$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa File: a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa (raw, json) Hash identifier: CfsZ/k9Lki4pi5G0midYeDw+lS6+Ej311GQFwIEQkCM= Subject key identifier: 4B:F3:E5:C5:C0:5A:7B:90:70:EA:B2:60:E5:6C:54:2E:2E:8E:EC:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C847706FB6E4A26BB63E45C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 107.167.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:06:fb:6e:4a:26:bb:63:e4:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=925a3920-8511-4543-8dbe-7c0ffacfae9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:f7:1a:48:f6:b6:6c:c2:c8:3b:08:66:87: 15:4d:cc:ad:68:b8:d3:e8:04:c9:8d:97:ee:e3:4c: 94:ad:f2:5a:15:9b:b2:74:31:67:41:dd:ea:72:8b: b1:c0:31:9e:ee:01:e1:26:99:0a:bc:db:50:85:5e: 48:c3:e5:3c:52:1e:ba:e7:c9:8c:cb:02:17:4e:47: 4c:bd:73:c7:4e:e5:51:75:5f:2b:a7:0d:96:8f:20: 06:36:e4:e5:dc:b7:0b:30:79:92:62:52:37:26:5c: 67:b4:5b:54:9d:31:0c:06:f9:a8:3f:da:f2:c0:87: ed:55:be:95:ec:10:39:43:10:d1:d9:c1:64:9e:eb: 0b:71:80:4d:a0:27:d3:90:b2:28:10:f7:9b:f8:b4: 62:90:b5:51:11:00:29:91:bb:a9:03:65:f6:0b:fb: 9f:83:7a:d3:1d:6d:00:9b:55:52:3f:24:a8:e8:cf: 10:f2:c8:47:14:58:01:2f:bc:6b:fe:10:0b:d9:a0: 55:29:cf:d1:ae:0c:f6:96:87:5a:b5:06:d9:63:8b: 20:bd:a9:e2:e9:b5:da:e6:8c:d5:c7:5d:68:7e:9b: a1:ce:6f:42:cc:80:4a:11:d5:1b:6c:a8:f2:67:9a: ff:be:e1:76:6e:5d:88:f1:74:36:a6:d2:e3:bf:9d: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F3:E5:C5:C0:5A:7B:90:70:EA:B2:60:E5:6C:54:2E:2E:8E:EC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:38:b3:e4:42:74:2e:7a:82:62:15:fe:33:3a:85:0a:13:4f: 92:bc:9c:11:1d:52:0f:37:4a:ec:e6:b4:7b:03:a7:3a:ab:ef: 01:34:31:65:9c:01:83:61:54:f0:80:ba:2f:1b:aa:69:f9:0f: 96:b6:7a:29:81:17:1c:b5:85:13:27:0e:30:9f:b6:f6:49:bf: 8a:ef:50:5a:5b:da:9d:95:63:2a:c7:e1:7d:d7:3c:cd:e2:4b: 74:b8:ac:1b:63:69:e0:09:94:4a:1c:18:81:27:aa:73:a9:f9: bb:32:37:e6:42:ae:d3:08:b8:b6:e4:9f:16:79:4b:ce:a0:ff: d0:01:fa:c7:ec:1d:f6:1f:9b:30:df:2d:a5:d9:6f:1e:ba:17: b7:22:95:cc:c9:bb:05:c7:34:24:0b:99:fe:7f:cc:24:42:54: 75:3e:8b:d0:75:55:b9:3d:08:c5:f6:28:1d:0b:b4:cd:1e:da: 2b:d4:67:c9:ee:21:d3:0f:7a:b7:15:5a:ba:c4:43:ea:0d:3f: e2:ac:33:66:63:f7:f1:dd:00:f9:26:3f:c5:c2:f5:df:06:6c: ee:a6:af:48:54:66:5e:a8:9a:b8:ad:11:77:f0:c6:d3:c5:7f: b8:a4:0d:d6:8b:3f:c4:76:05:ee:51:e0:6e:45:99:b1:03:ea: d2:9e:ef:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwb7bkomu2PkXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk OTI1YTM5MjAtODUxMS00NTQzLThkYmUtN2MwZmZhY2ZhZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzX3Gkj2tmzCyDsIZocVTcytaLjT6ATJjZfu 40yUrfJaFZuydDFnQd3qcouxwDGe7gHhJpkKvNtQhV5Iw+U8Uh6658mMywIXTkdM vXPHTuVRdV8rpw2WjyAGNuTl3LcLMHmSYlI3JlxntFtUnTEMBvmoP9rywIftVb6V 7BA5QxDR2cFknusLcYBNoCfTkLIoEPeb+LRikLVREQApkbupA2X2C/ufg3rTHW0A m1VSPySo6M8Q8shHFFgBL7xr/hAL2aBVKc/Rrgz2lodatQbZY4sgvani6bXa5ozV x11ofpuhzm9CzIBKEdUbbKjyZ5r/vuF2bl2I8XQ2ptLjv52i8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvz5cXAWnuQcOqyYOVsVC4ujuwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTU1OWJhZDItYWJmMC0z ZGU0LWI1Y2QtYTI2YjRkODZkYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU4s+RCdC56gmIV/jM6hQoTT5K8nBEdUg83SuzmtHsDpzqr7wE0MWWc AYNhVPCAui8bqmn5D5a2eimBFxy1hRMnDjCftvZJv4rvUFpb2p2VYyrH4X3XPM3i S3S4rBtjaeAJlEocGIEnqnOp+bsyN+ZCrtMIuLbknxZ5S86g/9AB+sfsHfYfmzDf LaXZbx66F7cilczJuwXHNCQLmf5/zCRCVHU+i9B1Vbk9CMX2KB0LtM0e2ivUZ8nu IdMPercVWrrEQ+oNP+KsM2Zj9/HdAPkmP8XC9d8GbO6mr0hUZl6omritEXfwxtPF f7ikDdaLP8R2Be5R4G5FmbED6tKe790= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:52 2026 by rpki-client