$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/595dbf47-9964-38d7-a13f-fbea7c08e3c4.roa File: 595dbf47-9964-38d7-a13f-fbea7c08e3c4.roa (raw, json) Hash identifier: S4AGlJmf+4A7F3NP5G4Dur+2suZTQ9nnndixxuq+XU8= Subject key identifier: 3D:55:65:EB:AA:ED:47:79:ED:26:EC:15:EF:E5:72:F7:0E:BF:70:1E Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584D576B5E4F85CD0442F75B3940 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/595dbf47-9964-38d7-a13f-fbea7c08e3c4.roa Signing time: Mon 30 Mar 2026 15:33:14 +0000 ROA not before: Mon 30 Mar 2026 15:33:14 +0000 ROA not after: Sun 28 Jun 2026 15:33:14 +0000 asID: 174 IP address blocks: 198.145.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:6b:5e:4f:85:cd:04:42:f7:5b:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Mar 30 15:33:14 2026 GMT Not After : Jun 28 15:33:14 2026 GMT Subject: CN=c0ffaf53-7e0d-4fbc-a58a-1b489bcd748f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:06:1c:dc:a2:c3:ad:7b:24:82:d9:f2:76: 93:8c:84:24:4f:7d:77:46:7d:17:a1:07:e3:c5:3d: 5c:5c:bd:55:c4:10:1c:75:c6:40:df:be:46:d3:e0: a2:0d:ff:3f:0b:61:ca:81:c6:72:24:9a:aa:16:ad: 18:dc:45:f9:bc:f3:d5:d3:29:a9:d5:6b:10:1f:bc: 3c:a2:f7:b8:a2:e3:dd:40:00:02:97:46:30:08:f4: 09:66:a0:e4:52:8d:85:ca:9e:b6:b6:a8:95:cf:7a: 9f:a6:84:45:70:01:e4:fe:62:a8:a4:40:27:41:8e: bb:66:c8:08:08:44:0f:0d:db:5a:a1:18:c9:c1:a1: 66:73:0c:13:2f:67:c5:64:4a:02:81:e5:89:0f:e2: 24:37:2a:22:a2:12:ed:3e:d6:08:29:14:ec:d7:a9: 47:a0:d2:a1:3b:c5:04:65:3a:78:26:87:58:38:84: 1b:92:ac:d2:b6:e1:d3:1d:94:76:9a:42:b6:cf:da: 9e:cd:c6:18:8e:a9:51:e7:64:fe:7f:f8:05:35:ba: cc:e5:a1:d9:af:83:00:59:46:5b:ad:01:85:e7:bd: 40:d7:c0:99:71:09:5d:68:88:38:08:9f:d9:33:2b: 92:f8:81:02:22:f1:61:57:1f:8c:ec:99:2d:0c:7f: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:55:65:EB:AA:ED:47:79:ED:26:EC:15:EF:E5:72:F7:0E:BF:70:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/595dbf47-9964-38d7-a13f-fbea7c08e3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fa:82:2b:e5:a7:f0:75:ad:66:d4:a2:c3:12:95:af:f4:38: ea:db:70:a2:8e:74:2d:a5:c8:82:c9:2e:7a:8f:1f:ac:c5:67: b5:93:79:58:ba:26:28:a7:7b:2f:81:f8:38:cd:cf:c4:b4:0e: 64:57:59:06:85:13:94:4e:6a:79:6a:64:7f:ed:1d:22:cc:7e: a6:2c:7c:37:90:60:27:00:c4:db:9f:3f:40:a1:b7:e3:7b:0b: ba:cd:b9:71:0a:54:57:a9:d8:a7:14:f3:cf:82:0c:85:60:7e: 02:1c:ce:87:cf:5b:fe:21:fc:c2:5b:a2:87:b8:36:16:29:61: e0:89:6d:74:c4:b2:45:9a:2b:3d:a4:12:87:d1:c4:c5:78:e4: 6e:15:30:02:b2:cc:61:10:06:ac:77:32:34:c6:97:3f:d7:f5: 76:bb:85:0f:84:b5:fd:f9:92:7d:b0:ed:03:7d:eb:4b:d5:53: 38:9a:c7:e0:5d:18:ee:25:ce:99:20:35:c4:ce:6c:c3:0d:56: 14:b6:59:73:b3:9f:9d:0c:e4:40:d3:7d:be:bd:c2:46:a6:fb: 70:cf:1c:f8:ae:52:81:a8:ba:33:59:e2:74:d9:6d:17:f5:7a: d5:39:8d:36:82:dc:70:4b:df:d8:ff:bd:58:40:70:db:ef:80: 60:bd:d4:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Xa15Phc0EQvdbOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDMzMDE1MzMxNFoXDTI2MDYyODE1MzMxNFowLzEtMCsGA1UEAxMk YzBmZmFmNTMtN2UwZC00ZmJjLWE1OGEtMWI0ODliY2Q3NDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWIGHNyiw617JILZ8naTjIQkT313Rn0XoQfj xT1cXL1VxBAcdcZA375G0+CiDf8/C2HKgcZyJJqqFq0Y3EX5vPPV0ymp1WsQH7w8 ove4ouPdQAACl0YwCPQJZqDkUo2Fyp62tqiVz3qfpoRFcAHk/mKopEAnQY67ZsgI CEQPDdtaoRjJwaFmcwwTL2fFZEoCgeWJD+IkNyoiohLtPtYIKRTs16lHoNKhO8UE ZTp4JodYOIQbkqzStuHTHZR2mkK2z9qezcYYjqlR52T+f/gFNbrM5aHZr4MAWUZb rQGF571A18CZcQldaIg4CJ/ZMyuS+IECIvFhVx+M7JktDH/HvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1VZeuq7Ud57SbsFe/lcvcOv3AeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvNTk1ZGJmNDctOTk2NC0z OGQ3LWExM2YtZmJlYTdjMDhlM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj6givlp/B1rWbUosMSla/0OOrbcKKOdC2lyILJLnqPH6zFZ7WTeVi6 Jiiney+B+DjNz8S0DmRXWQaFE5ROanlqZH/tHSLMfqYsfDeQYCcAxNufP0Cht+N7 C7rNuXEKVFep2KcU88+CDIVgfgIczofPW/4h/MJbooe4NhYpYeCJbXTEskWaKz2k EofRxMV45G4VMAKyzGEQBqx3MjTGlz/X9Xa7hQ+Etf35kn2w7QN960vVUziax+Bd GO4lzpkgNcTObMMNVhS2WXOzn50M5EDTfb69wkam+3DPHPiuUoGoujNZ4nTZbRf1 etU5jTaC3HBL39j/vVhAcNvvgGC91Ms= -----END CERTIFICATE-----Generated at Mon Apr 13 06:51:57 2026 by rpki-client