$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa File: 192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa (raw, json) Hash identifier: reM+JOPt3p308ycHikZzueWCIzS1+2uJu/7XbiWQUcI= Subject key identifier: 2E:A8:E6:BA:47:38:0B:92:2A:DB:E0:BB:91:A8:B3:33:44:48:EE:62 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C84770211340D15B8D9513C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:02:11:34:0d:15:b8:d9:51:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=3ad8433a-8a6f-445d-b711-0defe60cab46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:a6:0e:77:24:bf:44:a4:cd:a4:fc:67:92: 7a:d2:77:99:01:5d:f9:07:49:f0:cc:c2:77:ac:d6: 8c:a1:48:b6:a2:fd:f1:98:c1:c9:2c:91:b0:07:dd: 37:5f:27:0f:68:95:ba:15:d4:f3:1d:60:0a:1e:5d: a4:8e:c7:a0:9b:f8:f4:28:ce:eb:4c:1e:a2:b2:aa: 25:c8:d2:4e:8b:f9:05:37:c6:df:e8:7f:6f:b9:c3: 5c:14:84:9f:d0:5a:06:31:76:f5:3e:ca:4e:11:8e: 1e:59:8a:ce:68:82:8e:b8:ea:5f:38:3d:5d:e6:f9: 9f:8f:38:ad:47:f0:d3:16:80:37:98:95:30:42:c8: c9:11:63:e9:b3:4d:de:80:2d:c1:42:cb:81:6c:93: 2d:10:d7:17:a3:e9:34:b2:d7:fb:3a:82:9f:b8:7a: a6:b8:20:3c:a5:3d:8b:2a:54:69:c0:c8:22:93:d6: 6f:a9:dd:10:53:d7:3f:84:c9:ca:76:9a:c5:8d:9b: 71:97:2d:0b:a2:74:79:0b:11:a5:a0:fa:65:40:00: 9f:d6:47:68:da:2a:c2:b0:98:36:94:51:bd:f6:39: d4:c2:d8:5e:b6:48:49:e8:0b:fe:e7:20:ed:53:93: 07:ba:68:63:dc:12:f6:36:a7:c9:73:ff:a5:ca:2f: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A8:E6:BA:47:38:0B:92:2A:DB:E0:BB:91:A8:B3:33:44:48:EE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:df:84:12:6e:8a:51:1f:f7:b6:76:8c:ec:37:96:dc:81:99: d1:7a:64:ef:12:c8:d3:47:89:cc:0a:6a:ab:b3:be:be:2a:9a: 4c:69:8a:ad:fd:5b:54:bf:86:6b:a9:0f:f2:d7:48:d5:01:b6: d1:75:44:46:0c:63:14:0d:c4:f4:46:c2:ea:31:c6:4a:ef:48: 06:6e:f7:bc:c5:27:59:7e:0b:df:ee:f6:89:c7:5a:4f:4b:9f: 1f:a1:a5:9c:18:47:8b:f5:51:06:59:4e:a2:11:bf:e0:2f:f2: e7:2e:f6:20:f6:b7:bd:e6:72:12:55:59:a1:b0:d8:31:96:b3: 8d:8d:4f:ea:c8:ca:e7:fc:ad:ca:cd:a3:6f:d3:ff:47:cb:7b: 66:f6:df:09:fc:85:3f:68:7e:b2:4e:4c:38:58:b6:52:26:99: 81:29:d0:63:d2:1e:af:e6:65:01:4e:c5:7b:7c:43:33:03:f3: c2:e9:f7:2c:f0:04:3b:9c:1a:eb:4b:06:65:54:a1:a8:19:19: 7f:a1:c6:83:fd:d5:3c:8d:25:80:ce:f0:a3:b1:0a:49:8b:b6: ee:3a:fb:46:59:0e:40:56:6c:03:5b:79:1f:6f:93:55:33:77: ee:88:58:6c:fe:c1:e3:69:c4:38:1e:75:df:d8:51:35:a8:b9: 5b:15:10:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwIRNA0VuNlRPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk M2FkODQzM2EtOGE2Zi00NDVkLWI3MTEtMGRlZmU2MGNhYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3CmDnckv0SkzaT8Z5J60neZAV35B0nwzMJ3 rNaMoUi2ov3xmMHJLJGwB903XycPaJW6FdTzHWAKHl2kjsegm/j0KM7rTB6isqol yNJOi/kFN8bf6H9vucNcFISf0FoGMXb1PspOEY4eWYrOaIKOuOpfOD1d5vmfjzit R/DTFoA3mJUwQsjJEWPps03egC3BQsuBbJMtENcXo+k0stf7OoKfuHqmuCA8pT2L KlRpwMgik9Zvqd0QU9c/hMnKdprFjZtxly0LonR5CxGloPplQACf1kdo2irCsJg2 lFG99jnUwthetkhJ6Av+5yDtU5MHumhj3BL2NqfJc/+lyi/jgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6o5rpHOAuSKtvgu5GoszNESO5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTkyNzM4ZDUtOTNiNi0z ZWQyLWE5Y2YtZjNjZWZmMmE1ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKabMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvfhBJuilEf97Z2jOw3ltyBmdF6ZO8SyNNHicwKaquzvr4qmkxpiq39 W1S/hmupD/LXSNUBttF1REYMYxQNxPRGwuoxxkrvSAZu97zFJ1l+C9/u9onHWk9L nx+hpZwYR4v1UQZZTqIRv+Av8ucu9iD2t73mchJVWaGw2DGWs42NT+rIyuf8rcrN o2/T/0fLe2b23wn8hT9ofrJOTDhYtlImmYEp0GPSHq/mZQFOxXt8QzMD88Lp9yzw BDucGutLBmVUoagZGX+hxoP91TyNJYDO8KOxCkmLtu46+0ZZDkBWbANbeR9vk1Uz d+6IWGz+weNpxDgedd/YUTWouVsVEMI= -----END CERTIFICATE-----Generated at Sun Mar 1 20:53:47 2026 by rpki-client