$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa File: 58c3f291-5363-3855-b3c5-3f69313bfec0.roa (raw, json) Hash identifier: wN26tvrSbYT7AWI1p8qbyvc8yow73IffY7V6JLk8lpc= Subject key identifier: 90:52:A6:E5:7B:C6:40:67:9A:74:0E:FF:9F:6F:48:63:7B:E7:F4:9F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D65153959E08635F52DA9BD00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 108.166.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:39:59:e0:86:35:f5:2d:a9:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=1ac9ee83-39c5-41a4-b516-1caef2e51c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a6:4e:5c:0c:18:ff:1b:ac:1e:fa:2d:de:30: 5d:24:55:7c:a0:9e:0e:d9:0c:f8:82:cf:b5:35:3f: bb:0e:00:27:04:25:73:7d:9d:31:40:6b:b8:1d:a7: 4d:e0:ea:89:62:e1:fa:35:f5:61:fa:aa:16:81:18: 31:41:d8:1a:9b:44:98:20:b0:ce:64:8d:49:ed:3f: c7:e7:48:fe:4b:37:31:78:70:04:6b:65:64:81:a1: 74:f7:65:35:e3:86:05:a0:7d:56:32:8e:b0:58:ad: 8b:09:5a:e9:43:1c:cf:4e:31:6f:6a:9a:c3:a4:fa: ba:fe:f0:68:ce:76:bf:1e:ed:d0:da:ca:5c:59:5f: 8f:c1:d5:aa:4f:9e:85:d5:01:45:85:cc:ba:30:1e: fb:0c:55:b1:fc:25:fa:9f:04:0d:b4:c1:5c:ed:08: 05:9c:9b:6d:db:88:8f:30:f0:3e:63:30:65:a0:d5: 79:3c:35:76:b9:bf:6a:e5:b0:79:5f:77:5c:f1:2f: 4b:fc:f0:8b:a8:0f:2e:9a:7d:a0:8e:1e:86:60:87: 8e:fd:b4:81:2e:b3:be:4d:3d:8c:ff:86:3f:11:2f: 46:e3:8c:4f:e3:0a:9e:a7:5f:0f:67:1e:8f:02:d9: 3e:f7:d6:02:70:7e:c9:d8:a7:a8:9e:b8:51:75:55: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:A6:E5:7B:C6:40:67:9A:74:0E:FF:9F:6F:48:63:7B:E7:F4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2c:1c:e8:fe:4b:b0:a8:40:5e:aa:0e:c2:9f:af:e1:51:f5: c7:51:14:b9:ce:af:e9:58:0c:eb:65:f8:66:9b:87:42:1d:fa: 55:70:15:ab:b9:e3:25:f7:fb:43:91:5d:2d:d8:e0:e2:df:14: 78:6c:0d:22:8a:a5:60:74:79:a0:88:e9:84:25:51:7b:ae:78: 2a:b0:39:86:8d:02:34:a7:85:75:aa:1d:10:de:49:d2:5e:19: be:26:10:c9:ed:c2:79:90:19:2e:be:14:d6:c9:1e:c4:5b:23: f7:df:64:a9:92:e1:0e:fd:ad:8c:51:b0:b7:bf:ff:9d:2b:f8: 8a:94:20:10:2f:96:56:81:e7:e1:9e:4a:4a:96:76:e2:36:53: ae:37:2c:08:b7:fb:34:b4:98:4c:86:d5:97:43:c6:e6:1d:21: 71:b8:5c:df:07:3f:93:f8:ec:c4:b8:eb:8e:53:e0:e3:70:d3: c0:db:3e:6c:f4:8f:18:e8:8d:cd:5c:b5:9e:cf:e7:6c:c5:03: 2d:42:f5:34:7e:0f:22:76:7a:a4:33:17:51:d2:f9:ef:88:a4: 7c:9a:67:5b:a6:52:4c:da:a5:be:22:c4:5f:1f:d3:01:65:39: d0:c3:e5:67:90:dd:c2:43:5d:d4:90:fd:ba:28:38:09:1b:12: 2e:e3:d0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTlZ4IY19S2pvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MWFjOWVlODMtMzljNS00MWE0LWI1MTYtMWNhZWYyZTUxYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KZOXAwY/xusHvot3jBdJFV8oJ4O2Qz4gs+1 NT+7DgAnBCVzfZ0xQGu4HadN4OqJYuH6NfVh+qoWgRgxQdgam0SYILDOZI1J7T/H 50j+SzcxeHAEa2VkgaF092U144YFoH1WMo6wWK2LCVrpQxzPTjFvaprDpPq6/vBo zna/Hu3Q2spcWV+PwdWqT56F1QFFhcy6MB77DFWx/CX6nwQNtMFc7QgFnJtt24iP MPA+YzBloNV5PDV2ub9q5bB5X3dc8S9L/PCLqA8umn2gjh6GYIeO/bSBLrO+TT2M /4Y/ES9G44xP4wqep18PZx6PAtk+99YCcH7J2KeonrhRdVXplwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBSpuV7xkBnmnQO/59vSGN75/SfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNThjM2YyOTEtNTM2My0z ODU1LWIzYzUtM2Y2OTMxM2JmZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgsHOj+S7CoQF6qDsKfr+FR9cdRFLnOr+lYDOtl+Gabh0Id+lVwFau5 4yX3+0ORXS3Y4OLfFHhsDSKKpWB0eaCI6YQlUXuueCqwOYaNAjSnhXWqHRDeSdJe Gb4mEMntwnmQGS6+FNbJHsRbI/ffZKmS4Q79rYxRsLe//50r+IqUIBAvllaB5+Ge SkqWduI2U643LAi3+zS0mEyG1ZdDxuYdIXG4XN8HP5P47MS4645T4ONw08DbPmz0 jxjojc1ctZ7P52zFAy1C9TR+DyJ2eqQzF1HS+e+IpHyaZ1umUkzapb4ixF8f0wFl OdDD5WeQ3cJDXdSQ/booOAkbEi7j0Mg= -----END CERTIFICATE-----Generated at Fri Apr 17 16:25:48 2026 by rpki-client