$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16987e58-a9ea-3266-a055-74720a9af9b9.roa File: 16987e58-a9ea-3266-a055-74720a9af9b9.roa (raw, json) Hash identifier: XMVqyhjBnmbRHY7CMmhY679uwLmyOQSB9lJrV41gmDQ= Subject key identifier: 4D:AE:C3:FA:F6:73:D1:B6:A7:34:2F:B3:80:68:39:C3:DA:CA:D4:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E104F2D6DFFA4B80511004480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16987e58-a9ea-3266-a055-74720a9af9b9.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 30036 IP address blocks: 108.166.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:2d:6d:ff:a4:b8:05:11:00:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=f96319a5-1c5f-4a6f-8540-56519d524b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:84:49:a4:3d:a9:60:f0:29:71:c1:f1:ef:dc: 9d:23:38:fb:35:9f:d5:94:4f:bc:b5:0d:e0:d9:7c: da:08:87:6e:8e:9f:03:fb:36:1b:7e:ce:1b:6b:19: ec:0c:b4:7e:7c:87:e3:75:c6:e1:e0:e5:b3:4d:b8: a8:b4:52:63:77:a7:da:db:df:35:2c:31:0e:51:16: b3:30:b1:00:c3:a9:d7:98:d8:26:7d:51:42:7a:db: 59:34:a3:b9:6f:ae:2d:5f:bd:86:72:27:60:88:11: f2:49:89:36:3a:79:9c:e1:8e:e1:5d:5a:b2:28:0b: 66:54:2d:05:df:e3:7b:e0:af:f3:27:43:e7:e8:7b: bc:99:52:86:af:52:38:f5:f6:a3:36:56:da:06:77: ae:4d:06:85:ff:28:b5:f2:91:ef:03:07:d8:e0:a6: d4:f2:de:e8:3f:f8:fd:35:95:3a:09:67:50:96:bf: f6:1b:f9:ca:ae:d6:ad:8f:e5:2a:9c:f3:04:3c:8b: a4:b9:33:a6:13:5b:d8:a4:ab:94:fe:c0:fb:d4:9a: b7:7c:7f:a9:ce:68:c6:3b:1f:d5:bd:47:e6:57:3a: d1:7b:b9:4b:92:2f:44:f2:e9:90:df:28:84:1a:7a: 70:36:59:78:29:7f:53:ff:0d:c7:6a:75:9c:0c:33: dd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AE:C3:FA:F6:73:D1:B6:A7:34:2F:B3:80:68:39:C3:DA:CA:D4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16987e58-a9ea-3266-a055-74720a9af9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ef:a6:aa:7c:5f:6b:7e:73:d9:c8:9a:58:88:29:d4:e4:ad: bd:b1:7e:1b:3c:f3:18:6b:92:1d:18:9e:89:d4:87:d5:cc:d6: 4f:26:b4:4a:74:be:7a:09:a5:c3:1d:fc:cc:be:41:af:00:a9: dd:6a:16:e2:d9:23:6f:e1:27:be:fe:09:cc:83:e6:37:f2:c3: 16:4e:54:db:1f:06:54:34:14:a3:d0:bc:d3:5f:7a:67:e3:77: 7f:b5:31:e1:64:f3:d0:f4:dd:47:ad:ab:1a:d7:d8:45:16:5c: ca:24:50:dd:67:c2:03:c4:a3:51:fe:cb:48:a1:a3:bf:53:90: 31:a3:09:7c:26:40:30:ae:10:92:99:8d:9c:13:5d:87:bc:81: ad:b3:44:f2:10:9d:0f:cc:8c:e5:5f:e5:29:64:9d:ad:80:b8: 15:b2:ec:fd:4e:7d:da:1b:b4:ff:a3:1c:88:12:5c:a6:d3:26: 24:42:bb:6b:8f:db:08:70:1b:8e:fd:62:eb:2c:22:30:aa:47: 10:6e:3b:2f:63:eb:34:31:de:11:92:77:2d:e0:90:ee:76:34: ef:01:35:35:fa:6c:9f:92:39:bc:b4:1a:e2:49:07:c0:0d:69: 9e:4f:d4:84:e0:ae:f4:90:43:9b:39:7c:4f:df:44:9b:be:f6: 24:6b:b4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTy1t/6S4BREARIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Zjk2MzE5YTUtMWM1Zi00YTZmLTg1NDAtNTY1MTlkNTI0YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4RJpD2pYPApccHx79ydIzj7NZ/VlE+8tQ3g 2XzaCIdujp8D+zYbfs4baxnsDLR+fIfjdcbh4OWzTbiotFJjd6fa2981LDEOURaz MLEAw6nXmNgmfVFCettZNKO5b64tX72GcidgiBHySYk2Onmc4Y7hXVqyKAtmVC0F 3+N74K/zJ0Pn6Hu8mVKGr1I49fajNlbaBneuTQaF/yi18pHvAwfY4KbU8t7oP/j9 NZU6CWdQlr/2G/nKrtatj+UqnPMEPIukuTOmE1vYpKuU/sD71Jq3fH+pzmjGOx/V vUfmVzrRe7lLki9E8umQ3yiEGnpwNll4KX9T/w3HanWcDDPd2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2uw/r2c9G2pzQvs4BoOcPaytShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTY5ODdlNTgtYTllYS0z MjY2LWEwNTUtNzQ3MjBhOWFmOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvvpqp8X2t+c9nImliIKdTkrb2xfhs88xhrkh0YnonUh9XM1k8mtEp0 vnoJpcMd/My+Qa8Aqd1qFuLZI2/hJ77+CcyD5jfywxZOVNsfBlQ0FKPQvNNfemfj d3+1MeFk89D03UetqxrX2EUWXMokUN1nwgPEo1H+y0iho79TkDGjCXwmQDCuEJKZ jZwTXYe8ga2zRPIQnQ/MjOVf5Slkna2AuBWy7P1OfdobtP+jHIgSXKbTJiRCu2uP 2whwG479YussIjCqRxBuOy9j6zQx3hGSdy3gkO52NO8BNTX6bJ+SOby0GuJJB8AN aZ5P1ITgrvSQQ5s5fE/fRJu+9iRrtPE= -----END CERTIFICATE-----Generated at Sun Jun 14 02:31:53 2026 by rpki-client