab:f5:c4:44:93:22:59:80:98:72:32:2c:5b:a8:f3: 5b:0e:a6:61:0f:0c:58:4f:56:97:f9:3d:53:c2:8d: 6e:71:35:b5:07:69:1e:bb:67:70:10:4f:3c:aa:b3: 3a:e6:cc:61:c7:fb:d9:57:a4:ce:22:27:4f:4b:f6: 23:3f:b5:10:fe:2f:90:c8:da:84:6b:b2:52:8f:5d: 71:5b:13:d0:97:41:1f:4f:6e:54:43:19:89:49:9c: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:22:3A:0B:44:DE:B5:EF:A6:4E:8F:01:90:DF:71:92:65:FE:59:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.250.128.0/17 107.166.128.0/17 162.220.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:de:68:16:b6:e2:74:f5:13:69:46:03:f6:95:1c:35:c8:99: 87:d2:e5:57:44:f0:36:7c:31:83:a5:12:a1:85:d0:f3:be:c6: 09:85:de:84:47:9d:4b:2d:3e:5c:fc:8b:5e:4e:fd:84:d2:a1: 23:4d:a7:c7:b3:f6:04:3d:08:7c:5c:5d:47:2f:59:55:a9:4d: 0d:6b:00:58:b1:2f:06:ee:de:af:32:19:d5:84:2d:fc:f4:d7: 5d:72:12:f6:c9:29:13:29:62:9c:a0:73:0c:fc:29:57:5e:35: 0b:d1:41:59:5f:54:ba:a9:23:0d:cd:44:f8:90:12:09:b8:00: a3:33:37:a7:0d:87:43:03:8e:0a:b0:aa:b9:ee:5b:59:73:d2: 54:54:3c:d8:91:24:0d:46:e4:7e:50:e8:55:5d:1e:b1:24:99: 11:c5:03:10:39:d4:3f:22:c4:ff:ff:fe:85:0f:1a:53:f5:ac: 75:bc:d9:91:f2:9c:fd:3e:f5:8f:27:22:be:e5:fc:b2:e7:e6: 9b:c8:7e:2f:58:3b:a7:2c:88:70:0d:60:15:f5:9c:e2:97:1b: 17:52:6b:87:aa:55:50:dc:21:c8:08:f9:c5:c2:6c:f7:30:67: 8f:c0:3d:03:92:bc:73:96:d8:30:9e:ab:fa:7c:84:4c:32:04: 18:ae:0f:ca -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0fSiGx/cqB04HJlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OTExMDIyY2QtMDQyZi00ZTIyLWFmY2QtYTljMjUwYjRhMDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPJT+FBLXs9ndm511Yyb22gsc6YiDDiBrwoK srA5ZsFAf1cFJX7Jsp5pMyDdlvWFqw31l4KGuQylHrUWwYwx6Nv+aEDXfaV7kDBK m8OCFDLrx7Wq5HqFEAngoG50v1jZddm/4PoxlNxXC7gfBPXDR9MLiawmunph+0wd xVh9blH7eiIDoybvuIQcx86qoMSrYGcZMlu1CxonNN6LwHUa8Z0NY5ar9cREkyJZ gJhyMixbqPNbDqZhDwxYT1aX+T1Two1ucTW1B2keu2dwEE88qrM65sxhx/vZV6TO IidPS/YjP7UQ/i+QyNqEa7JSj11xWxPQl0EfT25UQxmJSZzccwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGwiOgtE3rXvpk6PAZDfcZJl/lmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZWRhMWJjNDEtZTkzZS0z MWI3LWI0MmQtMGI4ZGZmOWFkOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHF/qAAwQH a6aAAwQDotwQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALHeaBa24nT1E2lGA/aVHDXImYfS5VdE8DZ8MYOl EqGF0PO+xgmF3oRHnUstPlz8i15O/YTSoSNNp8ez9gQ9CHxcXUcvWVWpTQ1rAFix Lwbu3q8yGdWELfz0111yEvbJKRMpYpygcwz8KVdeNQvRQVlfVLqpIw3NRPiQEgm4 AKMzN6cNh0MDjgqwqrnuW1lz0lRUPNiRJA1G5H5Q6FVdHrEkmRHFAxA51D8ixP// /oUPGlP1rHW82ZHynP0+9Y8nIr7l/LLn5pvIfi9YO6csiHANYBX1nOKXGxdSa4eq VVDcIcgI+cXCbPcwZ4/APQOSvHOW2DCeq/p8hEwyBBiuD8o= -----END CERTIFICATE-----Generated at Thu Mar 12 09:47:01 2026 by rpki-client