$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa File: a3c5e420-4acc-338e-851f-64549b2af3d4.roa (raw, json) Hash identifier: eJ+76++VdGA28jrhiUc+RwXWCzTtDj+TjaCTHW7tyYA= Subject key identifier: AE:8C:B5:B1:F6:76:97:CD:88:B8:7F:74:CA:DA:19:6B:94:CA:F3:2D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D65153BBB33A8A94F7704D780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 108.166.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3b:bb:33:a8:a9:4f:77:04:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=d44b9647-5b2e-412e-9765-2a7550746f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:92:bd:14:7a:5e:a8:8e:45:b2:bb:93:d0: 09:96:d2:4f:9f:59:38:38:7d:18:00:19:6b:45:66: cb:60:c6:cb:f2:6e:81:14:0a:f9:b4:6a:13:e8:dd: 6f:b9:2c:b0:b9:3b:e4:27:b2:1b:9f:dc:72:14:c9: ab:61:31:c3:83:37:06:92:be:28:5b:0a:ac:06:4c: 3a:5d:60:69:ff:ad:2a:72:8d:de:27:d1:90:40:d1: 58:f4:9d:ab:7e:65:a0:d2:e8:22:98:ae:ef:65:6f: e8:e3:ae:09:ae:08:18:e6:18:d1:7e:30:5a:fa:5f: 4f:ad:66:11:0e:14:ff:69:89:6d:fd:93:c4:af:24: b4:86:bf:ed:7c:56:8c:ff:a7:b9:47:45:dc:ab:e1: ed:c4:02:fe:cc:72:83:ed:a1:c1:e2:60:3c:51:d9: c1:5d:a4:87:a4:50:90:d9:9b:ab:47:59:7c:75:ce: 2d:e8:2f:08:2f:32:61:b6:68:b9:d4:e4:15:a3:e8: 80:3c:20:d0:4c:22:a1:76:fe:59:03:4a:2a:cc:29: f5:1c:8b:de:c1:ca:81:53:6a:a2:38:ad:54:49:82: 8a:52:68:8a:00:9f:26:d5:b1:34:ab:3a:b9:6d:58: a5:cc:1c:e0:02:c2:ab:87:a4:df:87:54:5a:c8:66: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:B5:B1:F6:76:97:CD:88:B8:7F:74:CA:DA:19:6B:94:CA:F3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fa:79:c0:57:98:0d:74:61:9f:f3:0f:80:64:d7:7e:8c:6a: b9:0a:e1:b0:f8:0d:6b:72:a1:59:73:3d:47:ec:55:c8:3d:af: f7:6c:b8:e4:86:00:6e:9f:e2:fb:8f:98:e5:c4:48:cc:07:43: 04:d0:8e:1d:0f:b2:f6:f1:b5:06:55:3f:78:ca:d1:7b:eb:26: 17:9f:bd:2a:6b:8e:a9:7d:48:68:24:ae:ac:bc:93:5a:ba:2a: d8:90:d4:39:64:88:fa:fb:a2:da:df:d1:a1:ba:41:db:69:05: 71:b6:9f:86:2e:8b:49:2c:1b:39:e5:9c:ae:d9:c6:09:05:f5: d5:6e:88:df:9f:b6:b1:5a:e1:c4:68:96:65:4a:45:f4:e8:08: 09:0b:23:c7:92:55:aa:dc:45:84:51:17:0b:03:a1:fc:42:27: ff:c7:7b:88:cb:39:59:1b:ba:3d:2e:2c:4c:6b:75:20:8a:94: 94:d4:4d:a4:d3:b8:f3:28:db:e8:d6:4d:af:0b:fd:56:bb:d1: c9:f8:be:e7:b5:11:a0:2a:b5:72:6d:1e:07:f2:03:27:cc:43: 1a:3e:d8:5a:44:93:31:b2:6c:c6:1c:2a:73:b3:ba:2e:aa:28: 72:30:c3:dc:8f:c4:74:f1:84:72:11:74:db:44:e4:ef:e0:94: 69:3e:34:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTu7M6ipT3cE14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZDQ0Yjk2NDctNWIyZS00MTJlLTk3NjUtMmE3NTUwNzQ2ZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDiSvRR6XqiORbK7k9AJltJPn1k4OH0YABlr RWbLYMbL8m6BFAr5tGoT6N1vuSywuTvkJ7Ibn9xyFMmrYTHDgzcGkr4oWwqsBkw6 XWBp/60qco3eJ9GQQNFY9J2rfmWg0ugimK7vZW/o464JrggY5hjRfjBa+l9PrWYR DhT/aYlt/ZPEryS0hr/tfFaM/6e5R0Xcq+HtxAL+zHKD7aHB4mA8UdnBXaSHpFCQ 2ZurR1l8dc4t6C8ILzJhtmi51OQVo+iAPCDQTCKhdv5ZA0oqzCn1HIvewcqBU2qi OK1USYKKUmiKAJ8m1bE0qzq5bVilzBzgAsKrh6Tfh1RayGZ9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6MtbH2dpfNiLh/dMraGWuUyvMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNjNWU0MjAtNGFjYy0z MzhlLTg1MWYtNjQ1NDliMmFmM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT6ecBXmA10YZ/zD4Bk136MarkK4bD4DWtyoVlzPUfsVcg9r/dsuOSG AG6f4vuPmOXESMwHQwTQjh0PsvbxtQZVP3jK0XvrJhefvSprjql9SGgkrqy8k1q6 KtiQ1DlkiPr7otrf0aG6QdtpBXG2n4Yui0ksGznlnK7ZxgkF9dVuiN+ftrFa4cRo lmVKRfToCAkLI8eSVarcRYRRFwsDofxCJ//He4jLOVkbuj0uLExrdSCKlJTUTaTT uPMo2+jWTa8L/Va70cn4vue1EaAqtXJtHgfyAyfMQxo+2FpEkzGybMYcKnOzui6q KHIww9yPxHTxhHIRdNtE5O/glGk+NAQ= -----END CERTIFICATE-----Generated at Sat Apr 18 01:42:12 2026 by rpki-client