$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/df5a83ee-f97c-3a71-9fde-5474bed3cce8.roa File: df5a83ee-f97c-3a71-9fde-5474bed3cce8.roa (raw, json) Hash identifier: n2jtXN/CfzVh5+HAvJbsrtXa1sljfYGgRq8QWrRonGo= Subject key identifier: 64:B5:8A:B5:5E:1B:7D:9C:AA:4D:FD:00:FB:DD:8E:4C:06:F9:5D:8F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D5F17FEEF8926745FFCE56D40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/df5a83ee-f97c-3a71-9fde-5474bed3cce8.roa Signing time: Thu 02 Apr 2026 09:31:43 +0000 ROA not before: Thu 02 Apr 2026 09:31:43 +0000 ROA not after: Wed 01 Jul 2026 09:31:43 +0000 asID: 214025 IP address blocks: 107.158.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:17:fe:ef:89:26:74:5f:fc:e5:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 2 09:31:43 2026 GMT Not After : Jul 1 09:31:43 2026 GMT Subject: CN=0763dd3a-24a7-42df-a9a5-8f4efe229d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7f:50:61:aa:81:d9:a7:14:e7:13:b9:0d:98: 91:9a:94:3e:ad:d7:0a:3a:1f:9c:e3:72:11:c9:88: 0d:45:79:5c:ed:3d:81:71:36:73:86:eb:00:f5:d3: d9:92:99:a4:df:8b:8b:0b:d6:ed:af:c1:b0:c8:d0: 2c:2a:51:72:0f:16:95:f2:74:18:63:6d:8f:ab:99: 7b:51:07:20:b8:ea:c0:43:d3:aa:b6:f5:68:2d:36: a6:2d:dc:84:a0:f3:1c:59:bd:fe:42:1f:3a:2a:3c: b6:b3:57:27:0d:7f:4d:6e:bb:f4:1d:57:42:ae:99: ef:ec:b7:29:c0:c1:68:df:e3:d4:2f:52:90:93:bb: 6b:91:b5:b1:ce:fc:2f:87:30:43:b4:01:d8:8f:73: 16:0e:c9:d1:f2:7f:6a:70:4e:4d:ec:84:fe:d7:5d: 2d:b0:be:dd:2f:15:df:4f:09:94:0a:e4:39:83:42: b9:a7:79:52:07:2b:93:35:aa:5e:e3:c2:b7:8b:4b: e8:66:8d:c9:9c:9f:41:0b:31:6d:e7:43:76:8b:22: 08:a7:1e:1f:02:1e:2c:82:86:91:eb:15:56:12:00: 8f:82:fc:e3:6b:5d:c7:6e:99:6a:a1:a6:ba:7d:e2: 7c:a7:09:d6:a5:fc:53:29:20:40:ec:41:68:89:2d: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B5:8A:B5:5E:1B:7D:9C:AA:4D:FD:00:FB:DD:8E:4C:06:F9:5D:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/df5a83ee-f97c-3a71-9fde-5474bed3cce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0f:22:86:21:ac:bf:64:45:fa:d8:5a:15:ac:e2:6f:d5:f3: 2f:b3:94:24:fa:e9:6c:42:31:64:d0:fe:f9:16:c8:dc:02:ca: 66:10:12:c8:11:06:66:c9:ea:69:77:f3:e8:c0:52:10:4c:a0: bb:ec:26:ce:8d:48:e0:44:56:85:02:e2:a1:05:75:dc:84:b9: 11:d4:9e:6c:ad:3b:79:8f:c4:00:02:5c:3f:9f:1e:f1:0f:6c: 70:41:ad:ab:f0:8c:95:77:b7:14:89:ae:20:06:d2:35:69:40: c4:6e:57:b4:db:d3:ee:7c:38:a1:5e:44:4a:da:d5:42:26:9f: af:26:f5:ad:a1:b5:bf:7e:b0:d5:c1:44:7c:a3:3c:81:0b:23: 40:ca:0a:70:be:43:af:44:ab:31:b0:e2:87:df:24:08:06:d3: f5:3a:d2:59:46:4b:21:c3:94:e0:12:aa:7a:7a:37:b9:06:b9: 6e:9b:db:a4:ac:4c:11:5b:5c:c6:1a:f1:e4:c0:99:32:d0:25: 02:09:ff:80:1d:4d:34:d8:ad:99:c5:91:08:4f:06:f5:31:d7: b5:90:da:3a:be:cf:ec:f2:24:6f:b5:b6:73:06:a4:ac:37:97: f7:e6:b7:49:50:e0:99:28:5f:f2:bc:be:24:c5:56:bc:e3:f3: 35:43:6d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fF/7viSZ0X/zlbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQwMjA5MzE0M1oXDTI2MDcwMTA5MzE0M1owLzEtMCsGA1UEAxMk MDc2M2RkM2EtMjRhNy00MmRmLWE5YTUtOGY0ZWZlMjI5ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX9QYaqB2acU5xO5DZiRmpQ+rdcKOh+c43IR yYgNRXlc7T2BcTZzhusA9dPZkpmk34uLC9btr8GwyNAsKlFyDxaV8nQYY22Pq5l7 UQcguOrAQ9OqtvVoLTamLdyEoPMcWb3+Qh86Kjy2s1cnDX9Nbrv0HVdCrpnv7Lcp wMFo3+PUL1KQk7trkbWxzvwvhzBDtAHYj3MWDsnR8n9qcE5N7IT+110tsL7dLxXf TwmUCuQ5g0K5p3lSByuTNape48K3i0voZo3JnJ9BCzFt50N2iyIIpx4fAh4sgoaR 6xVWEgCPgvzja13Hbplqoaa6feJ8pwnWpfxTKSBA7EFoiS126QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS1irVeG32cqk39APvdjkwG+V2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGY1YTgzZWUtZjk3Yy0z YTcxLTlmZGUtNTQ3NGJlZDNjY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8PIoYhrL9kRfrYWhWs4m/V8y+zlCT66WxCMWTQ/vkWyNwCymYQEsgR BmbJ6ml38+jAUhBMoLvsJs6NSOBEVoUC4qEFddyEuRHUnmytO3mPxAACXD+fHvEP bHBBravwjJV3txSJriAG0jVpQMRuV7Tb0+58OKFeREra1UImn68m9a2htb9+sNXB RHyjPIELI0DKCnC+Q69EqzGw4offJAgG0/U60llGSyHDlOASqnp6N7kGuW6b26Ss TBFbXMYa8eTAmTLQJQIJ/4AdTTTYrZnFkQhPBvUx17WQ2jq+z+zyJG+1tnMGpKw3 l/fmt0lQ4JkoX/K8viTFVrzj8zVDbYY= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:05 2026 by rpki-client