$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa File: 8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa (raw, json) Hash identifier: ENJHHPyHEtgdKIiNHB8KaIquMIP2zfUdHCesq3Eh5KQ= Subject key identifier: 8E:2B:7F:57:68:E7:3A:5D:47:29:62:73:6E:A3:19:2D:09:73:2E:06 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C847703955745E623D4F91600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:03:95:57:45:e6:23:d4:f9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=ace74841-1752-4dd0-9ffd-745a01db5492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:5f:de:f1:f0:8f:a6:38:42:2a:fe:b1:c7: 56:ea:6e:18:53:ce:76:33:10:90:8f:3e:ec:46:d8: 69:7c:57:4a:a4:0f:c1:9a:f5:ea:47:36:11:9a:86: e1:f5:d1:18:6a:2a:a4:f0:1a:42:92:70:40:b6:41: f0:52:c3:47:07:0f:b9:67:b2:ff:2a:d1:27:22:4b: 89:cf:b5:ab:ea:fb:c5:36:69:de:c7:28:5a:ba:e1: 9e:0b:ed:5f:43:42:21:73:ac:1e:26:f2:e2:ea:a7: 06:94:bc:41:d7:75:8e:09:41:20:93:74:98:f1:9a: fe:51:9b:f4:27:f4:cd:59:ec:c3:3d:72:a1:3c:84: e4:34:4f:7f:9a:8c:7a:ed:0b:46:af:18:c7:96:be: 1d:a1:75:98:c4:2f:21:1b:b1:3e:83:12:61:7c:ab: 3c:22:3b:79:30:01:39:43:d6:0e:e9:56:dc:87:65: 56:9a:64:c4:0d:e3:f2:99:9e:9b:bd:fa:54:de:ab: 14:fc:a4:32:36:5b:ca:8b:76:3c:89:5f:05:84:df: 3a:94:75:ea:e2:63:55:b6:ac:c2:f0:34:c1:91:64: 5e:fb:08:67:c2:73:2f:3f:d0:66:4c:91:ac:d9:9f: c5:43:84:ff:6d:be:fd:b5:15:36:44:a0:f2:30:dd: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2B:7F:57:68:E7:3A:5D:47:29:62:73:6E:A3:19:2D:09:73:2E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8de46e9d-7d52-371b-8f10-948f69cfb1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3b:01:85:32:47:4d:82:76:c7:a8:04:7e:ea:54:d3:20:7f: 87:a1:bf:9a:db:8b:d3:60:10:71:fd:89:96:00:3c:db:fc:92: 29:b1:ad:11:b8:93:3e:39:1a:73:9d:6c:15:0d:91:ad:66:9a: 5c:07:a7:bb:eb:f4:ab:9b:4c:de:3f:10:e8:8e:c9:2e:6f:7e: 5a:4e:cc:b2:c4:61:a2:7c:5f:d3:41:c5:df:38:dd:96:d9:47: c2:fa:eb:11:9a:04:d2:26:ea:dc:0d:33:54:b7:08:fd:70:1d: 62:a1:cd:8e:f9:87:cf:28:1d:04:73:b4:5a:e7:9b:fa:95:cc: ba:ee:9d:2e:ed:3d:4f:c0:e7:15:0e:ee:c5:25:55:dc:70:84: 1b:7d:27:e6:ca:24:f3:98:c9:d6:47:54:c0:b8:a3:ee:24:4d: b4:e2:df:94:0a:9c:c1:4b:d0:fe:d9:51:d1:66:6a:a8:8c:34: d4:0b:7e:fb:b3:79:e5:b1:55:22:4d:62:55:e2:7e:47:85:50: df:8a:51:e3:d7:67:4e:11:3f:0a:1b:24:db:ed:b0:50:0d:2b: 42:35:2f:11:83:1b:d7:cf:7b:f3:33:c8:87:f2:34:56:32:0c: 8a:5a:0e:f0:8d:44:86:17:da:58:97:d2:6c:c0:26:cf:4e:32: 4d:19:ce:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwOVV0XmI9T5FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YWNlNzQ4NDEtMTc1Mi00ZGQwLTlmZmQtNzQ1YTAxZGI1NDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb5f3vHwj6Y4Qir+scdW6m4YU852MxCQjz7s RthpfFdKpA/BmvXqRzYRmobh9dEYaiqk8BpCknBAtkHwUsNHBw+5Z7L/KtEnIkuJ z7Wr6vvFNmnexyhauuGeC+1fQ0Ihc6weJvLi6qcGlLxB13WOCUEgk3SY8Zr+UZv0 J/TNWezDPXKhPITkNE9/mox67QtGrxjHlr4doXWYxC8hG7E+gxJhfKs8Ijt5MAE5 Q9YO6Vbch2VWmmTEDePymZ6bvfpU3qsU/KQyNlvKi3Y8iV8FhN86lHXq4mNVtqzC 8DTBkWRe+whnwnMvP9BmTJGs2Z/FQ4T/bb79tRU2RKDyMN1ZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4rf1do5zpdRylic26jGS0Jcy4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGRlNDZlOWQtN2Q1Mi0z NzFiLThmMTAtOTQ4ZjY5Y2ZiMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk7AYUyR02CdseoBH7qVNMgf4ehv5rbi9NgEHH9iZYAPNv8kimxrRG4 kz45GnOdbBUNka1mmlwHp7vr9KubTN4/EOiOyS5vflpOzLLEYaJ8X9NBxd843ZbZ R8L66xGaBNIm6twNM1S3CP1wHWKhzY75h88oHQRztFrnm/qVzLrunS7tPU/A5xUO 7sUlVdxwhBt9J+bKJPOYydZHVMC4o+4kTbTi35QKnMFL0P7ZUdFmaqiMNNQLfvuz eeWxVSJNYlXifkeFUN+KUePXZ04RPwobJNvtsFANK0I1LxGDG9fPe/MzyIfyNFYy DIpaDvCNRIYX2liX0mzAJs9OMk0Zzps= -----END CERTIFICATE-----Generated at Sun Mar 1 20:54:26 2026 by rpki-client