$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa File: 02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa (raw, json) Hash identifier: Y297+7PthW7Rjfze/4pCrpIMLtkJ4YFvG2Z0a68mXWY= Subject key identifier: 41:A9:20:28:F2:6A:7D:71:BE:E6:59:CF:60:37:9C:CA:80:AC:84:61 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D651539AB2D672199B34A7E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 108.166.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:39:ab:2d:67:21:99:b3:4a:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=63cd385e-a57a-497d-9d4d-eb175f33a193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f8:41:e6:4b:ab:f5:4b:4c:a0:a2:e6:39:4b: 77:17:61:e7:fe:d3:49:7b:a7:13:18:17:5c:de:3d: bb:3a:b0:4c:9c:bc:64:49:33:88:5a:10:37:cd:0c: 49:8f:41:15:d8:45:2f:fe:b8:ca:25:10:87:d8:55: ff:ee:a8:19:8d:88:b2:f7:e8:4f:09:9d:08:57:51: 47:61:a1:70:79:77:58:a3:ee:b6:7f:e6:fb:67:12: 02:ae:2d:ff:8e:e3:d9:4c:6e:8d:63:f3:2d:6c:ec: a2:4b:3d:c2:66:95:a3:12:b6:e4:ff:d4:64:30:30: 95:68:23:c9:37:63:bc:30:9b:69:b0:51:e9:fd:ed: 6f:d5:e1:ee:b8:b6:65:8b:07:bf:89:43:1e:00:84: 9b:42:b7:9b:ce:15:f5:3d:bf:9b:aa:2e:61:26:36: 42:ad:0b:8f:d9:5c:a4:7e:a8:c4:66:7f:38:74:e1: f4:f3:ed:16:97:b7:72:51:80:fa:fb:a2:6c:3a:15: 8b:31:f0:31:db:91:b9:9a:b6:d1:c9:6d:b8:e2:47: 2e:71:90:94:91:ee:eb:3e:ca:24:38:69:42:15:0f: 12:3c:65:13:de:fa:23:9d:d2:eb:14:c6:8d:2f:e3: b8:2b:bc:9a:72:4d:00:33:3e:db:92:69:12:77:1b: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:20:28:F2:6A:7D:71:BE:E6:59:CF:60:37:9C:CA:80:AC:84:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02b66073-39f1-3252-b9c5-d9a4cd13d03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:aa:19:00:fb:fb:d7:b9:00:5b:ae:b0:89:14:09:31:32:45: 33:d8:61:14:5b:7d:6e:e2:8e:c4:d2:66:0f:b7:e5:95:f5:21: d1:d7:7f:4a:14:4a:c1:e3:c6:5b:0d:cf:7b:31:e0:ee:49:41: 8c:9f:e0:47:89:be:81:f4:c6:c2:37:bf:66:37:8f:6d:9f:9a: fc:4b:0e:02:ab:d2:96:19:64:e3:16:56:e2:6c:1c:9d:9d:71: 25:3f:25:7b:8c:10:11:de:b0:85:13:6c:87:b3:f9:fe:27:8e: 59:2d:66:e2:5e:65:d9:9c:67:9a:27:2f:4b:86:14:33:92:ed: 86:84:b2:7f:c5:44:5b:10:69:2c:2a:ea:fa:c4:fc:d7:16:64: fa:b3:23:e1:8d:70:67:e9:c0:1b:57:81:19:8d:a1:ea:6a:e2: b4:55:01:b0:2c:0d:94:99:14:64:d9:5c:40:fd:06:39:6b:2b: 1b:75:a4:27:4e:19:b5:d6:54:46:e8:d5:82:3d:a3:3e:59:f0: 87:5f:1d:9d:7a:58:20:29:3b:48:95:47:20:f6:e6:df:8c:fe: a0:e0:15:be:d0:e6:70:9b:f8:c9:3d:ef:65:bb:b4:d7:64:83: 34:3a:7d:50:1e:96:47:5b:01:a2:90:41:00:5a:db:24:ef:f4: fa:68:de:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTmrLWchmbNKfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NjNjZDM4NWUtYTU3YS00OTdkLTlkNGQtZWIxNzVmMzNhMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/hB5kur9UtMoKLmOUt3F2Hn/tNJe6cTGBdc 3j27OrBMnLxkSTOIWhA3zQxJj0EV2EUv/rjKJRCH2FX/7qgZjYiy9+hPCZ0IV1FH YaFweXdYo+62f+b7ZxICri3/juPZTG6NY/MtbOyiSz3CZpWjErbk/9RkMDCVaCPJ N2O8MJtpsFHp/e1v1eHuuLZliwe/iUMeAISbQrebzhX1Pb+bqi5hJjZCrQuP2Vyk fqjEZn84dOH08+0Wl7dyUYD6+6JsOhWLMfAx25G5mrbRyW244kcucZCUke7rPsok OGlCFQ8SPGUT3vojndLrFMaNL+O4K7yack0AMz7bkmkSdxstZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGpICjyan1xvuZZz2A3nMqArIRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDJiNjYwNzMtMzlmMS0z MjUyLWI5YzUtZDlhNGNkMTNkMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2qGQD7+9e5AFuusIkUCTEyRTPYYRRbfW7ijsTSZg+35ZX1IdHXf0oU SsHjxlsNz3sx4O5JQYyf4EeJvoH0xsI3v2Y3j22fmvxLDgKr0pYZZOMWVuJsHJ2d cSU/JXuMEBHesIUTbIez+f4njlktZuJeZdmcZ5onL0uGFDOS7YaEsn/FRFsQaSwq 6vrE/NcWZPqzI+GNcGfpwBtXgRmNoepq4rRVAbAsDZSZFGTZXED9BjlrKxt1pCdO GbXWVEbo1YI9oz5Z8IdfHZ16WCApO0iVRyD25t+M/qDgFb7Q5nCb+Mk972W7tNdk gzQ6fVAelkdbAaKQQQBa2yTv9Ppo3kk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:37:47 2026 by rpki-client