$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa File: 6e3249de-4e8c-377d-980e-6a30cc94815e.roa (raw, json) Hash identifier: bV9QDGx90fNw/o+vPxMy42gK5Q6c0t00zkZ+4N89d7E= Subject key identifier: 65:D2:D0:21:5B:9C:9F:5C:65:8D:22:53:4A:CA:A6:34:62:8B:4B:F7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9D96E6330B2D50E3CAE93F20 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa Signing time: Fri 23 Jan 2026 02:00:30 +0000 ROA not before: Fri 23 Jan 2026 02:00:30 +0000 ROA not after: Thu 23 Apr 2026 01:00:30 +0000 asID: 30036 IP address blocks: 108.161.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9d:96:e6:33:0b:2d:50:e3:ca:e9:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 23 02:00:30 2026 GMT Not After : Apr 23 01:00:30 2026 GMT Subject: CN=d3410ef6-a9fc-41c5-b160-337f39d002ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:79:af:2a:ad:f5:7b:db:62:af:1e:d3:75: f2:5e:81:62:33:e4:6d:bb:25:07:3d:77:95:f2:3f: 55:a4:cb:92:bf:73:bf:f7:a6:ba:d4:f4:8a:b8:af: d4:74:8a:12:fb:13:31:c0:37:74:2d:ed:28:28:b5: 0c:88:25:5d:b0:08:25:c2:b0:6c:96:a1:e0:ec:63: c4:d3:ce:ba:47:c8:9f:f4:74:56:c4:c4:d1:da:53: eb:58:c2:f3:2e:ad:3e:a0:cf:f1:96:75:77:b8:c6: c0:f6:39:1a:91:f7:8d:34:d1:0e:e0:4a:32:2f:c9: a0:db:c7:bf:47:f7:40:a6:21:97:b1:c9:3a:58:1e: ed:b9:61:a7:a2:ca:65:89:d3:04:c4:95:33:9a:bf: 05:57:07:cf:c9:f9:1a:2d:91:42:0e:a0:7b:c1:b3: 45:34:d4:cb:1d:1e:b7:b7:cb:51:0e:ca:2f:81:e0: 22:e0:a9:c4:28:24:e3:6d:8c:be:13:34:21:29:b1: cd:df:05:b2:b7:ec:4f:68:97:52:2b:c1:ab:5a:58: 00:7a:66:bd:42:8b:ae:2a:b2:95:2d:11:d4:08:ed: 2f:5f:41:de:58:78:ee:8d:56:96:5d:b1:6c:6c:31: ee:14:19:83:3b:8c:66:19:50:0e:d8:ac:00:17:3d: e3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D2:D0:21:5B:9C:9F:5C:65:8D:22:53:4A:CA:A6:34:62:8B:4B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ba:3a:e6:43:39:14:11:2b:2a:94:ec:0c:1b:9b:f5:d6:0a: f6:17:f0:1b:5c:37:f3:19:eb:04:b2:75:98:6f:f6:b1:bd:41: 40:bc:47:7d:20:5e:db:20:1d:58:cc:44:6e:6b:40:28:6b:c6: 2b:f8:e4:e5:68:b0:9b:04:c6:93:c4:b6:6e:44:fb:b6:1c:fb: 31:a0:19:3c:77:41:00:15:69:e3:3c:c8:2e:8d:fb:fc:db:88: 34:d4:fb:1b:0b:4e:68:b6:38:21:79:89:43:32:7f:a7:12:a0: 74:a2:7b:85:41:1d:a6:8b:6f:af:3c:ad:71:e9:bd:ff:5e:2e: 9b:da:08:9e:74:5f:c8:e8:f3:e7:6b:c4:4d:46:0e:ae:fa:a6: 23:ec:ac:91:69:e2:e7:4e:44:c5:45:45:01:92:34:18:93:2a: 84:ab:65:03:ad:11:ae:b0:a6:f3:2d:84:6f:87:b9:b4:27:83: be:58:d8:61:0c:2f:0c:1c:92:50:55:67:c0:e6:5c:0e:61:71: 21:a7:f1:de:54:c3:f9:a1:33:52:6d:c4:ce:d5:4a:80:31:17: e4:34:52:08:8e:c7:a2:1d:a9:2b:db:54:43:1e:1e:d7:90:25: 5c:46:80:88:7d:cc:c7:a3:f7:85:a3:88:d3:8c:1b:8d:81:79: 29:e1:e9:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEydluYzCy1Q48rpPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMzAyMDAzMFoXDTI2MDQyMzAxMDAzMFowLzEtMCsGA1UEAxMk ZDM0MTBlZjYtYTlmYy00MWM1LWIxNjAtMzM3ZjM5ZDAwMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd15ryqt9XvbYq8e03XyXoFiM+RtuyUHPXeV 8j9VpMuSv3O/96a61PSKuK/UdIoS+xMxwDd0Le0oKLUMiCVdsAglwrBslqHg7GPE 0866R8if9HRWxMTR2lPrWMLzLq0+oM/xlnV3uMbA9jkakfeNNNEO4EoyL8mg28e/ R/dApiGXsck6WB7tuWGnosplidMExJUzmr8FVwfPyfkaLZFCDqB7wbNFNNTLHR63 t8tRDsovgeAi4KnEKCTjbYy+EzQhKbHN3wWyt+xPaJdSK8GrWlgAema9QouuKrKV LRHUCO0vX0HeWHjujVaWXbFsbDHuFBmDO4xmGVAO2KwAFz3jJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXS0CFbnJ9cZY0iU0rKpjRii0v3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmUzMjQ5ZGUtNGU4Yy0z NzdkLTk4MGUtNmEzMGNjOTQ4MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG6OuZDORQRKyqU7Awbm/XWCvYX8BtcN/MZ6wSydZhv9rG9QUC8R30g XtsgHVjMRG5rQChrxiv45OVosJsExpPEtm5E+7Yc+zGgGTx3QQAVaeM8yC6N+/zb iDTU+xsLTmi2OCF5iUMyf6cSoHSie4VBHaaLb688rXHpvf9eLpvaCJ50X8jo8+dr xE1GDq76piPsrJFp4udORMVFRQGSNBiTKoSrZQOtEa6wpvMthG+HubQng75Y2GEM LwwcklBVZ8DmXA5hcSGn8d5Uw/mhM1JtxM7VSoAxF+Q0UgiOx6IdqSvbVEMeHteQ JVxGgIh9zMej94WjiNOMG42BeSnh6Us= -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:04 2026 by rpki-client