$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa File: cdf3bcf2-7df6-3f72-b855-028d59105e18.roa (raw, json) Hash identifier: 80EQmA9MFcU1r2D1L/Vsd7YRAtsqthz6UiuSaBtMljg= Subject key identifier: D6:99:57:8C:DC:6B:F0:0E:29:8F:65:88:6C:B2:A2:1D:BA:A7:E6:8F Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584D5769E89AA04F75B4D6504380 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa Signing time: Mon 30 Mar 2026 15:30:18 +0000 ROA not before: Mon 30 Mar 2026 15:30:18 +0000 ROA not after: Sun 28 Jun 2026 15:30:18 +0000 asID: 20016 IP address blocks: 198.145.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:69:e8:9a:a0:4f:75:b4:d6:50:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Mar 30 15:30:18 2026 GMT Not After : Jun 28 15:30:18 2026 GMT Subject: CN=d6a7a3ef-9de3-4ce9-9301-2d2a3b9cfc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:c7:da:f4:80:78:da:ce:fb:c5:14:69:18: ce:1e:0f:d3:72:eb:6b:c1:72:35:66:2c:69:06:78: c0:51:36:dc:1a:02:f5:4a:02:70:b2:88:a3:07:96: 84:a7:a8:28:65:aa:1d:8b:c6:af:d7:86:9c:7d:2a: f9:d3:cc:31:74:6f:ce:46:29:3a:e7:d5:2c:1b:25: 77:d6:88:29:27:bc:2c:44:10:b4:85:00:69:b6:7f: ff:b4:00:98:6c:fa:ab:24:2d:29:2c:ac:cb:4d:2a: 5f:f3:fa:25:ee:be:11:ae:d5:fd:2a:29:11:80:34: 81:6a:0b:76:45:8c:09:41:fb:49:f7:f4:6b:d6:a3: c6:62:a3:38:54:d2:41:33:16:e0:ed:d3:17:36:c6: d2:22:e4:c6:82:c5:c7:e1:10:85:ca:dc:52:e5:4b: aa:06:15:95:dd:6e:06:48:93:d8:fb:1e:04:f6:f9: ee:74:11:6a:0b:eb:bb:00:ba:ec:16:b6:06:c0:0f: 7c:93:a3:6e:2f:fc:49:d4:f3:42:78:40:ea:ec:87: 2c:86:54:89:b0:f9:91:55:a7:ad:18:b3:c8:fe:df: b7:4c:ba:64:55:59:4c:8d:a2:e4:04:e0:73:16:05: 60:a9:4e:92:73:30:5c:98:7f:f4:5f:fb:3f:84:59: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:99:57:8C:DC:6B:F0:0E:29:8F:65:88:6C:B2:A2:1D:BA:A7:E6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/cdf3bcf2-7df6-3f72-b855-028d59105e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9e:22:f8:26:f4:c0:ed:1c:42:66:eb:a9:7e:e1:3b:31:f6: 8b:7e:c5:07:e1:b8:5e:58:89:01:1b:49:7a:08:60:cd:29:0f: aa:1c:ab:cf:35:35:c3:f1:0e:b5:ac:bb:f6:9e:3f:3d:60:64: c1:48:87:89:2a:3f:19:2a:9e:1c:a5:21:8f:94:90:fa:36:2c: 93:77:0d:80:59:57:8a:45:8c:db:6d:17:4a:3b:cc:3d:ce:83: 36:03:a1:3b:44:1f:65:cf:5f:99:c1:2e:08:2e:38:33:6a:6e: 40:6b:93:e4:b2:81:0c:86:5f:d9:1b:07:e6:a0:92:16:0a:95: f4:49:9f:3b:47:6e:50:d9:d1:19:e7:c1:3b:4e:30:1f:ad:6e: c4:a7:97:01:73:0a:27:57:78:e2:f9:f5:94:e3:b1:1a:6f:08: b1:5b:41:f6:af:87:0a:86:a6:81:3c:2f:e8:d2:ec:9b:7c:13: f0:ce:e0:9b:29:b3:48:aa:9e:44:dc:12:65:6b:f5:04:60:d2: 6a:d2:51:30:cb:d9:e4:e7:b6:86:ff:ea:0c:b9:e2:27:01:21: 21:45:eb:82:59:2a:95:d3:87:6f:e5:13:0f:9f:83:09:98:c3: f3:91:58:42:66:5c:94:97:45:99:05:cd:07:e4:a5:b7:c9:54: 61:16:cc:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XaeiaoE91tNZQQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDMzMDE1MzAxOFoXDTI2MDYyODE1MzAxOFowLzEtMCsGA1UEAxMk ZDZhN2EzZWYtOWRlMy00Y2U5LTkzMDEtMmQyYTNiOWNmYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSnH2vSAeNrO+8UUaRjOHg/TcutrwXI1Zixp BnjAUTbcGgL1SgJwsoijB5aEp6goZaodi8av14acfSr508wxdG/ORik659UsGyV3 1ogpJ7wsRBC0hQBptn//tACYbPqrJC0pLKzLTSpf8/ol7r4RrtX9KikRgDSBagt2 RYwJQftJ9/Rr1qPGYqM4VNJBMxbg7dMXNsbSIuTGgsXH4RCFytxS5UuqBhWV3W4G SJPY+x4E9vnudBFqC+u7ALrsFrYGwA98k6NuL/xJ1PNCeEDq7IcshlSJsPmRVaet GLPI/t+3TLpkVVlMjaLkBOBzFgVgqU6SczBcmH/0X/s/hFnHvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaZV4zca/AOKY9liGyyoh26p+aPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvY2RmM2JjZjItN2RmNi0z ZjcyLWI4NTUtMDI4ZDU5MTA1ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqeIvgm9MDtHEJm66l+4Tsx9ot+xQfhuF5YiQEbSXoIYM0pD6ocq881 NcPxDrWsu/aePz1gZMFIh4kqPxkqnhylIY+UkPo2LJN3DYBZV4pFjNttF0o7zD3O gzYDoTtEH2XPX5nBLgguODNqbkBrk+SygQyGX9kbB+agkhYKlfRJnztHblDZ0Rnn wTtOMB+tbsSnlwFzCidXeOL59ZTjsRpvCLFbQfavhwqGpoE8L+jS7Jt8E/DO4Jsp s0iqnkTcEmVr9QRg0mrSUTDL2eTntob/6gy54icBISFF64JZKpXTh2/lEw+fgwmY w/ORWEJmXJSXRZkFzQfkpbfJVGEWzJU= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:25 2026 by rpki-client