$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa File: ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa (raw, json) Hash identifier: /CY/P1pOIbK/V5mbBTQbLknoloGwGm07aMo3HH0CzUI= Subject key identifier: EF:51:0C:1F:31:91:D2:B6:C8:A1:6C:CC:46:AB:15:C4:E2:92:58:1E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9D96E67F82F3A9D0B5E15600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa Signing time: Fri 23 Jan 2026 02:00:30 +0000 ROA not before: Fri 23 Jan 2026 02:00:30 +0000 ROA not after: Thu 23 Apr 2026 01:00:30 +0000 asID: 30036 IP address blocks: 108.161.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9d:96:e6:7f:82:f3:a9:d0:b5:e1:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 23 02:00:30 2026 GMT Not After : Apr 23 01:00:30 2026 GMT Subject: CN=8e7462fc-e735-49c8-8520-113f03c3c4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e0:df:ce:73:7d:1f:c3:5b:12:64:99:0b:af: ac:4e:ea:c6:17:e0:3a:08:fa:49:ad:7a:0b:55:12: f7:15:a8:34:c2:a3:7a:83:c5:ab:2c:6e:be:c1:03: 74:9a:45:34:29:d3:4b:27:d5:af:24:b5:0c:82:94: 27:4e:3f:50:c9:79:16:4b:e1:6a:8e:0e:ff:36:d5: a9:a4:63:21:65:31:fc:25:c8:c9:ed:b8:3c:1b:77: af:af:01:2b:ce:ed:70:6f:3e:7a:9f:da:d4:6f:cf: 77:de:0f:c3:9a:ae:e6:aa:41:c4:e9:bf:66:b7:bf: 56:5c:00:22:aa:4d:41:9a:53:fb:97:b2:51:c3:ba: bc:d3:5e:00:cc:5f:c2:a4:11:d6:02:7b:99:39:cb: 28:a2:1a:42:dd:a4:f2:cb:dd:e5:1e:65:5f:eb:f2: 83:6a:d5:e4:3d:a8:87:23:b4:96:1b:ec:e6:a1:28: b2:27:e9:90:6d:e9:51:46:92:de:81:c9:ef:27:84: 5a:07:00:41:cc:fb:87:b7:47:e3:af:e4:70:f6:23: ba:f4:fa:05:98:30:2f:e7:5c:ca:70:d2:79:fe:df: b5:ac:e0:15:78:94:4a:c5:f5:c7:0f:dd:1b:c6:9b: 67:e1:c2:ad:c8:8c:b8:c4:6e:af:5c:f8:38:6f:ca: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:51:0C:1F:31:91:D2:B6:C8:A1:6C:CC:46:AB:15:C4:E2:92:58:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:84:54:3c:c1:ed:31:ed:32:d5:91:a0:c0:5d:82:31:03:bb: 0f:32:d4:8c:16:c9:be:b4:a9:ec:ff:17:c0:ab:d4:ae:bb:e6: 70:3a:46:0c:ec:7f:20:64:b9:2c:1e:db:7c:c9:7c:1a:b1:1f: 8e:14:4e:07:b8:79:f6:8d:ba:78:fe:29:6b:3b:91:4f:5a:3c: 22:eb:df:8f:10:6e:ef:0d:f4:06:d6:be:2a:c0:8f:94:4f:69: 1b:65:e3:91:38:19:9c:b9:d9:f3:54:36:93:0a:73:be:d5:4c: 4b:2a:cf:a3:05:ce:d6:68:dd:b9:63:f1:cb:55:25:9d:9d:2f: ac:ff:3e:76:89:49:dd:04:78:f8:77:f4:48:79:8e:77:70:d7: 72:1a:8b:c8:2c:6c:84:37:f5:05:9f:0d:95:1c:d0:e1:3a:f6: d4:1e:b9:65:ad:da:f7:02:74:34:d7:c4:48:b7:54:e3:6b:d0: 23:f3:78:d8:e2:1c:3e:71:c3:f5:0f:46:c7:51:b7:cf:af:72: ed:28:af:cd:df:c9:e2:3b:a8:62:42:89:73:59:45:20:59:fb: 02:f0:91:00:bc:46:41:e9:00:61:26:1c:b3:dc:f4:64:da:3b: da:22:51:39:8f:cc:da:63:23:4d:ab:27:34:c6:d6:9a:a2:4e: fe:0a:2e:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEydluZ/gvOp0LXhVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMzAyMDAzMFoXDTI2MDQyMzAxMDAzMFowLzEtMCsGA1UEAxMk OGU3NDYyZmMtZTczNS00OWM4LTg1MjAtMTEzZjAzYzNjNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgODfznN9H8NbEmSZC6+sTurGF+A6CPpJrXoL VRL3Fag0wqN6g8WrLG6+wQN0mkU0KdNLJ9WvJLUMgpQnTj9QyXkWS+Fqjg7/NtWp pGMhZTH8JcjJ7bg8G3evrwErzu1wbz56n9rUb8933g/Dmq7mqkHE6b9mt79WXAAi qk1BmlP7l7JRw7q8014AzF/CpBHWAnuZOcsoohpC3aTyy93lHmVf6/KDatXkPaiH I7SWG+zmoSiyJ+mQbelRRpLegcnvJ4RaBwBBzPuHt0fjr+Rw9iO69PoFmDAv51zK cNJ5/t+1rOAVeJRKxfXHD90bxptn4cKtyIy4xG6vXPg4b8r+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9RDB8xkdK2yKFszEarFcTiklgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWIyMGU2NmEtNWUyNy0z YWQ2LWI2ZjctOGM5NmE1OTUwMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqEVDzB7THtMtWRoMBdgjEDuw8y1IwWyb60qez/F8Cr1K675nA6Rgzs fyBkuSwe23zJfBqxH44UTge4efaNunj+KWs7kU9aPCLr348Qbu8N9AbWvirAj5RP aRtl45E4GZy52fNUNpMKc77VTEsqz6MFztZo3blj8ctVJZ2dL6z/PnaJSd0EePh3 9Eh5jndw13Iai8gsbIQ39QWfDZUc0OE69tQeuWWt2vcCdDTXxEi3VONr0CPzeNji HD5xw/UPRsdRt8+vcu0or83fyeI7qGJCiXNZRSBZ+wLwkQC8RkHpAGEmHLPc9GTa O9oiUTmPzNpjI02rJzTG1pqiTv4KLqc= -----END CERTIFICATE-----Generated at Mon Mar 2 08:07:36 2026 by rpki-client