$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa File: 76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa (raw, json) Hash identifier: pKX4Q+dHJ02ydbUlG5AheXDivA1lv2w25tnje0jVK2s= Subject key identifier: 48:EC:CA:00:B2:DE:41:29:8D:55:BE:AD:6A:CC:D7:D0:A8:F4:AF:23 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8476E181527B3D542F679A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:e1:81:52:7b:3d:54:2f:67:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=2bea591f-5c0a-468c-9f9f-a84be88946b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:f3:0c:b4:cd:0d:e8:80:90:33:6e:99:14: d1:3e:d3:e9:fa:85:3a:8c:66:53:dd:c8:ed:95:b7: a3:cb:77:4a:1c:63:b4:55:6d:32:a6:9b:77:87:cb: e2:08:5e:4b:5f:80:fc:46:82:85:24:a4:18:7c:fb: 2f:54:c2:c0:2d:3f:c0:9c:0e:76:c3:25:36:bb:c3: 76:41:16:3c:84:54:4e:0b:4e:f0:04:b7:b2:62:da: 44:b3:c4:70:28:9e:7b:fb:a0:df:7e:c6:16:f1:73: 9d:b4:12:80:5e:a1:d1:8b:14:46:15:70:23:4d:78: e6:da:f0:5c:29:d7:85:2b:db:bf:ae:46:8f:6e:09: 9e:05:6f:12:49:3d:86:a7:c2:71:d7:3d:c1:ca:0a: 2a:af:7f:4b:b8:6b:58:aa:02:fa:04:f9:bb:15:25: 96:ca:4c:62:91:1f:13:0b:04:7a:ac:8c:81:fa:2b: 0e:96:86:e1:24:9a:96:17:20:39:53:0a:68:3e:9a: e7:dc:47:eb:b0:5c:8b:0e:da:39:cd:6b:8e:08:ec: 61:96:96:ad:db:53:e2:12:28:4e:7c:a3:c7:b2:24: fc:0a:f1:73:09:8c:88:26:fd:17:1e:f3:d9:b1:4c: be:72:a8:2a:82:09:21:11:47:39:5b:da:fa:d1:3f: 67:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EC:CA:00:B2:DE:41:29:8D:55:BE:AD:6A:CC:D7:D0:A8:F4:AF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a3:e4:79:47:10:c9:a4:bf:4e:d2:ab:96:91:87:99:ff:25: 47:db:04:57:88:ba:3c:b9:4b:b6:23:f5:20:d7:ec:9e:a5:59: 36:c3:8d:f4:c6:50:e3:5a:3b:1b:0c:6f:81:87:ec:e3:9b:e9: fe:c4:13:55:ae:66:95:29:46:05:db:c8:9b:a9:f2:ac:80:64: e6:6f:4a:59:d9:11:d9:6d:8b:e6:76:81:30:97:96:6f:16:8a: 2e:3d:57:86:92:a1:6f:4a:a0:93:71:aa:45:44:08:59:e3:4d: 1c:74:35:4c:07:b2:2a:a0:22:c1:c5:d0:6f:7e:37:95:11:0d: e3:80:cb:8b:75:d7:91:20:e2:d8:e8:32:45:78:5e:e5:4b:08: 76:ae:7a:c5:b2:72:3b:5e:3a:b3:e2:06:e6:c8:99:3f:83:d2: 65:5c:64:2e:05:85:e4:a3:17:ee:9a:d1:4c:67:8e:8f:3f:c6: 93:e9:67:f2:34:52:4f:55:f3:08:6a:f1:79:6a:9e:0e:af:47: 40:26:25:bd:fa:e9:46:55:3f:0b:fc:d9:ed:80:1c:86:fd:d3: 09:fc:02:54:78:fa:65:ff:61:39:17:cb:93:10:45:65:26:38: 8e:6c:15:07:cc:6b:9a:dc:54:a1:10:1c:b8:d2:0b:ea:72:e4: dd:6a:40:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEduGBUns9VC9nmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk MmJlYTU5MWYtNWMwYS00NjhjLTlmOWYtYTg0YmU4ODk0NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbvzDLTNDeiAkDNumRTRPtPp+oU6jGZT3cjt lbejy3dKHGO0VW0yppt3h8viCF5LX4D8RoKFJKQYfPsvVMLALT/AnA52wyU2u8N2 QRY8hFROC07wBLeyYtpEs8RwKJ57+6DffsYW8XOdtBKAXqHRixRGFXAjTXjm2vBc KdeFK9u/rkaPbgmeBW8SST2Gp8Jx1z3Bygoqr39LuGtYqgL6BPm7FSWWykxikR8T CwR6rIyB+isOlobhJJqWFyA5UwpoPprn3EfrsFyLDto5zWuOCOxhlpat21PiEihO fKPHsiT8CvFzCYyIJv0XHvPZsUy+cqgqggkhEUc5W9r60T9nwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjsygCy3kEpjVW+rWrM19Co9K8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzZkYTc1OGEtMTRhNi0z ZThmLWEzNDgtN2UwOGFlZTdlYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGj5HlHEMmkv07Sq5aRh5n/JUfbBFeIujy5S7Yj9SDX7J6lWTbDjfTG UONaOxsMb4GH7OOb6f7EE1WuZpUpRgXbyJup8qyAZOZvSlnZEdlti+Z2gTCXlm8W ii49V4aSoW9KoJNxqkVECFnjTRx0NUwHsiqgIsHF0G9+N5URDeOAy4t115Eg4tjo MkV4XuVLCHauesWycjteOrPiBubImT+D0mVcZC4FheSjF+6a0Uxnjo8/xpPpZ/I0 Uk9V8whq8Xlqng6vR0AmJb366UZVPwv82e2AHIb90wn8AlR4+mX/YTkXy5MQRWUm OI5sFQfMa5rcVKEQHLjSC+py5N1qQEc= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:13 2026 by rpki-client