$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa File: 00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa (raw, json) Hash identifier: v0yGK4979n74p49zDzSohDvDN3iBE0Il7c+/Z3vV2EA= Subject key identifier: 69:10:FC:FA:3F:27:B3:03:94:48:8D:0A:46:C9:96:85:E9:70:7A:94 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8476B93FFD2176955397F600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:b9:3f:fd:21:76:95:53:97:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=fa07b215-e366-4a6f-abf3-a17af942d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fc:97:21:b9:3f:e8:a8:94:39:e5:de:6f:3f: 72:d3:55:ce:0d:29:bb:60:18:6c:da:4e:78:ef:18: be:a7:2c:25:8a:f4:7b:66:8f:12:d4:63:ce:91:aa: 9d:31:0f:e8:99:d2:81:85:aa:37:d9:50:b0:ef:0d: 17:cc:22:1b:92:64:3b:a2:e9:f0:02:e8:17:b9:7b: 6f:b4:49:93:30:72:65:e6:d3:c8:d9:27:20:1d:77: 51:21:86:00:79:b5:24:32:fb:e1:54:85:3a:31:ce: 4a:79:64:49:51:a6:8d:21:ba:27:22:80:d4:d1:fe: cd:15:5a:e6:cc:35:f1:47:fc:44:d1:c6:c0:f2:5e: e5:95:39:d3:62:45:56:b0:11:77:a2:b5:15:2f:19: c2:f7:1b:f8:08:0d:e9:fe:53:ed:d2:b1:34:30:83: 8b:65:8b:ea:96:6c:4d:0b:64:96:20:9c:1f:5e:64: a5:6e:a4:e1:c1:c6:c7:bf:f4:21:fe:4f:4f:4d:c5: 80:2e:8b:7c:4d:e4:74:8b:4c:3a:46:9e:1f:03:1e: 03:04:0b:cb:ea:62:61:cf:46:7c:43:10:66:3b:fd: 5f:d5:32:b8:72:44:92:70:a7:b4:2a:a4:39:c1:95: 49:84:fa:59:31:2b:db:c8:7d:4f:b6:40:97:63:cc: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:10:FC:FA:3F:27:B3:03:94:48:8D:0A:46:C9:96:85:E9:70:7A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00bfcb4d-31d4-3b84-8065-38ae27ae8704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0e:cc:8b:11:20:2e:58:c3:68:a7:d1:31:e3:38:cc:31:83: f4:e8:d2:00:23:56:f9:ad:57:76:d0:86:8a:de:9d:e5:f8:e5: 96:29:c5:66:9b:d2:2f:76:f1:e4:98:17:e7:70:aa:44:b8:d0: ab:d5:d2:7c:b7:20:ee:8c:7d:c8:08:16:31:ad:57:b3:cc:93: a5:6b:60:85:06:aa:19:9f:4b:f6:a4:15:9b:65:b0:2f:9b:42: de:5f:cf:e3:46:de:66:85:31:5e:28:77:52:10:fe:11:56:0a: 62:9e:52:0f:22:19:ef:ed:9c:e1:a8:fe:fd:f5:2c:b9:3e:f3: f5:f2:01:3e:41:d3:d4:e1:1b:fd:5a:23:f5:7d:4f:3f:64:ff: 9d:56:53:cd:63:6a:82:f8:d8:ca:62:3a:d7:9f:5d:b0:60:4c: 04:f1:35:9c:64:e8:e7:02:04:ac:d4:ca:6d:82:60:ab:50:66: 27:83:d4:1c:1c:06:e5:cf:81:b3:91:48:23:f6:80:3f:c5:74: a4:ce:72:3b:a7:33:f5:53:84:42:f3:3f:dc:c4:71:e7:08:e7: 2f:1f:ac:63:47:dd:59:2d:cd:ac:b5:80:c8:11:a7:96:cd:bb: 8d:43:9b:9e:43:e7:6b:bb:22:75:c8:55:2a:9d:da:38:50:e3: 7c:c8:a0:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdrk//SF2lVOX9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZmEwN2IyMTUtZTM2Ni00YTZmLWFiZjMtYTE3YWY5NDJkNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/yXIbk/6KiUOeXebz9y01XODSm7YBhs2k54 7xi+pywlivR7Zo8S1GPOkaqdMQ/omdKBhao32VCw7w0XzCIbkmQ7ounwAugXuXtv tEmTMHJl5tPI2ScgHXdRIYYAebUkMvvhVIU6Mc5KeWRJUaaNIbonIoDU0f7NFVrm zDXxR/xE0cbA8l7llTnTYkVWsBF3orUVLxnC9xv4CA3p/lPt0rE0MIOLZYvqlmxN C2SWIJwfXmSlbqThwcbHv/Qh/k9PTcWALot8TeR0i0w6Rp4fAx4DBAvL6mJhz0Z8 QxBmO/1f1TK4ckSScKe0KqQ5wZVJhPpZMSvbyH1PtkCXY8zEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkQ/Po/J7MDlEiNCkbJloXpcHqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDBiZmNiNGQtMzFkNC0z Yjg0LTgwNjUtMzhhZTI3YWU4NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkOzIsRIC5Yw2in0THjOMwxg/To0gAjVvmtV3bQhoreneX45ZYpxWab 0i928eSYF+dwqkS40KvV0ny3IO6MfcgIFjGtV7PMk6VrYIUGqhmfS/akFZtlsC+b Qt5fz+NG3maFMV4od1IQ/hFWCmKeUg8iGe/tnOGo/v31LLk+8/XyAT5B09ThG/1a I/V9Tz9k/51WU81jaoL42MpiOtefXbBgTATxNZxk6OcCBKzUym2CYKtQZieD1Bwc BuXPgbORSCP2gD/FdKTOcjunM/VThELzP9zEcecI5y8frGNH3Vktzay1gMgRp5bN u41Dm55D52u7InXIVSqd2jhQ43zIoJ8= -----END CERTIFICATE-----Generated at Sun Mar 1 20:55:26 2026 by rpki-client