$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/08a8974e-f1d1-36d9-9a42-f21324015be8.roa File: 08a8974e-f1d1-36d9-9a42-f21324015be8.roa (raw, json) Hash identifier: A1zyo2kagKzvsd5Q8sNDIelHRuJ5TnOlNOFn9sG7pL0= Subject key identifier: FF:20:C2:7B:EE:66:26:66:71:51:AC:B5:2C:65:FB:C5:82:59:1A:C6 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584D5769F0695A07832C8E8DC700 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/08a8974e-f1d1-36d9-9a42-f21324015be8.roa Signing time: Mon 30 Mar 2026 15:30:21 +0000 ROA not before: Mon 30 Mar 2026 15:30:21 +0000 ROA not after: Sun 28 Jun 2026 15:30:21 +0000 asID: 20016 IP address blocks: 198.145.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:69:f0:69:5a:07:83:2c:8e:8d:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Mar 30 15:30:21 2026 GMT Not After : Jun 28 15:30:21 2026 GMT Subject: CN=713965cc-f959-4a63-aa3f-98c24f87baa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:62:eb:51:41:fc:0d:60:71:52:36:b0:12:cd: be:0d:d2:65:48:08:43:c6:ca:0b:85:31:2c:9c:3a: 2b:fe:51:ea:d3:b0:2a:82:e9:7b:41:79:eb:b4:0b: 76:53:c0:22:c2:5b:13:b2:a5:a9:30:7b:da:ce:1c: 3d:fc:6c:cb:db:32:61:16:d3:c4:85:c7:19:1d:20: d0:50:66:3d:6c:83:df:f7:66:6c:7c:78:c9:8f:b3: bc:96:a8:21:5c:f3:05:7b:1d:b3:e2:25:ce:a5:75: 3d:53:a6:43:2c:ff:a0:c4:eb:1e:7a:b3:8c:69:78: 5c:c9:0e:da:7b:84:1b:84:7e:2d:a0:dc:75:00:e1: 90:3f:87:3f:39:a6:7e:de:38:4a:1c:2f:fb:fb:e1: b2:2a:ef:9f:9b:d0:df:de:8d:2b:ba:d5:c5:64:02: 42:fe:31:16:07:46:88:9d:d4:df:56:ad:7a:eb:98: e2:d4:20:87:e7:d7:e5:79:66:d8:5e:0f:51:02:36: 4e:2f:b8:74:27:51:9e:3f:b6:43:c9:4b:1b:46:4f: fd:4b:e3:26:69:4e:47:fb:6e:b4:36:70:f3:89:33: 67:2b:e7:fe:fb:69:5b:6e:8b:60:0c:f9:24:20:a6: 58:48:69:cc:fa:b4:ac:48:38:45:e0:0c:59:79:a1: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:20:C2:7B:EE:66:26:66:71:51:AC:B5:2C:65:FB:C5:82:59:1A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/08a8974e-f1d1-36d9-9a42-f21324015be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:01:75:f6:49:a6:6c:91:2b:ca:6d:76:fc:bb:53:5f:3d:b1: b0:03:35:6e:3e:38:51:49:f5:ac:f7:6f:e5:dc:de:37:99:26: 44:1e:22:86:fe:95:bc:50:3f:74:e7:8e:38:72:b1:58:d8:b9: 04:e8:05:5a:25:58:c8:49:83:94:0e:13:d3:3b:88:a3:eb:ec: d1:58:35:5d:37:b9:f9:27:c2:17:02:fe:bb:a0:e9:7e:1d:bc: 29:18:2e:86:34:27:04:f1:63:07:bd:18:2d:7d:06:0f:d9:ca: 9e:96:3b:61:c1:06:bc:7f:a8:c5:fe:d9:6c:be:02:ce:f7:41: b3:13:7e:e6:04:4d:48:9f:1b:41:8c:29:13:ef:60:f4:1c:2e: c9:85:89:06:21:1b:5e:27:aa:46:7e:08:cb:0c:e5:0a:b3:c8: 26:99:e7:96:a9:d5:d0:fa:4b:3e:1c:c8:7a:e8:9a:a1:51:bf: 30:fd:2e:86:fa:0c:6a:6e:28:9f:12:94:0a:cf:7a:45:83:45: 8b:a4:b5:7e:7d:21:06:2a:cc:f1:cc:06:e6:5a:3e:70:95:6d: a1:98:e1:01:e6:f0:ea:3d:dd:7b:26:69:8b:05:92:16:eb:df: 2f:11:a9:72:4c:40:0b:bd:a4:d2:50:5f:5d:b1:c9:34:3c:e0: 50:0b:58:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XafBpWgeDLI6NxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDMzMDE1MzAyMVoXDTI2MDYyODE1MzAyMVowLzEtMCsGA1UEAxMk NzEzOTY1Y2MtZjk1OS00YTYzLWFhM2YtOThjMjRmODdiYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWLrUUH8DWBxUjawEs2+DdJlSAhDxsoLhTEs nDor/lHq07Aqgul7QXnrtAt2U8AiwlsTsqWpMHvazhw9/GzL2zJhFtPEhccZHSDQ UGY9bIPf92ZsfHjJj7O8lqghXPMFex2z4iXOpXU9U6ZDLP+gxOseerOMaXhcyQ7a e4QbhH4toNx1AOGQP4c/OaZ+3jhKHC/7++GyKu+fm9Df3o0rutXFZAJC/jEWB0aI ndTfVq1665ji1CCH59fleWbYXg9RAjZOL7h0J1GeP7ZDyUsbRk/9S+MmaU5H+260 NnDziTNnK+f++2lbbotgDPkkIKZYSGnM+rSsSDhF4AxZeaHGAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8gwnvuZiZmcVGstSxl+8WCWRrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvMDhhODk3NGUtZjFkMS0z NmQ5LTlhNDItZjIxMzI0MDE1YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoBdfZJpmyRK8ptdvy7U189sbADNW4+OFFJ9az3b+Xc3jeZJkQeIob+ lbxQP3TnjjhysVjYuQToBVolWMhJg5QOE9M7iKPr7NFYNV03ufknwhcC/rug6X4d vCkYLoY0JwTxYwe9GC19Bg/Zyp6WO2HBBrx/qMX+2Wy+As73QbMTfuYETUifG0GM KRPvYPQcLsmFiQYhG14nqkZ+CMsM5QqzyCaZ55ap1dD6Sz4cyHromqFRvzD9Lob6 DGpuKJ8SlArPekWDRYuktX59IQYqzPHMBuZaPnCVbaGY4QHm8Oo93XsmaYsFkhbr 3y8RqXJMQAu9pNJQX12xyTQ84FALWA8= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:36 2026 by rpki-client