$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa File: 2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa (raw, json) Hash identifier: 7C+153MD74LlogkRV9zGhjfk85t1o4sd3vZypyuAF6U= Subject key identifier: 46:5B:E6:E1:F1:0C:DE:B4:2E:EB:81:25:FB:7F:68:49:6B:C2:AC:41 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C847702CBAC8E9D33215AADC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:02:cb:ac:8e:9d:33:21:5a:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=ed1db393-5ab0-455b-bf9c-b84f78be91b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:96:20:f5:41:d8:0b:fd:d4:1a:61:23:61:f3: 68:5f:78:73:69:27:ec:ca:fe:0d:e7:c8:69:2c:e2: 9c:57:33:d1:3e:ca:cb:38:32:79:c2:29:95:22:d2: 51:b8:2b:0c:81:d5:b2:ce:40:ad:65:59:3c:44:b9: ff:db:c5:54:fd:73:c7:10:89:64:be:ef:0d:bf:be: 28:ae:1b:a0:c2:0f:f3:2f:64:7e:58:94:67:bf:f4: 1d:d5:f5:64:63:1d:20:ef:df:92:7d:ea:a3:c0:2a: 69:23:f3:51:95:76:91:9e:4d:5d:18:ba:11:ab:c8: ae:b1:d2:49:5f:a4:77:bb:c8:c1:4d:9d:bf:a5:5b: 4e:cc:71:09:ad:20:18:39:57:11:4f:22:be:40:58: 2d:dc:93:2c:bb:27:3a:e7:ac:67:94:35:7b:ef:e0: 77:bf:c9:43:89:9d:85:53:c1:7d:a7:1d:df:15:91: fd:94:e1:61:8a:06:19:ab:67:db:fe:00:e4:42:d2: 7e:52:9e:2d:08:68:d7:c3:f9:ef:8b:e4:e6:a3:4b: ff:be:87:ef:10:48:59:13:61:e1:51:9e:96:4a:28: c0:a4:35:e3:4a:f5:f6:5f:3b:86:f3:59:76:23:b9: 7f:cc:c0:15:5a:a7:50:fc:05:14:66:79:bb:93:ba: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5B:E6:E1:F1:0C:DE:B4:2E:EB:81:25:FB:7F:68:49:6B:C2:AC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ba:07:ed:ae:b4:3b:e2:eb:cc:4d:ba:94:e6:4e:2a:16:3a: 7d:ab:11:e6:5c:cb:c7:bf:b9:cb:96:0e:3f:ab:e0:46:8c:2c: 86:38:95:da:37:15:ed:18:29:48:28:99:f0:e5:3e:73:fe:6b: cd:03:7b:f9:7f:09:97:91:90:07:52:17:a8:2e:e9:37:16:80: 8c:aa:90:bf:ff:44:f5:60:48:12:80:d0:71:17:f7:10:b2:47: ad:7a:52:00:66:7b:f5:a7:b1:b0:bc:62:f5:14:3c:f5:90:cf: 1b:ae:d5:dc:ca:c1:a8:73:f9:b6:75:ed:ba:a5:19:d8:fc:51: c9:ec:2e:ba:c6:3c:fa:9e:20:da:72:ec:a5:16:24:33:da:54: 41:00:2c:0f:be:59:00:7f:61:22:af:d9:47:3a:6d:33:37:41: 3d:db:fb:a7:d8:02:b0:6b:b8:b9:af:86:3b:e8:d5:fd:ae:82: 18:e2:8a:c9:7c:f2:7b:4d:38:83:85:bf:67:66:de:a2:56:18: 20:51:ed:38:e4:c3:1a:72:24:ec:5a:66:c4:71:a1:08:15:f3: de:14:a6:49:a3:c3:64:ca:63:2a:27:76:41:cc:d2:44:fd:1b: 22:0a:30:8e:1e:75:b8:f9:cd:bb:fb:a9:43:e6:10:47:5a:ff: 8b:9f:5a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwLLrI6dMyFarcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZWQxZGIzOTMtNWFiMC00NTViLWJmOWMtYjg0Zjc4YmU5MWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJYg9UHYC/3UGmEjYfNoX3hzaSfsyv4N58hp LOKcVzPRPsrLODJ5wimVItJRuCsMgdWyzkCtZVk8RLn/28VU/XPHEIlkvu8Nv74o rhugwg/zL2R+WJRnv/Qd1fVkYx0g79+SfeqjwCppI/NRlXaRnk1dGLoRq8iusdJJ X6R3u8jBTZ2/pVtOzHEJrSAYOVcRTyK+QFgt3JMsuyc656xnlDV77+B3v8lDiZ2F U8F9px3fFZH9lOFhigYZq2fb/gDkQtJ+Up4tCGjXw/nvi+Tmo0v/vofvEEhZE2Hh UZ6WSijApDXjSvX2XzuG81l2I7l/zMAVWqdQ/AUUZnm7k7oZCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZb5uHxDN60LuuBJft/aElrwqxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmE3MWRkOGMtZmMzNi0z MzI4LThkMmItZGMxZjExN2FlYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC6B+2utDvi68xNupTmTioWOn2rEeZcy8e/ucuWDj+r4EaMLIY4ldo3 Fe0YKUgomfDlPnP+a80De/l/CZeRkAdSF6gu6TcWgIyqkL//RPVgSBKA0HEX9xCy R616UgBme/WnsbC8YvUUPPWQzxuu1dzKwahz+bZ17bqlGdj8UcnsLrrGPPqeINpy 7KUWJDPaVEEALA++WQB/YSKv2Uc6bTM3QT3b+6fYArBruLmvhjvo1f2ughjiisl8 8ntNOIOFv2dm3qJWGCBR7TjkwxpyJOxaZsRxoQgV894Upkmjw2TKYyondkHM0kT9 GyIKMI4edbj5zbv7qUPmEEda/4ufWqo= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:20 2026 by rpki-client