$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d3b8810-28ce-3354-b339-8a8e7d81520d.roa File: 3d3b8810-28ce-3354-b339-8a8e7d81520d.roa (raw, json) Hash identifier: jJXeRGXkaLb10cJsH0dQnbw95xoZmWStcXy1odQPCqE= Subject key identifier: 3D:EF:F4:7A:38:EA:94:98:71:28:96:C9:31:CA:A7:6B:40:D2:0D:E5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9D96E5EE3562AE32CAE62600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d3b8810-28ce-3354-b339-8a8e7d81520d.roa Signing time: Fri 23 Jan 2026 02:00:30 +0000 ROA not before: Fri 23 Jan 2026 02:00:30 +0000 ROA not after: Thu 23 Apr 2026 01:00:30 +0000 asID: 30036 IP address blocks: 108.161.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9d:96:e5:ee:35:62:ae:32:ca:e6:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 23 02:00:30 2026 GMT Not After : Apr 23 01:00:30 2026 GMT Subject: CN=3c5801f9-e76d-4ba3-b56d-2ae67f831a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:5c:43:cc:c3:8b:3d:0b:be:09:50:24:90: eb:bf:d6:f5:b3:c3:24:36:95:6c:d5:fe:2f:bb:b7: 7d:11:5e:48:cc:a3:8a:9e:79:89:f5:58:37:fb:e5: 05:25:b4:70:a2:4b:c6:4c:c1:7b:a2:29:a7:d6:d2: 4e:98:ff:f9:fc:8a:43:8d:51:21:1c:59:6d:09:6e: 21:06:ea:f3:9c:cb:9d:9e:91:8b:9b:15:d3:83:f1: 66:a3:75:32:0f:f6:87:f3:b0:ff:c8:43:5d:b7:8f: a3:c9:62:1e:31:68:93:7c:89:9c:7a:22:19:6b:c3: 0f:52:8d:20:75:49:eb:26:7d:90:a1:23:8e:84:f4: 46:d0:55:d2:b3:9e:73:ef:1d:80:27:e0:df:9d:2e: 55:77:ad:41:86:7f:59:94:7f:35:1b:08:72:44:46: 7d:38:76:e1:31:8c:10:8a:dc:dd:a8:98:aa:00:f8: 2f:a2:c2:d3:15:6a:d3:04:a4:17:3a:9c:fa:2a:11: ac:dc:1d:eb:8e:54:2b:b5:44:c8:bb:27:e5:14:e9: 0f:53:03:c0:ba:ee:38:53:ba:28:4d:8b:cc:cb:78: c6:86:e8:b9:e4:d0:cf:a3:27:06:45:68:60:73:82: 4b:06:d4:71:bf:f5:d7:16:58:87:da:da:73:2e:0d: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EF:F4:7A:38:EA:94:98:71:28:96:C9:31:CA:A7:6B:40:D2:0D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d3b8810-28ce-3354-b339-8a8e7d81520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f3:2b:09:f9:f7:5b:dd:cd:04:cf:55:5e:87:f2:70:ad:b1: e2:71:03:50:06:a9:28:bc:ae:2f:37:f9:b6:25:62:a8:25:93: c8:99:1d:59:70:01:d8:2c:bb:35:99:26:08:6d:b6:7f:43:a9: 0e:05:8b:ba:53:f7:3b:3e:b8:dc:01:7f:04:be:3c:5e:a9:12: 71:25:b6:36:d3:5e:84:c5:de:e2:0c:57:42:f9:d7:ed:47:d8: 99:14:09:1c:53:a0:00:46:99:a7:70:36:e3:58:52:b9:cb:7a: e9:46:19:29:33:18:dd:5f:b2:aa:0f:0a:bb:3f:12:7e:c9:c1: f9:09:0e:f3:c9:41:7e:de:d7:fb:30:87:93:c5:f4:20:7d:41: 03:1b:ed:a9:c7:64:e4:ef:9e:c3:fb:72:7d:5d:2c:25:f8:d7: 50:f2:52:54:d2:94:d1:a0:5b:b7:5f:1a:17:21:f4:8a:4f:78: f7:9d:0d:48:fd:93:e3:f3:4d:51:61:b7:0e:d2:e5:57:d2:5f: 3f:f1:a3:7b:08:03:d9:2e:bd:2e:1f:fd:a4:70:70:cc:e4:47: 29:ba:2e:a9:ed:3b:d3:c0:ef:9b:e6:dd:a1:cb:f7:13:8c:2c: 10:e0:da:dd:f3:95:16:78:6f:ee:ae:d8:92:e6:cd:8a:34:8b: d2:bb:da:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEydluXuNWKuMsrmJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMzAyMDAzMFoXDTI2MDQyMzAxMDAzMFowLzEtMCsGA1UEAxMk M2M1ODAxZjktZTc2ZC00YmEzLWI1NmQtMmFlNjdmODMxYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWpcQ8zDiz0LvglQJJDrv9b1s8MkNpVs1f4v u7d9EV5IzKOKnnmJ9Vg3++UFJbRwokvGTMF7oimn1tJOmP/5/IpDjVEhHFltCW4h BurznMudnpGLmxXTg/Fmo3UyD/aH87D/yENdt4+jyWIeMWiTfImceiIZa8MPUo0g dUnrJn2QoSOOhPRG0FXSs55z7x2AJ+DfnS5Vd61Bhn9ZlH81GwhyREZ9OHbhMYwQ itzdqJiqAPgvosLTFWrTBKQXOpz6KhGs3B3rjlQrtUTIuyflFOkPUwPAuu44U7oo TYvMy3jGhui55NDPoycGRWhgc4JLBtRxv/XXFliH2tpzLg0K6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3v9Ho46pSYcSiWyTHKp2tA0g3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2QzYjg4MTAtMjhjZS0z MzU0LWIzMzktOGE4ZTdkODE1MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDzKwn591vdzQTPVV6H8nCtseJxA1AGqSi8ri83+bYlYqglk8iZHVlw AdgsuzWZJghttn9DqQ4Fi7pT9zs+uNwBfwS+PF6pEnEltjbTXoTF3uIMV0L51+1H 2JkUCRxToABGmadwNuNYUrnLeulGGSkzGN1fsqoPCrs/En7JwfkJDvPJQX7e1/sw h5PF9CB9QQMb7anHZOTvnsP7cn1dLCX411DyUlTSlNGgW7dfGhch9IpPePedDUj9 k+PzTVFhtw7S5VfSXz/xo3sIA9kuvS4f/aRwcMzkRym6LqntO9PA75vm3aHL9xOM LBDg2t3zlRZ4b+6u2JLmzYo0i9K72hI= -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:29 2026 by rpki-client