$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa File: af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa (raw, json) Hash identifier: gyH9yo527I91O7iAuxyoaoH88yQdLL+IrrQCdRZZzfA= Subject key identifier: 09:34:FA:C9:21:90:DB:2E:62:F1:46:A1:C1:16:AD:37:B2:EC:8B:8D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9106E0E7912C42C65551C220 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 108.178.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:e0:e7:91:2c:42:c6:55:51:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=296e7caa-5a84-4711-b490-776c22819187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:ca:cb:06:2c:59:ab:b2:fc:4c:98:a3:f8: ba:d5:74:a0:54:2f:5d:fa:d0:a8:cd:b9:49:1c:85: c5:ed:10:49:ba:1f:49:b5:c3:f9:ad:7a:25:1a:d4: 53:b5:e6:43:f2:ac:a5:c4:48:93:c9:c7:c3:9a:b2: fa:ea:48:5c:c9:af:3d:29:25:81:86:1e:32:10:69: c6:f3:75:7e:65:fa:fb:27:48:3c:d3:84:41:6b:1a: bf:b7:e5:01:1f:9d:dd:8d:12:bb:6c:53:7a:f4:87: 58:0e:71:9a:95:29:0b:e8:5a:90:e4:34:35:28:c2: 46:b6:2b:c2:b2:dc:50:1f:eb:08:56:39:ea:ef:57: c7:0d:1c:09:11:e0:62:ea:30:74:aa:61:c9:32:93: 63:af:99:92:34:d2:aa:76:dc:5f:c1:21:0e:04:d8: 9c:83:6a:fb:59:89:46:61:5f:cb:6f:14:1e:77:f1: 68:68:e8:ca:29:ec:ad:e9:82:55:93:84:08:87:b3: 51:72:ea:72:86:95:2f:1e:b1:91:e1:60:9f:b9:15: 65:b5:11:ba:38:d4:80:0f:cb:21:7b:04:d7:cb:fe: 80:61:a8:3f:f0:94:52:a3:08:fc:39:10:ad:94:af: 09:80:85:40:31:fe:64:c8:86:4d:25:e3:21:e3:f7: 98:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:FA:C9:21:90:DB:2E:62:F1:46:A1:C1:16:AD:37:B2:EC:8B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a0:9a:05:78:87:f6:5e:46:6a:6f:61:fc:f1:93:73:98:ce: 5e:f3:eb:5b:43:9e:74:3b:d9:4d:74:93:67:27:b1:27:c2:3c: 07:90:9f:fd:fa:26:b1:f1:65:be:16:c1:05:59:ef:5e:30:3f: 87:28:2a:8c:32:99:7d:b0:ac:49:24:da:d6:eb:03:a1:32:9b: 61:a7:71:bd:37:10:ef:ee:bd:06:44:55:d9:9d:32:a6:af:99: c5:59:7b:ed:64:ec:54:2d:b4:8c:5b:67:b7:67:cb:59:d7:df: 57:d1:bc:18:8e:b8:07:64:f3:9f:dc:f4:b2:c4:1b:8e:a5:76: 52:a8:f9:74:2f:ae:bf:eb:19:67:bb:71:3d:31:c2:0c:14:9e: 66:f2:61:ad:41:e9:43:1f:39:6d:65:60:d6:d8:60:e3:df:70: 4f:6e:b3:6f:3d:9f:c5:34:b7:1f:e6:3f:62:1c:5e:e9:7b:42: 4f:d3:34:e1:bc:20:6e:76:6c:0e:1c:f3:11:6e:08:23:09:24: 0e:6c:a1:49:00:ff:80:73:9a:c6:f5:ea:ce:b1:5a:6d:05:23: 69:72:ad:ab:99:93:eb:e9:bc:03:21:90:d2:3a:75:7a:38:00: 79:e3:9d:4e:89:7d:24:4d:cd:4b:ef:2e:bb:0c:6b:ce:c8:28: 3b:e6:52:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBuDnkSxCxlVRwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk Mjk2ZTdjYWEtNWE4NC00NzExLWI0OTAtNzc2YzIyODE5MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnafKywYsWauy/EyYo/i61XSgVC9d+tCozblJ HIXF7RBJuh9JtcP5rXolGtRTteZD8qylxEiTycfDmrL66khcya89KSWBhh4yEGnG 83V+Zfr7J0g804RBaxq/t+UBH53djRK7bFN69IdYDnGalSkL6FqQ5DQ1KMJGtivC stxQH+sIVjnq71fHDRwJEeBi6jB0qmHJMpNjr5mSNNKqdtxfwSEOBNicg2r7WYlG YV/LbxQed/FoaOjKKeyt6YJVk4QIh7NRcupyhpUvHrGR4WCfuRVltRG6ONSAD8sh ewTXy/6AYag/8JRSowj8ORCtlK8JgIVAMf5kyIZNJeMh4/eYZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk0+skhkNsuYvFGocEWrTey7IuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWY1MGIxYTAtYjc0OS0z NWUxLWFmMGEtMDNhNWU2MjAxZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCgmgV4h/ZeRmpvYfzxk3OYzl7z61tDnnQ72U10k2cnsSfCPAeQn/36 JrHxZb4WwQVZ714wP4coKowymX2wrEkk2tbrA6Eym2Gncb03EO/uvQZEVdmdMqav mcVZe+1k7FQttIxbZ7dny1nX31fRvBiOuAdk85/c9LLEG46ldlKo+XQvrr/rGWe7 cT0xwgwUnmbyYa1B6UMfOW1lYNbYYOPfcE9us289n8U0tx/mP2IcXul7Qk/TNOG8 IG52bA4c8xFuCCMJJA5soUkA/4Bzmsb16s6xWm0FI2lyrauZk+vpvAMhkNI6dXo4 AHnjnU6JfSRNzUvvLrsMa87IKDvmUks= -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:53 2026 by rpki-client