$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4f24225-e8b7-30d3-99e0-6cf7a685eef4.roa File: b4f24225-e8b7-30d3-99e0-6cf7a685eef4.roa (raw, json) Hash identifier: pttpBDuPSO3a2mWb1P+Zyj7xnwxx2CPCHflFLjVA4g8= Subject key identifier: 20:BD:0C:86:9E:E8:6A:3C:61:75:21:C4:2F:DF:6F:70:DE:5F:60:CD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D71A5264AA1734FA16D669200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4f24225-e8b7-30d3-99e0-6cf7a685eef4.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 108.178.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:26:4a:a1:73:4f:a1:6d:66:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=0cf0795b-ba3b-4844-a04c-b1396459942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d8:74:53:e4:69:1a:f3:ed:75:37:26:6a:31: 9c:56:d1:4d:8c:d6:d5:ba:3d:19:0f:3f:57:7d:cf: 39:cf:cf:4a:a4:15:75:6c:8c:aa:5e:a0:11:e9:16: fb:f7:97:92:a7:5c:1b:73:09:e7:78:55:7d:22:92: 45:5b:c3:d6:0c:d6:27:55:99:bf:70:0c:78:df:87: 89:bc:36:15:bf:a2:16:dc:f1:4c:05:58:50:21:41: 14:d9:56:18:1a:89:33:43:25:29:43:d5:34:24:45: 3a:d9:ba:dc:78:05:bc:de:bf:e9:9f:14:b1:b0:fb: 27:25:81:cf:0e:1f:0e:87:af:c5:4c:e1:21:c3:ef: 7b:da:c7:8e:eb:0e:cf:3a:ed:16:1f:c8:b5:f7:9c: ef:c4:62:76:03:1d:2c:10:4a:83:87:69:dc:99:c2: ce:6a:5d:dd:b0:10:e4:2c:b7:b9:8b:4c:c6:09:95: 68:c7:ae:d7:8e:5e:ed:06:65:04:13:c1:83:86:6c: f9:f6:9f:97:9c:6f:a9:ee:b3:d0:e6:45:96:52:73: f7:59:78:7c:16:cf:58:55:f7:d5:d1:1e:02:9e:26: fe:c6:86:fc:22:c6:43:3d:69:67:cc:ea:d0:7b:21: 7c:c1:8e:1c:bf:ee:6e:5f:9a:f8:01:f9:01:ce:58: 6e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BD:0C:86:9E:E8:6A:3C:61:75:21:C4:2F:DF:6F:70:DE:5F:60:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4f24225-e8b7-30d3-99e0-6cf7a685eef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:12:e4:4a:2f:d7:f1:6c:e7:37:27:17:6d:d1:10:45:34:7b: 2f:a2:3d:4d:c8:0a:cf:f4:d8:8d:21:14:38:fd:a7:e4:49:d6: 92:e7:66:7d:60:82:b1:67:85:57:8b:75:46:3d:5b:e5:a6:a9: 0c:55:ad:ff:22:d2:19:c4:8f:8f:5b:ec:c1:d0:57:0a:9c:55: ca:f7:a6:99:28:68:02:ea:8e:79:ec:1a:89:d6:ce:ee:74:7a: 80:9b:6e:01:bd:70:1b:d4:42:19:e0:1b:6a:c5:70:1d:ba:27: 69:79:be:c3:25:e7:84:dc:c0:31:d7:ba:7a:fa:0d:c1:7d:bd: 84:e4:a8:fd:d6:4d:d2:08:f0:32:9c:95:fd:15:f5:69:8a:18: 28:f4:d6:37:ba:24:ed:90:7f:ba:9c:1c:db:11:d6:87:dc:c8: 31:e3:1a:57:d9:56:a1:75:55:76:60:b0:63:d5:66:33:56:7e: b7:8f:db:7b:32:8d:22:66:24:55:94:ae:6d:b5:47:8a:62:9c: 1a:ba:7a:7d:2f:32:a7:27:23:55:0f:40:20:8a:4c:58:74:1c: ae:ac:f1:c6:4a:62:05:19:d1:83:75:61:e6:9c:a9:ce:56:db: 46:fa:8e:d7:30:1f:0b:fd:e5:72:a1:09:80:32:ad:9d:73:1c: cc:84:4c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSZKoXNPoW1mkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MGNmMDc5NWItYmEzYi00ODQ0LWEwNGMtYjEzOTY0NTk5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNh0U+RpGvPtdTcmajGcVtFNjNbVuj0ZDz9X fc85z89KpBV1bIyqXqAR6Rb795eSp1wbcwnneFV9IpJFW8PWDNYnVZm/cAx434eJ vDYVv6IW3PFMBVhQIUEU2VYYGokzQyUpQ9U0JEU62brceAW83r/pnxSxsPsnJYHP Dh8Oh6/FTOEhw+972seO6w7POu0WH8i195zvxGJ2Ax0sEEqDh2ncmcLOal3dsBDk LLe5i0zGCZVox67Xjl7tBmUEE8GDhmz59p+XnG+p7rPQ5kWWUnP3WXh8Fs9YVffV 0R4Cnib+xob8IsZDPWlnzOrQeyF8wY4cv+5uX5r4AfkBzlhuEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC9DIae6Go8YXUhxC/fb3DeX2DNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjRmMjQyMjUtZThiNy0z MGQzLTk5ZTAtNmNmN2E2ODVlZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHES5Eov1/Fs5zcnF23REEU0ey+iPU3ICs/02I0hFDj9p+RJ1pLnZn1g grFnhVeLdUY9W+WmqQxVrf8i0hnEj49b7MHQVwqcVcr3ppkoaALqjnnsGonWzu50 eoCbbgG9cBvUQhngG2rFcB26J2l5vsMl54TcwDHXunr6DcF9vYTkqP3WTdII8DKc lf0V9WmKGCj01je6JO2Qf7qcHNsR1ofcyDHjGlfZVqF1VXZgsGPVZjNWfreP23sy jSJmJFWUrm21R4pinBq6en0vMqcnI1UPQCCKTFh0HK6s8cZKYgUZ0YN1Yeacqc5W 20b6jtcwHwv95XKhCYAyrZ1zHMyETPM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:05 2026 by rpki-client