$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa File: aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa (raw, json) Hash identifier: 2AeUmdOwxr6gDMZuLIISFI6C+xbMWDe/DSo4bmaLFNI= Subject key identifier: 38:CD:D0:D2:B2:90:31:A1:E0:44:F6:45:60:B7:91:45:C5:21:BF:6E Certificate issuer: /CN=c8ce2cc6-982f-4737-a54f-fef1295ff0ad Certificate serial: 010D0C9F4328584D5E1A7938AF61C6E5FDB6BD40 Authority key identifier: ED:F5:0B:85:84:2E:59:EA:DD:03:8B:D4:C8:28:A8:20:A5:1B:3D:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 14618 IP address blocks: 67.158.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:79:38:af:61:c6:e5:fd:b6:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ce2cc6-982f-4737-a54f-fef1295ff0ad Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=7fd16310-437a-4360-92be-e126c8b5e76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:09:ce:87:f9:17:b3:2f:d2:27:d0:7a:af: 54:1a:4c:5f:c4:5e:42:c8:46:f0:fb:76:d5:8c:13: 73:97:c2:18:66:57:c2:e3:05:10:fc:a2:f1:0f:6e: 8f:c0:11:da:7a:a8:7f:a1:0e:00:41:80:95:72:6d: 4f:c6:22:9b:a1:1b:07:d7:30:2e:f5:0c:8d:b9:d4: ec:df:c4:15:32:85:a1:c5:9c:5f:bf:7b:39:12:df: 2d:ea:54:ea:a1:7b:1e:e8:d4:94:c5:df:b7:e7:a5: 3a:6c:d2:56:ec:e6:a3:45:63:f0:7e:1b:9c:80:90: 8f:3c:4e:85:6d:c1:0f:c8:c4:c7:7a:e0:48:e0:10: 28:5d:0f:2e:f7:fb:20:bc:d6:60:64:1a:be:8f:6f: 99:b0:53:5d:31:38:ec:67:9e:03:58:5a:0d:83:eb: 5c:76:92:03:67:93:fd:78:91:d3:1d:12:89:74:97: 8b:8e:93:84:d3:d7:1a:d3:97:22:f9:69:8f:12:b6: 1c:2b:ce:78:45:5f:8f:0f:4e:a1:c0:ec:e0:0c:21: cc:80:9f:7d:44:f7:e3:c3:c4:67:61:f3:91:ee:b3: 57:96:f5:ed:01:1f:2d:0d:6b:f8:ca:03:6b:b2:0a: e8:02:28:a4:b4:89:ff:de:a1:38:83:1f:2f:d4:29: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:D0:D2:B2:90:31:A1:E0:44:F6:45:60:B7:91:45:C5:21:BF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.crl X509v3 Authority Key Identifier: keyid:ED:F5:0B:85:84:2E:59:EA:DD:03:8B:D4:C8:28:A8:20:A5:1B:3D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer sbgp-ipAddrBlock: critical IPv4: 67.158.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c0:1d:f9:41:25:d0:b8:3a:61:37:4c:93:68:a5:d6:15:c3: 9c:f7:7b:e4:b8:87:4e:b6:5c:0d:eb:78:44:10:16:c6:8e:38: 90:d0:9c:fc:2e:45:6c:08:a0:c6:fc:15:6d:0a:28:9c:99:77: f8:86:76:11:a8:4b:91:13:dc:06:02:55:0c:69:cb:2f:13:6b: 79:91:57:20:05:15:39:6b:b7:c1:d1:58:97:59:e5:c0:5a:72: af:e8:de:89:8c:ea:b9:14:89:b3:30:13:46:95:c4:d8:98:5f: aa:60:65:1f:67:52:b7:09:d5:30:6a:90:45:41:a8:49:05:8a: fa:d8:1f:3f:18:4a:a6:62:5f:c3:de:5f:5e:f6:f6:45:b8:8b: a8:d9:8e:ca:28:f9:f5:33:75:12:15:e7:10:82:65:25:f6:20: b0:f4:7b:8a:26:56:45:93:4b:c5:fd:02:7f:14:29:04:a7:1c: 3c:b6:e2:cc:c7:5a:01:62:12:d2:a1:43:f4:65:f5:14:2e:c8: 93:70:b4:a6:c4:8a:23:76:f6:ee:14:3e:e8:ce:30:c9:b7:c8: e9:da:09:5a:f6:98:fc:de:6f:7a:f4:b3:9c:b3:65:1d:08:69: 5f:0c:3c:82:5f:8b:4e:70:1d:a4:29:a5:fd:d9:7f:ba:54:20: 73:6e:c7:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnk4r2HG5f22vUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhjZTJjYzYtOTgyZi00NzM3LWE1NGYtZmVmMTI5NWZm MGFkMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk N2ZkMTYzMTAtNDM3YS00MzYwLTkyYmUtZTEyNmM4YjVlNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEsJzof5F7Mv0ifQeq9UGkxfxF5CyEbw+3bV jBNzl8IYZlfC4wUQ/KLxD26PwBHaeqh/oQ4AQYCVcm1PxiKboRsH1zAu9QyNudTs 38QVMoWhxZxfv3s5Et8t6lTqoXse6NSUxd+356U6bNJW7OajRWPwfhucgJCPPE6F bcEPyMTHeuBI4BAoXQ8u9/sgvNZgZBq+j2+ZsFNdMTjsZ54DWFoNg+tcdpIDZ5P9 eJHTHRKJdJeLjpOE09ca05ci+WmPErYcK854RV+PD06hwOzgDCHMgJ99RPfjw8Rn YfOR7rNXlvXtAR8tDWv4ygNrsgroAiiktIn/3qE4gx8v1ClthwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjN0NKykDGh4ET2RWC3kUXFIb9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGNl MmNjNi05ODJmLTQ3MzctYTU0Zi1mZWYxMjk1ZmYwYWQvYWE3ZThiMTMtMWY0OC0z YTE0LWE2ZmMtN2RhN2E0ZWMwYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhjZTJjYzYtOTgyZi00NzM3LWE1 NGYtZmVmMTI5NWZmMGFkL2M4Y2UyY2M2LTk4MmYtNDczNy1hNTRmLWZlZjEyOTVm ZjBhZC5jcmwwHwYDVR0jBBgwFoAU7fULhYQuWerdA4vUyCioIKUbPQIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGNlMmNjNi05ODJmLTQ3MzctYTU0Zi1mZWYx Mjk1ZmYwYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ545MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3AHflBJdC4OmE3TJNopdYVw5z3e+S4h062XA3reEQQFsaOOJDQnPwu RWwIoMb8FW0KKJyZd/iGdhGoS5ET3AYCVQxpyy8Ta3mRVyAFFTlrt8HRWJdZ5cBa cq/o3omM6rkUibMwE0aVxNiYX6pgZR9nUrcJ1TBqkEVBqEkFivrYHz8YSqZiX8Pe X1729kW4i6jZjsoo+fUzdRIV5xCCZSX2ILD0e4omVkWTS8X9An8UKQSnHDy24szH WgFiEtKhQ/Rl9RQuyJNwtKbEiiN29u4UPujOMMm3yOnaCVr2mPzeb3r0s5yzZR0I aV8MPIJfi05wHaQppf3Zf7pUIHNuxy8= -----END CERTIFICATE-----Generated at Mon Apr 13 12:09:01 2026 by rpki-client