$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa File: d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa (raw, json) Hash identifier: 6EfIH3MjP5E9T8aQ2PN2yBV06YbuDkEGMNgI9JCxU70= Subject key identifier: CA:C0:FD:7E:B6:2A:7C:35:12:6A:C4:8E:56:8F:A5:77:FF:D8:90:28 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CF5B1F932B5A95B77FB9A34C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa Signing time: Mon 23 Feb 2026 15:26:17 +0000 ROA not before: Mon 23 Feb 2026 15:26:17 +0000 ROA not after: Sun 24 May 2026 14:26:17 +0000 asID: 5650 IP address blocks: 107.158.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:b1:f9:32:b5:a9:5b:77:fb:9a:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 23 15:26:17 2026 GMT Not After : May 24 14:26:17 2026 GMT Subject: CN=95417e80-34b7-48c2-ab9c-8a9452818a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c0:d7:69:2e:76:4b:56:b6:8b:e4:a9:fb:73: 98:ba:0e:81:c5:0a:5e:a4:c6:89:83:90:96:77:d4: 1e:2a:92:f8:99:e8:cf:18:0d:9e:24:0a:99:f0:79: da:0a:9e:a5:ca:8e:18:4c:4d:a5:67:19:cb:fa:66: 35:43:0b:7a:da:10:83:ec:7d:9f:6b:17:cc:e0:cc: 60:77:b7:b3:82:77:1d:66:98:3b:b2:e6:18:54:9b: 01:f7:3d:b2:42:a8:71:85:9e:0b:4c:de:f3:75:0b: e3:0c:3a:91:c5:37:79:8d:33:28:64:fc:9b:6e:62: f3:fc:f6:43:2c:4e:c8:66:9b:9f:29:a3:e1:55:19: 6a:e6:69:fb:2b:76:80:f6:e5:63:e6:d0:23:b8:1f: 33:b4:3e:74:8f:f0:99:74:3c:30:d6:68:7e:e8:85: ce:b5:8b:0f:9e:c5:e3:04:c5:b8:41:79:79:66:6d: 58:16:73:f2:53:12:d9:1c:74:6f:97:be:9e:1a:4e: 4a:ab:a6:1c:d1:75:9a:0e:c2:17:57:5c:69:c7:92: 8e:99:f3:5c:57:56:5a:38:3d:a8:87:f3:ab:13:76: e9:58:bd:fb:6e:af:35:fb:c4:44:1e:ab:a0:6a:a4: 0d:3c:67:c7:38:19:2b:26:05:79:f5:4c:ae:6c:46: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C0:FD:7E:B6:2A:7C:35:12:6A:C4:8E:56:8F:A5:77:FF:D8:90:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d8:95:58:5a:f7:75:ec:a1:3e:c8:9f:84:c4:12:e8:6f:0f: e7:69:25:f9:98:d2:04:40:3e:54:db:bf:e3:a3:b4:25:c4:2a: 4b:bb:ec:7f:77:59:ec:f1:9d:4e:ea:fd:03:a4:b5:bc:fb:2e: 65:1d:02:60:a5:e4:a6:7a:ca:c9:99:9f:e6:f9:b1:ab:cc:b0: 73:0d:ad:73:07:1d:4b:a8:f1:28:f7:af:3a:ed:74:aa:bd:fd: 22:fd:c9:a5:c3:0e:6c:dc:05:97:b2:54:d7:c2:0b:0a:e9:22: df:dd:f7:ec:07:4c:4f:39:fe:2e:f1:2d:50:d0:a1:3a:a6:b5: f2:f6:1f:c8:d6:cf:d4:a9:b9:65:e4:1c:87:e2:4d:2e:13:1e: c5:50:97:53:d4:63:dc:85:a9:fd:e4:d3:c3:4d:1c:5a:eb:0d: 74:d4:4e:73:62:c2:de:2f:93:9b:f7:58:3f:4b:b9:cf:8f:7e: 83:1d:d1:5e:20:0a:95:78:6d:32:aa:bd:f6:c0:9e:f7:3f:62: e8:26:c8:a6:b9:7a:da:b1:aa:79:27:b2:d5:29:c8:d2:be:fe: cb:75:d1:44:5f:03:4e:35:c2:a0:83:ce:79:63:18:bc:d0:29: 10:d0:37:0a:49:b4:97:ad:db:a9:18:bc:ec:49:4b:13:77:3d: 9d:73:74:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1sfkytalbd/uaNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIyMzE1MjYxN1oXDTI2MDUyNDE0MjYxN1owLzEtMCsGA1UEAxMk OTU0MTdlODAtMzRiNy00OGMyLWFiOWMtOGE5NDUyODE4YTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MDXaS52S1a2i+Sp+3OYug6BxQpepMaJg5CW d9QeKpL4mejPGA2eJAqZ8HnaCp6lyo4YTE2lZxnL+mY1Qwt62hCD7H2faxfM4Mxg d7ezgncdZpg7suYYVJsB9z2yQqhxhZ4LTN7zdQvjDDqRxTd5jTMoZPybbmLz/PZD LE7IZpufKaPhVRlq5mn7K3aA9uVj5tAjuB8ztD50j/CZdDww1mh+6IXOtYsPnsXj BMW4QXl5Zm1YFnPyUxLZHHRvl76eGk5Kq6Yc0XWaDsIXV1xpx5KOmfNcV1ZaOD2o h/OrE3bpWL37bq81+8REHqugaqQNPGfHOBkrJgV59UyubEYCnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrA/X62Knw1EmrEjlaPpXf/2JAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDI2MDViMzItYTY3Yi0z YTM1LWJmZTgtM2RmYTQ3Mjk5Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjYlVha93XsoT7In4TEEuhvD+dpJfmY0gRAPlTbv+OjtCXEKku77H93 WezxnU7q/QOktbz7LmUdAmCl5KZ6ysmZn+b5savMsHMNrXMHHUuo8Sj3rzrtdKq9 /SL9yaXDDmzcBZeyVNfCCwrpIt/d9+wHTE85/i7xLVDQoTqmtfL2H8jWz9SpuWXk HIfiTS4THsVQl1PUY9yFqf3k08NNHFrrDXTUTnNiwt4vk5v3WD9Luc+PfoMd0V4g CpV4bTKqvfbAnvc/YugmyKa5etqxqnknstUpyNK+/st10URfA041wqCDznljGLzQ KRDQNwpJtJet26kYvOxJSxN3PZ1zdD8= -----END CERTIFICATE-----Generated at Mon Feb 23 18:39:53 2026 by rpki-client