$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa File: af654061-1034-3ea0-91ea-d6d38a6e397c.roa (raw, json) Hash identifier: F8+f4RzKJ7adtIYM6qwCkjAqEiS7AZ/wO8UUp96sd+I= Subject key identifier: C2:A3:F6:BB:91:7D:2A:84:56:26:42:B2:9F:4E:35:19:AA:77:DA:59 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C910709D4407FAB3875401280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 108.178.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:07:09:d4:40:7f:ab:38:75:40:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=0b44ecbe-d87d-40a9-a15c-53c5ac6b9736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:02:5e:cb:ae:39:e4:e6:6e:a3:ab:d9:6c: 74:48:ee:02:d0:3a:ad:91:66:a0:e4:48:f4:66:31: b2:c4:d2:aa:63:57:fb:6b:6b:ac:98:60:c3:29:f7: 1f:b1:c2:e4:02:86:b2:04:ec:0c:1a:fd:64:c0:c3: ec:95:b3:95:21:a8:8e:22:79:1d:cb:75:05:0a:bc: 21:f0:68:ea:c2:20:7f:42:60:87:1e:21:6f:c8:67: 0e:bb:ca:8d:77:e2:91:13:81:3d:34:f3:ab:3b:8a: e3:87:e2:57:a8:09:c1:84:bf:c5:8b:2e:0c:c0:6c: 71:40:91:62:53:f3:18:4f:1e:e7:a3:fa:79:89:19: f5:43:0d:77:1f:1b:b7:96:cc:05:db:34:73:04:c1: df:fb:4a:9e:45:44:18:84:a9:32:fb:82:e3:2d:b9: af:fe:ab:d9:42:4f:41:ac:7e:6d:c5:bc:44:14:c5: 61:82:97:3b:17:34:d3:e7:7e:11:74:3f:6d:a0:f5: e7:0e:0e:e0:26:5c:03:85:1d:35:32:c6:2a:74:3b: fd:b2:fd:2f:45:97:f7:ef:f4:8a:5f:7a:a4:66:51: c9:20:11:79:5b:09:22:2d:7c:a6:e3:37:0d:92:be: 60:c9:14:5d:14:fb:36:8b:74:d4:2b:fa:77:43:68: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:F6:BB:91:7D:2A:84:56:26:42:B2:9F:4E:35:19:AA:77:DA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:35:d3:82:2e:35:46:60:15:01:a0:14:f8:4e:62:c2:4a:79: 5b:a2:33:03:b6:ed:64:96:fd:88:7b:52:81:f3:1e:26:d6:f3: 37:50:2c:d1:7b:a3:13:35:ee:c3:ad:1a:7c:b9:f3:90:89:85: 26:1a:7e:5f:b1:df:80:22:bf:a2:e7:a7:91:41:ae:8c:0a:7a: 21:ae:6a:69:80:01:8b:29:a6:53:1f:f7:14:3c:1d:af:8c:51: 4d:79:91:30:f0:de:d1:85:a5:74:73:7a:ec:5a:e0:67:7f:d2: 29:9c:19:85:b8:37:e3:a9:e3:1a:c2:05:2e:e9:21:94:3c:4e: f2:53:e5:1e:32:2d:79:55:4d:2c:2d:91:82:05:22:b3:28:a4: 8b:2c:a9:b6:0e:8b:fa:e0:bc:af:6a:60:00:21:fe:1a:a8:5c: 6d:18:db:9c:a2:59:ff:7f:9c:76:7c:48:fd:a3:26:0c:dd:c8: c4:35:c7:55:bc:24:b5:85:68:f7:e5:ed:f4:e4:82:40:4a:32: e2:97:db:0d:00:df:4e:79:e6:19:71:a4:3f:78:ea:2e:0a:f5: ba:49:e0:0a:d6:5d:4f:09:07:bd:c0:68:a6:f0:72:0a:c2:8e: 0e:2e:52:7b:3f:21:bd:61:88:dd:26:cb:c2:fb:30:fd:02:d5: e1:d1:62:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBwnUQH+rOHVAEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk MGI0NGVjYmUtZDg3ZC00MGE5LWExNWMtNTNjNWFjNmI5NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjkCXsuuOeTmbqOr2Wx0SO4C0DqtkWag5Ej0 ZjGyxNKqY1f7a2usmGDDKfcfscLkAoayBOwMGv1kwMPslbOVIaiOInkdy3UFCrwh 8GjqwiB/QmCHHiFvyGcOu8qNd+KRE4E9NPOrO4rjh+JXqAnBhL/Fiy4MwGxxQJFi U/MYTx7no/p5iRn1Qw13Hxu3lswF2zRzBMHf+0qeRUQYhKky+4LjLbmv/qvZQk9B rH5txbxEFMVhgpc7FzTT534RdD9toPXnDg7gJlwDhR01MsYqdDv9sv0vRZf37/SK X3qkZlHJIBF5WwkiLXym4zcNkr5gyRRdFPs2i3TUK/p3Q2hkEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKj9ruRfSqEViZCsp9ONRmqd9pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWY2NTQwNjEtMTAzNC0z ZWEwLTkxZWEtZDZkMzhhNmUzOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk104IuNUZgFQGgFPhOYsJKeVuiMwO27WSW/Yh7UoHzHibW8zdQLNF7 oxM17sOtGny585CJhSYafl+x34Aiv6Lnp5FBrowKeiGuammAAYspplMf9xQ8Ha+M UU15kTDw3tGFpXRzeuxa4Gd/0imcGYW4N+Op4xrCBS7pIZQ8TvJT5R4yLXlVTSwt kYIFIrMopIssqbYOi/rgvK9qYAAh/hqoXG0Y25yiWf9/nHZ8SP2jJgzdyMQ1x1W8 JLWFaPfl7fTkgkBKMuKX2w0A30555hlxpD946i4K9bpJ4ArWXU8JB73AaKbwcgrC jg4uUns/Ib1hiN0my8L7MP0C1eHRYos= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:01 2026 by rpki-client