$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa File: 7a19c355-b852-3b4c-a5c8-e814f196e80e.roa (raw, json) Hash identifier: jJb3MDaMYCVveak+QfcVDSqrxrhwmE9g9squHP7TKV4= Subject key identifier: 90:B1:9E:A8:C6:70:66:9C:E2:E7:87:B2:94:92:0E:90:63:06:28:01 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C84770289067534C8A069B600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:02:89:06:75:34:c8:a0:69:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=c45b0940-714f-48a4-8ac8-a4c7f7260505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f3:15:fc:88:21:46:56:c1:c5:0f:6d:dc:0d: a8:e9:8c:86:76:e0:b7:f1:ef:51:04:42:8c:d5:32: 96:29:72:31:a5:d3:7c:68:38:09:86:65:08:de:e0: 68:94:cd:dd:9d:6a:79:4b:df:61:6b:62:58:b8:de: 76:0a:5e:66:31:30:ec:64:c4:57:c9:23:14:6c:63: fa:c8:7e:35:61:fb:ff:49:6a:26:49:93:96:04:bd: c2:85:fd:fb:f1:9d:7e:b0:52:85:e3:12:16:ef:6c: 23:6d:dd:ae:50:5e:49:1c:e8:dc:29:fd:86:0f:b6: 57:ac:1d:07:bc:e3:dc:2d:4e:52:0f:8f:20:f1:de: 64:4a:7e:07:30:28:84:fc:f8:dc:79:37:cc:c9:24: 20:b3:71:02:5c:c9:8c:0e:20:02:54:c5:46:cf:ff: a1:81:a0:9a:67:69:59:d0:30:7b:59:ed:23:14:c2: e1:0d:13:a1:73:92:d8:a4:6f:81:1e:15:23:bb:ea: 3e:24:17:bf:5e:d5:78:0a:75:44:78:0e:34:b3:95: 49:11:6d:a9:6c:72:fa:91:19:94:e9:3e:f1:66:b6: 11:2d:7d:2d:5c:7b:8b:1e:da:30:df:8f:17:6a:07: 59:85:d1:c1:7b:ca:27:70:96:d2:ec:5f:9e:74:4f: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:9E:A8:C6:70:66:9C:E2:E7:87:B2:94:92:0E:90:63:06:28:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0c:63:a8:03:33:09:46:bf:0c:74:51:a3:17:33:2b:64:04: 10:e2:23:c3:09:84:22:15:92:ef:c1:85:66:83:bd:8f:08:f0: c6:74:89:ea:85:fc:8e:76:dc:18:bd:1b:50:e9:5e:bf:ba:c3: 69:06:d9:35:9d:66:f2:71:7e:c5:8a:c0:3b:03:b9:a2:3e:42: 82:76:54:4e:53:35:24:78:79:2f:21:ea:a7:8c:13:84:e0:18: 34:7c:a0:bc:43:26:25:31:94:6b:6c:c3:dd:9d:b6:38:73:97: ac:22:de:66:28:a3:10:ca:ba:5e:ec:b2:52:4e:a8:a2:5b:84: 3c:c2:34:d8:a5:5d:b2:17:84:62:fe:11:00:2a:3a:22:5e:f8: e7:c4:10:09:01:a4:54:90:44:d5:1e:6f:a7:d1:40:21:e7:82: 5e:51:62:4e:4e:26:a1:0e:c8:fc:bf:6d:8f:4b:2c:74:0a:c4: 6d:de:e2:6d:5f:6a:24:e6:89:81:45:c5:72:f1:c5:19:95:79: 7d:6e:13:9f:1e:16:40:5e:6a:fd:0b:02:42:74:0d:d5:76:55: ff:bd:56:2f:d0:2b:8d:90:f5:8b:de:14:5e:d0:6a:6b:55:d9: 4e:ab:79:b7:52:11:04:b3:69:53:95:1a:1d:84:29:19:d2:44: 43:8f:f6:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwKJBnU0yKBptgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YzQ1YjA5NDAtNzE0Zi00OGE0LThhYzgtYTRjN2Y3MjYwNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvMV/IghRlbBxQ9t3A2o6YyGduC38e9RBEKM 1TKWKXIxpdN8aDgJhmUI3uBolM3dnWp5S99ha2JYuN52Cl5mMTDsZMRXySMUbGP6 yH41Yfv/SWomSZOWBL3Chf378Z1+sFKF4xIW72wjbd2uUF5JHOjcKf2GD7ZXrB0H vOPcLU5SD48g8d5kSn4HMCiE/PjceTfMySQgs3ECXMmMDiACVMVGz/+hgaCaZ2lZ 0DB7We0jFMLhDROhc5LYpG+BHhUju+o+JBe/XtV4CnVEeA40s5VJEW2pbHL6kRmU 6T7xZrYRLX0tXHuLHtow348XagdZhdHBe8oncJbS7F+edE9OmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCxnqjGcGac4ueHspSSDpBjBigBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2ExOWMzNTUtYjg1Mi0z YjRjLWE1YzgtZTgxNGYxOTZlODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcMY6gDMwlGvwx0UaMXMytkBBDiI8MJhCIVku/BhWaDvY8I8MZ0ieqF /I523Bi9G1DpXr+6w2kG2TWdZvJxfsWKwDsDuaI+QoJ2VE5TNSR4eS8h6qeME4Tg GDR8oLxDJiUxlGtsw92dtjhzl6wi3mYooxDKul7sslJOqKJbhDzCNNilXbIXhGL+ EQAqOiJe+OfEEAkBpFSQRNUeb6fRQCHngl5RYk5OJqEOyPy/bY9LLHQKxG3e4m1f aiTmiYFFxXLxxRmVeX1uE58eFkBeav0LAkJ0DdV2Vf+9Vi/QK42Q9YveFF7QamtV 2U6rebdSEQSzaVOVGh2EKRnSREOP9rk= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:29 2026 by rpki-client