$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa File: 7a19c355-b852-3b4c-a5c8-e814f196e80e.roa (raw, json) Hash identifier: TNyDOeJevHZV7gzThwAsKXcc9fQl8t46DC1LK6EDfV0= Subject key identifier: F7:56:7F:BD:38:B6:AA:99:0B:49:7E:2A:BB:81:DF:33:D7:49:F2:CC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D65153A825F9F4B1C1ED049F0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 108.166.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3a:82:5f:9f:4b:1c:1e:d0:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=833a006e-f107-436e-b923-5ac96a57eca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f8:f2:4d:92:a3:b3:f1:22:17:f1:ec:ab:4b: 19:ff:5c:d4:81:f0:18:c5:0b:b8:14:04:76:e8:62: fe:95:82:1e:06:20:f2:8b:75:b0:98:76:4e:99:3e: bc:61:67:23:62:7d:67:ba:b3:8e:79:f3:86:8c:e0: ff:3e:95:22:b2:75:41:49:61:de:0c:96:83:ae:1a: 19:a7:58:53:82:10:03:ee:78:28:80:3b:5f:5f:87: ba:f3:e7:fb:7f:9c:20:f4:02:da:38:24:7b:2d:b1: 55:e4:23:be:7e:64:2a:31:84:76:31:e7:7d:0c:58: f2:ee:88:97:b8:ad:68:67:c5:c1:d9:cc:b0:06:54: 91:20:d2:e5:e9:52:8a:94:6f:44:14:5b:ab:38:d5: d0:59:7e:6c:6f:6d:48:a0:85:e1:0e:4b:3e:19:3e: 9b:3d:c4:c4:fd:d0:cd:9d:ec:e8:94:54:50:e9:4c: e1:ca:ce:6e:20:a5:32:0f:7d:c9:3b:e9:c9:0a:49: 91:27:57:94:fe:8f:f9:e0:28:19:99:2f:27:e7:4a: fd:53:d4:b3:97:12:f3:0e:91:c5:8d:80:41:b8:4f: 44:2f:c0:f6:94:c2:08:b7:f1:ac:cd:e4:05:17:25: 10:c2:a5:05:8f:e9:1f:ad:3b:4c:bb:56:a1:b7:dd: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:56:7F:BD:38:B6:AA:99:0B:49:7E:2A:BB:81:DF:33:D7:49:F2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6f:0f:2f:48:0b:b4:4d:fc:0f:00:b5:46:30:9c:b1:1e:09: 28:ee:aa:02:48:cc:93:70:d7:2b:d2:57:bc:9c:ab:ff:a5:fb: 29:fa:99:7d:f9:86:68:b9:8d:a1:c5:3e:16:c8:45:78:fa:90: d8:25:88:93:20:4d:eb:43:a1:86:84:45:d0:0f:fe:82:48:e1: 71:7e:57:e8:28:3b:b9:14:20:fb:bc:8c:af:47:1b:26:17:a5: 70:c2:02:7e:68:ee:04:f6:95:93:95:49:5a:52:8e:0b:7e:ee: a3:8d:de:d6:7e:a0:c3:6d:03:6a:3a:9a:35:e9:97:1a:05:62: 5b:a6:a9:d2:05:d1:9d:c2:96:b5:d6:d9:ad:70:3b:73:d4:ff: c9:df:8b:e6:09:a9:d3:87:82:79:62:2d:10:75:21:61:94:7e: 4c:47:d0:00:4a:bb:44:58:40:63:c7:5b:89:ba:15:55:9d:48: 25:1f:cd:9e:e3:04:62:6b:95:06:d1:cd:03:0b:3d:d6:3f:15: b4:77:6d:49:33:ce:c9:f4:12:78:e4:d7:24:d5:ea:0b:9c:f8: bc:15:8c:e5:83:72:83:f0:79:f2:69:f8:6c:f9:1f:92:70:ef: d8:a0:22:66:c7:56:40:4b:26:af:35:aa:cd:db:0c:17:13:d4: 06:a7:2e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTqCX59LHB7QSfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ODMzYTAwNmUtZjEwNy00MzZlLWI5MjMtNWFjOTZhNTdlY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PjyTZKjs/EiF/Hsq0sZ/1zUgfAYxQu4FAR2 6GL+lYIeBiDyi3WwmHZOmT68YWcjYn1nurOOefOGjOD/PpUisnVBSWHeDJaDrhoZ p1hTghAD7ngogDtfX4e68+f7f5wg9ALaOCR7LbFV5CO+fmQqMYR2Med9DFjy7oiX uK1oZ8XB2cywBlSRINLl6VKKlG9EFFurONXQWX5sb21IoIXhDks+GT6bPcTE/dDN nezolFRQ6Uzhys5uIKUyD33JO+nJCkmRJ1eU/o/54CgZmS8n50r9U9SzlxLzDpHF jYBBuE9EL8D2lMIIt/GszeQFFyUQwqUFj+kfrTtMu1aht93PkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdWf704tqqZC0l+KruB3zPXSfLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2ExOWMzNTUtYjg1Mi0z YjRjLWE1YzgtZTgxNGYxOTZlODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhvDy9IC7RN/A8AtUYwnLEeCSjuqgJIzJNw1yvSV7ycq/+l+yn6mX35 hmi5jaHFPhbIRXj6kNgliJMgTetDoYaERdAP/oJI4XF+V+goO7kUIPu8jK9HGyYX pXDCAn5o7gT2lZOVSVpSjgt+7qON3tZ+oMNtA2o6mjXplxoFYlumqdIF0Z3ClrXW 2a1wO3PU/8nfi+YJqdOHgnliLRB1IWGUfkxH0ABKu0RYQGPHW4m6FVWdSCUfzZ7j BGJrlQbRzQMLPdY/FbR3bUkzzsn0Enjk1yTV6guc+LwVjOWDcoPwefJp+Gz5H5Jw 79igImbHVkBLJq81qs3bDBcT1AanLm4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:18 2026 by rpki-client