$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa File: b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa (raw, json) Hash identifier: fKDq4PJDsiTAo48H7juXiidU9Xar0MAErRQID6plouc= Subject key identifier: 4C:20:0C:C7:1E:8C:1A:AA:91:03:0A:87:1A:92:E2:B2:07:39:20:84 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D651522353DF4C3A045A5C380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 108.166.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:22:35:3d:f4:c3:a0:45:a5:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=15ca1533-9de2-4f3c-9130-d892b88a2e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:9b:c1:1a:2a:b7:9e:ab:ad:e6:5c:02:cf: 49:39:62:cf:96:c6:3f:4e:70:61:e2:9f:49:ee:45: 9f:ad:cd:a6:ef:99:0d:4e:7b:e4:87:aa:46:1a:21: 76:66:e4:92:95:c2:5a:38:d6:b9:00:e7:a0:c4:76: 31:5a:26:da:a4:5d:90:db:ab:3e:ae:29:c8:39:8a: 00:00:9f:14:1a:3d:d6:36:38:c3:86:0a:f0:9e:4d: 5d:26:59:a1:43:a2:3c:05:35:e0:22:9c:d9:7e:9f: 7d:05:d8:0f:d4:ab:62:33:bd:0b:97:ee:9a:a1:b3: fe:db:0b:e0:83:f7:75:c9:26:84:5b:7f:4d:ad:fa: 48:ab:c7:aa:a5:55:52:de:4c:7e:6f:ab:f9:01:d2: 0f:25:4c:30:13:6b:a7:53:88:97:23:0d:53:71:b7: 1b:9b:d4:d1:a5:13:63:27:d7:50:71:20:84:a0:6c: dd:3d:cf:27:9d:ae:1d:f5:7f:ee:96:c1:11:58:3f: 44:3f:ff:e7:73:b0:c2:86:b3:35:53:5e:77:53:7d: 15:ad:37:c1:65:8e:8e:cf:72:46:a5:a3:c4:84:8e: d9:e2:79:41:66:d0:11:bb:95:be:9b:81:17:47:49: 56:29:92:ab:34:80:43:aa:47:91:1a:91:ed:e2:26: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:0C:C7:1E:8C:1A:AA:91:03:0A:87:1A:92:E2:B2:07:39:20:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:43:5f:51:1e:85:c6:92:e5:8f:64:e1:e5:74:2f:62:36:c3: 5d:66:f9:fb:35:3e:4f:38:ca:b6:d7:b4:72:d8:77:39:37:cf: 98:57:e6:5e:8c:5a:5b:9b:e3:2c:1f:5d:ec:b7:43:1b:10:48: 56:c2:9d:a3:55:63:7a:2a:0f:e5:28:48:8a:8e:0d:66:84:86: 07:9f:21:ec:ef:d4:0e:47:10:97:f8:ff:7b:c3:aa:ce:8f:90: 48:4a:8c:4d:73:f9:cc:71:3b:5d:6b:02:0a:5a:30:10:7f:84: b8:fd:ec:99:bb:4e:47:6a:28:62:c6:2f:4a:c1:f7:f3:24:75: ec:3f:dc:0a:24:c3:ea:07:42:43:e9:ff:1b:4f:77:dc:cf:d1: c7:6b:cc:b7:7c:0c:a4:49:4f:8e:b9:8c:0e:fe:9a:1f:f5:7f: a6:0b:c0:de:51:7b:f9:eb:89:dc:0a:7f:ac:88:6b:f9:06:a1: c3:e8:c6:67:fc:05:c5:6e:50:43:09:4e:f8:eb:8d:14:a0:5a: 5a:e3:f4:65:28:0b:96:bc:89:64:dc:00:4c:8f:a7:26:6f:6b: ed:8f:7f:dd:1d:3a:af:e9:c3:5e:8d:bb:d9:cf:09:77:a6:a5: 9e:1a:6d:cf:e9:28:7b:66:80:fb:9f:da:bd:18:6f:e2:73:cf: 81:9c:b7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSI1PfTDoEWlw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MTVjYTE1MzMtOWRlMi00ZjNjLTkxMzAtZDg5MmI4OGEyZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkKbwRoqt56rreZcAs9JOWLPlsY/TnBh4p9J 7kWfrc2m75kNTnvkh6pGGiF2ZuSSlcJaONa5AOegxHYxWibapF2Q26s+rinIOYoA AJ8UGj3WNjjDhgrwnk1dJlmhQ6I8BTXgIpzZfp99BdgP1KtiM70Ll+6aobP+2wvg g/d1ySaEW39NrfpIq8eqpVVS3kx+b6v5AdIPJUwwE2unU4iXIw1Tcbcbm9TRpRNj J9dQcSCEoGzdPc8nna4d9X/ulsERWD9EP//nc7DChrM1U153U30VrTfBZY6Oz3JG paPEhI7Z4nlBZtARu5W+m4EXR0lWKZKrNIBDqkeRGpHt4iZRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwgDMcejBqqkQMKhxqS4rIHOSCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjJkN2I4YTItODZiYS0z NWFhLTliNzUtMTJkYzgyYTJjYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhDX1EehcaS5Y9k4eV0L2I2w11m+fs1Pk84yrbXtHLYdzk3z5hX5l6M Wlub4ywfXey3QxsQSFbCnaNVY3oqD+UoSIqODWaEhgefIezv1A5HEJf4/3vDqs6P kEhKjE1z+cxxO11rAgpaMBB/hLj97Jm7TkdqKGLGL0rB9/Mkdew/3Aokw+oHQkPp /xtPd9zP0cdrzLd8DKRJT465jA7+mh/1f6YLwN5Re/nridwKf6yIa/kGocPoxmf8 BcVuUEMJTvjrjRSgWlrj9GUoC5a8iWTcAEyPpyZva+2Pf90dOq/pw16Nu9nPCXem pZ4abc/pKHtmgPuf2r0Yb+Jzz4Gct8A= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:29 2026 by rpki-client