$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa File: cdf3bcf2-7df6-3f72-b855-028d59105e18.roa (raw, json) Hash identifier: VZt175Q6Dedh8e45DF+ie4ZEfTYdmdqEyixnwBqLVQg= Subject key identifier: A9:BA:88:88:6D:02:B9:44:B9:23:01:4B:83:B6:0B:93:B4:A3:9E:05 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584E376488B2D6686FA0442E3780 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 20016 IP address blocks: 198.145.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:88:b2:d6:68:6f:a0:44:2e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=4feeb09a-1426-4cf8-801c-5f8c706b8789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0c:44:cf:5c:a1:85:74:18:50:bd:9d:bf:97: 8e:54:b0:c4:8e:47:03:59:73:78:9b:a3:1c:0d:24: 64:c8:98:49:db:84:51:d6:95:7b:47:a8:e2:5c:06: f7:e8:a2:f4:07:3a:ee:22:75:42:ca:98:23:40:dd: 27:ed:8c:e8:61:7f:76:f8:39:45:b7:7f:a4:1f:b8: 11:ff:f4:df:1b:20:77:fb:98:32:22:ee:dd:c9:27: 3f:20:23:f6:61:8d:e6:be:44:be:19:05:93:5d:2c: f6:5f:6e:5c:fe:93:01:bb:10:41:9d:1c:49:0b:aa: bd:ad:a2:ce:4a:91:83:bf:66:80:f5:a2:81:6f:71: a4:69:2a:d3:3c:71:2b:fd:29:91:27:63:d8:8d:f9: 8d:ae:17:9e:dc:a7:35:2a:f5:b8:70:b9:c6:50:b4: 59:3a:5e:e6:d8:77:75:f6:5b:d5:7a:82:04:d0:ce: ef:81:8a:d5:73:12:29:02:e6:72:71:9a:69:10:22: e8:a4:04:8b:ad:44:1f:0b:b5:97:8b:99:48:f8:68: 7c:6b:1c:65:d9:c3:07:8d:64:05:a0:6b:db:93:a2: e9:fb:2c:5d:92:3d:4d:9f:72:48:71:15:89:db:88: 4e:55:c5:90:f9:8f:33:f2:25:73:36:20:de:05:40: b4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BA:88:88:6D:02:B9:44:B9:23:01:4B:83:B6:0B:93:B4:A3:9E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3d:52:37:77:d7:cc:6b:1a:37:c2:9c:46:95:80:26:ff:67: 92:ef:05:23:e4:b5:64:a6:9b:40:c6:d4:4f:c7:c3:6f:36:6e: 25:6c:46:ec:e3:50:09:6f:42:9e:7a:ec:52:a4:5a:57:e5:bd: 4a:5e:8a:6b:8d:b5:69:43:bd:10:a8:92:fe:bc:65:22:ee:11: 16:7e:c8:6b:f1:5b:aa:00:3c:00:fc:25:0f:7f:45:21:0c:f4: 87:2d:dd:17:a4:4c:20:ef:49:d4:0b:6a:5e:1b:11:68:b7:6d: 04:ea:6c:47:b5:ff:37:8b:3b:1b:a2:cb:8a:95:77:82:87:4a: bc:3f:b5:79:ca:07:52:06:9a:b6:58:62:37:5e:15:e5:02:35: 44:21:33:e8:5e:6a:95:67:60:22:4f:e0:25:6c:0c:c3:a0:6d: 58:34:ad:3a:b3:d6:26:84:86:0a:e1:0b:3c:fc:a1:10:8f:55: 0c:ba:7e:85:c8:ae:0a:52:0a:6b:25:f2:b9:78:18:32:9d:5d: 7b:cc:07:55:0c:33:a8:29:9d:79:65:18:d2:bd:17:b1:74:28: 68:c8:d9:8b:3f:c4:88:e1:31:b8:7f:b4:61:1e:22:02:d1:8f: 68:08:26:ba:94:48:ba:74:f9:f6:f7:0f:91:7d:d3:ea:2d:55: 74:f8:4d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIiy1mhvoEQuN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NGZlZWIwOWEtMTQyNi00Y2Y4LTgwMWMtNWY4YzcwNmI4Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwxEz1yhhXQYUL2dv5eOVLDEjkcDWXN4m6Mc DSRkyJhJ24RR1pV7R6jiXAb36KL0BzruInVCypgjQN0n7YzoYX92+DlFt3+kH7gR //TfGyB3+5gyIu7dySc/ICP2YY3mvkS+GQWTXSz2X25c/pMBuxBBnRxJC6q9raLO SpGDv2aA9aKBb3GkaSrTPHEr/SmRJ2PYjfmNrhee3Kc1KvW4cLnGULRZOl7m2Hd1 9lvVeoIE0M7vgYrVcxIpAuZycZppECLopASLrUQfC7WXi5lI+Gh8axxl2cMHjWQF oGvbk6Lp+yxdkj1Nn3JIcRWJ24hOVcWQ+Y8z8iVzNiDeBUC0VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm6iIhtArlEuSMBS4O2C5O0o54FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvY2RmM2JjZjItN2RmNi0z ZjcyLWI4NTUtMDI4ZDU5MTA1ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM9Ujd318xrGjfCnEaVgCb/Z5LvBSPktWSmm0DG1E/Hw282biVsRuzj UAlvQp567FKkWlflvUpeimuNtWlDvRCokv68ZSLuERZ+yGvxW6oAPAD8JQ9/RSEM 9Ict3RekTCDvSdQLal4bEWi3bQTqbEe1/zeLOxuiy4qVd4KHSrw/tXnKB1IGmrZY YjdeFeUCNUQhM+heapVnYCJP4CVsDMOgbVg0rTqz1iaEhgrhCzz8oRCPVQy6foXI rgpSCmsl8rl4GDKdXXvMB1UMM6gpnXllGNK9F7F0KGjI2Ys/xIjhMbh/tGEeIgLR j2gIJrqUSLp0+fb3D5F90+otVXT4TVk= -----END CERTIFICATE-----Generated at Sun Jul 12 23:45:57 2026 by rpki-client