$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa File: aa2da581-41e1-31da-a819-33c8e5a40b7c.roa (raw, json) Hash identifier: J+d6Sc3SuBQnXvM29lXYbToKpGQUhgmEcv9kNy8R+kE= Subject key identifier: 30:A1:87:E0:5E:18:B4:66:DA:A4:9F:30:0E:19:CF:E7:86:B9:DB:0F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CF587958A058AEC687D2E7234 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 30036 IP address blocks: 107.167.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:95:8a:05:8a:ec:68:7d:2e:72:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=55a72128-0e09-4f4a-90b2-5ac32f9b45a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:48:fb:08:70:54:9b:36:6a:8c:2a:7a:69: af:68:d4:7d:5f:01:53:11:ad:b9:7e:5e:31:25:f8: e0:35:86:fc:06:84:74:c5:93:5b:2e:89:8f:af:39: 8e:b3:4c:65:a2:cc:f7:d5:6b:11:53:50:9d:3f:dd: dd:05:ac:32:66:20:67:d9:0a:2f:55:f3:d9:ee:1b: 49:71:c9:46:39:1b:4c:2b:fc:1b:c7:cb:4b:2f:16: a0:ea:08:7e:73:7e:b4:75:83:af:ef:4b:92:9f:08: ae:f5:90:d5:72:af:91:6a:85:de:de:d2:e0:68:62: ed:73:3a:e7:3d:cf:93:95:b3:93:5d:d6:9c:6e:83: 3e:27:26:46:3d:43:0c:66:cf:d0:6d:29:82:79:3b: 33:15:02:db:d3:14:0d:d2:c2:e8:8e:7d:4f:b6:c7: c7:17:02:6d:fc:69:2f:40:2b:98:bd:35:cb:d1:25: ac:16:f5:22:cd:03:d0:a1:bc:0a:b8:11:7b:2b:94: a2:97:3e:70:3e:0e:f3:f6:3e:22:9b:0f:ad:f4:1d: f2:8e:9f:56:58:99:44:59:ff:d5:d6:d7:eb:44:83: 67:5a:38:e5:0b:d5:e6:af:22:97:30:8c:3e:24:24: d6:06:08:9c:69:dc:2e:1b:28:bb:64:31:20:23:21: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:87:E0:5E:18:B4:66:DA:A4:9F:30:0E:19:CF:E7:86:B9:DB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c1:74:d0:5d:78:04:02:a8:71:ef:46:47:55:50:f4:20:c0: bc:b2:5a:6a:7a:d1:10:dc:2d:ec:72:9e:ec:ee:61:33:e8:06: ef:9a:85:c8:b2:23:6c:fd:10:f0:25:2f:f2:79:0c:62:6b:9e: e7:88:23:98:41:8e:b4:c8:54:48:6b:33:24:4b:4a:96:14:0e: 42:33:b4:54:1c:82:3d:53:b1:c0:f6:17:33:af:cf:a7:7e:26: d1:fa:d5:5a:0e:33:4f:4b:c0:84:4b:d2:43:53:9a:78:f4:2b: 2d:de:75:ca:a2:a7:13:9a:03:a7:38:d9:34:88:2c:af:7a:aa: a7:f4:a5:46:b6:38:b1:d1:e0:7c:36:28:ac:b9:ae:58:83:06: 9c:e4:35:cb:80:42:ab:0d:34:86:76:62:f2:d1:ee:35:6f:f3: c9:71:d0:9c:71:bc:8d:fa:51:2a:6b:9d:f3:51:e7:2c:c2:1a: e9:bf:91:18:36:61:d0:08:cb:b7:00:07:3f:2a:87:97:d8:66: c2:be:52:75:ff:0b:0d:f8:1d:a1:77:e9:fc:2a:00:75:5c:50: a8:21:ac:ec:e8:cb:0c:91:56:d7:57:7b:6b:5b:86:73:c2:c5: 17:f4:82:ab:2e:b2:b5:a5:61:17:1d:8d:08:3d:ea:3e:01:62: 60:db:ee:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5WKBYrsaH0ucjQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NTVhNzIxMjgtMGUwOS00ZjRhLTkwYjItNWFjMzJmOWI0NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTNI+whwVJs2aowqemmvaNR9XwFTEa25fl4x JfjgNYb8BoR0xZNbLomPrzmOs0xlosz31WsRU1CdP93dBawyZiBn2QovVfPZ7htJ cclGORtMK/wbx8tLLxag6gh+c360dYOv70uSnwiu9ZDVcq+RaoXe3tLgaGLtczrn Pc+TlbOTXdacboM+JyZGPUMMZs/QbSmCeTszFQLb0xQN0sLojn1PtsfHFwJt/Gkv QCuYvTXL0SWsFvUizQPQobwKuBF7K5Silz5wPg7z9j4imw+t9B3yjp9WWJlEWf/V 1tfrRINnWjjlC9XmryKXMIw+JCTWBgicadwuGyi7ZDEgIyGAlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDChh+BeGLRm2qSfMA4Zz+eGudsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEyZGE1ODEtNDFlMS0z MWRhLWE4MTktMzNjOGU1YTQwYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3BdNBdeAQCqHHvRkdVUPQgwLyyWmp60RDcLexynuzuYTPoBu+ahciy I2z9EPAlL/J5DGJrnueII5hBjrTIVEhrMyRLSpYUDkIztFQcgj1TscD2FzOvz6d+ JtH61VoOM09LwIRL0kNTmnj0Ky3edcqipxOaA6c42TSILK96qqf0pUa2OLHR4Hw2 KKy5rliDBpzkNcuAQqsNNIZ2YvLR7jVv88lx0JxxvI36USprnfNR5yzCGum/kRg2 YdAIy7cABz8qh5fYZsK+UnX/Cw34HaF36fwqAHVcUKghrOzoywyRVtdXe2tbhnPC xRf0gqsusrWlYRcdjQg96j4BYmDb7u8= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:17 2026 by rpki-client