$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa File: 02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa (raw, json) Hash identifier: GUjIHadR/dzApgE0xZskImaeAXHffYJFlcq0uZeyJu8= Subject key identifier: 86:52:D8:A5:21:80:AD:D5:C2:C4:28:1C:6E:B6:27:22:B4:26:86:08 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C847701632A389E13970FCA20 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:01:63:2a:38:9e:13:97:0f:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=f68373cf-14b7-4657-9248-2bf9be0eb06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2a:d4:b0:82:c2:27:52:2d:3f:dc:bc:30:7a: 66:06:83:07:14:55:b6:9e:e1:a4:c9:ff:1c:a4:21: 1e:20:d8:91:73:9f:1d:40:94:08:af:88:f5:11:a0: 3c:d1:d6:80:84:0e:45:a5:08:25:ae:c9:c5:0e:e3: 99:d8:2e:bd:d9:22:69:5a:7c:c3:af:75:1e:a1:bc: fc:ee:92:d7:90:bb:8b:31:b2:fe:4c:55:04:a7:b6: f4:39:33:c5:0e:13:98:31:69:de:85:72:07:09:f3: 1a:96:a8:66:0b:41:e1:ce:e3:72:a0:af:4b:ff:ef: 28:75:46:6b:1a:61:45:88:a2:74:9b:f7:05:d3:c2: bb:64:e8:65:3c:c5:53:bb:a7:14:99:d9:7d:26:fd: 2b:4e:f6:b0:55:96:63:c3:39:e7:40:b1:ab:94:d2: f3:85:7f:14:8e:df:74:65:34:fc:4c:83:6d:57:4e: 14:9f:85:e9:ec:8f:e1:9d:fe:ec:5e:e5:7f:5f:1e: 5d:41:22:1e:28:ce:c7:f0:43:01:95:70:8d:a7:fe: ec:1d:e1:cc:8f:e4:68:d6:59:22:bd:db:1c:af:9a: 10:8e:84:e4:3e:ef:9a:31:98:40:20:26:1d:71:a2: 61:fb:46:2a:47:a4:56:39:99:fd:e4:b2:3a:b3:3c: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:52:D8:A5:21:80:AD:D5:C2:C4:28:1C:6E:B6:27:22:B4:26:86:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:52:31:89:c5:2c:64:7c:c4:a3:16:82:d4:03:4f:1a:1c:06: d4:b9:08:d8:8c:d4:cc:47:43:9a:83:04:37:7d:34:3c:7d:20: 27:35:22:5e:b3:05:04:c9:28:f5:b4:d3:b7:1c:14:ae:f0:a7: 4b:0a:92:c0:b3:cc:05:8f:cb:91:33:f3:07:a6:34:ff:33:c7: d1:71:d4:89:2e:7f:ac:54:bf:63:f5:1b:c6:eb:8f:d3:87:06: 48:d2:d3:64:a9:ca:f3:53:bf:6a:d8:ee:74:50:0f:3a:cd:44: 39:68:8b:de:a6:dd:1e:99:14:78:9c:ea:a4:89:ee:83:7b:2d: 16:e3:73:70:5f:ff:db:3e:88:15:43:e7:4a:09:8d:62:ee:a2: 3f:a9:fd:23:55:74:fd:ff:8d:83:7d:9b:d6:35:bd:e6:36:34: 25:45:61:14:4d:28:00:2b:ea:94:ef:9d:59:64:92:fb:ab:a6: 8f:cd:86:7d:cd:e7:9f:88:1d:57:02:15:46:f8:40:7b:74:43: 25:d9:2f:29:de:d8:d3:91:98:0d:7d:af:78:8c:45:05:48:17: d9:b3:4e:76:cc:ab:d3:d4:62:e7:f4:84:e6:e6:32:2e:c8:bb: ff:b5:b0:b3:af:f1:c1:4b:ab:ae:0d:52:49:e2:d4:0a:a7:0c: 3d:72:c2:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwFjKjieE5cPyiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZjY4MzczY2YtMTRiNy00NjU3LTkyNDgtMmJmOWJlMGViMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7irUsILCJ1ItP9y8MHpmBoMHFFW2nuGkyf8c pCEeINiRc58dQJQIr4j1EaA80daAhA5FpQglrsnFDuOZ2C692SJpWnzDr3Ueobz8 7pLXkLuLMbL+TFUEp7b0OTPFDhOYMWnehXIHCfMalqhmC0HhzuNyoK9L/+8odUZr GmFFiKJ0m/cF08K7ZOhlPMVTu6cUmdl9Jv0rTvawVZZjwznnQLGrlNLzhX8Ujt90 ZTT8TINtV04Un4Xp7I/hnf7sXuV/Xx5dQSIeKM7H8EMBlXCNp/7sHeHMj+Ro1lki vdscr5oQjoTkPu+aMZhAICYdcaJh+0YqR6RWOZn95LI6szzPywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZS2KUhgK3VwsQoHG62JyK0JoYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDJiNjYwNzMtMzlmMS0z MjUyLWI5YzUtZDlhNGNkMTNkMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpSMYnFLGR8xKMWgtQDTxocBtS5CNiM1MxHQ5qDBDd9NDx9ICc1Il6z BQTJKPW007ccFK7wp0sKksCzzAWPy5Ez8wemNP8zx9Fx1Ikuf6xUv2P1G8brj9OH BkjS02SpyvNTv2rY7nRQDzrNRDloi96m3R6ZFHic6qSJ7oN7LRbjc3Bf/9s+iBVD 50oJjWLuoj+p/SNVdP3/jYN9m9Y1veY2NCVFYRRNKAAr6pTvnVlkkvurpo/Nhn3N 55+IHVcCFUb4QHt0QyXZLyne2NORmA19r3iMRQVIF9mzTnbMq9PUYuf0hObmMi7I u/+1sLOv8cFLq64NUkni1AqnDD1ywuI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:16 2026 by rpki-client