$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa File: 36f3ae61-d72c-3948-b50f-508c610e5e75.roa (raw, json) Hash identifier: 8jQjaoT33PJiX215jQHT4E2ryC5+s4GCL6NeTQEcxnY= Subject key identifier: 59:5D:CF:1E:C8:47:7E:11:D2:0F:EC:37:0A:38:E0:E6:D0:19:E6:F0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D65150536D1113C128AC20980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 108.166.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:05:36:d1:11:3c:12:8a:c2:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=b38e6ae4-9177-4712-bcab-3fa343617185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:00:25:cf:13:c3:a9:13:4e:de:e1:cb:4f:0b: d2:ab:d9:a7:76:0a:88:26:de:91:08:0b:5f:eb:63: f6:b1:5e:b0:7e:54:e4:0d:e7:14:e0:fc:c3:52:4f: 47:f6:8f:0b:4e:3c:5e:32:17:75:8d:38:a0:95:93: f4:0c:28:b7:53:22:60:bb:f5:4d:73:64:21:26:09: d5:cc:50:35:7e:64:47:6f:fa:cf:06:c8:36:8f:25: 1f:83:28:e0:7d:2c:d7:4b:b6:89:6f:a7:dc:49:bb: 6c:dc:45:06:5c:24:29:23:a8:2d:1f:9c:d5:06:64: 25:34:99:73:bb:03:e7:a5:11:7a:5f:87:67:0d:b8: 2b:be:95:2d:6a:30:b8:5c:d9:df:23:55:c6:04:5b: fe:47:03:5d:ed:34:ac:1e:86:34:92:b8:2d:10:da: 65:be:5c:85:6f:a7:6f:00:f6:8f:b5:c0:e0:27:57: 49:82:4f:47:88:06:5d:06:02:04:7d:77:e8:eb:a2: 12:71:7c:c2:0d:1e:df:d4:08:da:2f:e6:ef:53:8d: ce:59:df:67:06:d9:79:4b:67:90:27:a9:5a:ac:89: e4:dd:2c:3f:18:7a:27:4f:ea:24:02:39:1c:65:ed: 2b:1d:c5:c5:51:e1:0e:d4:94:ae:b9:1e:75:92:e7: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5D:CF:1E:C8:47:7E:11:D2:0F:EC:37:0A:38:E0:E6:D0:19:E6:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:47:20:5f:12:cc:51:2a:af:62:4e:71:83:1f:b9:36:47:e3: 3c:10:da:c5:72:60:fd:10:12:fa:7f:f7:51:88:b4:53:c6:67: a9:d6:5c:af:d7:b4:4a:7e:68:be:3c:0f:b7:ab:ca:58:2c:93: 5a:d1:1e:11:24:12:cb:9a:40:9d:0c:05:ba:5c:7a:d8:5f:21: 4f:fc:2a:74:d2:c5:3b:36:87:16:c9:32:e7:2e:33:61:6d:68: 46:15:2f:8e:fc:c3:69:92:89:0f:f7:f7:10:4e:7f:57:df:43: f5:36:4d:0c:14:6e:5d:91:95:0e:44:80:ed:46:b3:36:07:40: 5c:c2:b7:1a:28:cb:e3:ee:f8:13:bd:d8:98:31:82:3e:f6:b1: c6:3e:17:0d:0a:c4:39:63:97:f7:c1:ce:c6:fe:19:2c:e7:2b: a6:ed:cb:23:e4:76:99:6a:9b:14:ad:67:f4:fe:97:6e:da:05: 68:60:33:54:18:06:66:a5:cd:b3:42:f8:13:b7:50:db:3c:0b: b4:f0:c1:97:a2:76:ce:7c:66:8b:4e:65:b6:df:1b:dd:3b:3b: b0:30:aa:33:ad:99:fd:ac:fc:e4:92:2a:ff:33:f0:1b:a9:4a: 78:5e:c6:b0:49:e2:89:06:8a:98:c9:91:59:6a:66:7a:69:6f: 0b:29:61:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQU20RE8EorCCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YjM4ZTZhZTQtOTE3Ny00NzEyLWJjYWItM2ZhMzQzNjE3MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gAlzxPDqRNO3uHLTwvSq9mndgqIJt6RCAtf 62P2sV6wflTkDecU4PzDUk9H9o8LTjxeMhd1jTiglZP0DCi3UyJgu/VNc2QhJgnV zFA1fmRHb/rPBsg2jyUfgyjgfSzXS7aJb6fcSbts3EUGXCQpI6gtH5zVBmQlNJlz uwPnpRF6X4dnDbgrvpUtajC4XNnfI1XGBFv+RwNd7TSsHoY0krgtENplvlyFb6dv APaPtcDgJ1dJgk9HiAZdBgIEfXfo66IScXzCDR7f1AjaL+bvU43OWd9nBtl5S2eQ J6larInk3Sw/GHonT+okAjkcZe0rHcXFUeEO1JSuuR51kucSGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFldzx7IR34R0g/sNwo44ObQGebwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzZmM2FlNjEtZDcyYy0z OTQ4LWI1MGYtNTA4YzYxMGU1ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1HIF8SzFEqr2JOcYMfuTZH4zwQ2sVyYP0QEvp/91GItFPGZ6nWXK/X tEp+aL48D7erylgsk1rRHhEkEsuaQJ0MBbpcethfIU/8KnTSxTs2hxbJMucuM2Ft aEYVL478w2mSiQ/39xBOf1ffQ/U2TQwUbl2RlQ5EgO1GszYHQFzCtxooy+Pu+BO9 2Jgxgj72scY+Fw0KxDljl/fBzsb+GSznK6btyyPkdplqmxStZ/T+l27aBWhgM1QY BmalzbNC+BO3UNs8C7TwwZeids58ZotOZbbfG907O7AwqjOtmf2s/OSSKv8z8Bup SnhexrBJ4okGipjJkVlqZnppbwspYUE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:18:49 2026 by rpki-client