$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa File: cb3967ac-db0f-3973-83a2-7bfb7e825424.roa (raw, json) Hash identifier: sBQ3x5ylJJshK8OrZcMR/1OliTcH65Q+DXVDu8Yo8Jc= Subject key identifier: 77:14:9F:3C:A5:73:28:76:64:C7:1E:89:49:A5:90:76:3D:37:C8:56 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D71A5249BA833312EB0F51E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 108.178.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:24:9b:a8:33:31:2e:b0:f5:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=17f89d0f-c432-46aa-8cb9-76b8d00a9a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:38:eb:9e:a0:f2:57:bf:42:91:87:a3:bc: 02:d0:6c:50:3a:ac:0f:dd:c5:62:ea:fb:ae:52:22: 7d:dc:e2:18:a4:c6:71:73:d2:0f:fa:99:e9:c9:7c: d8:52:5c:51:a7:14:4f:8e:4d:e5:d1:75:f4:91:9c: c7:3d:27:b6:00:17:b9:98:7b:2b:bc:0d:c3:83:43: 6c:34:ac:02:20:bc:63:9f:58:6d:b2:54:77:99:d2: 47:ad:09:43:97:10:5e:a2:d0:c1:1e:b9:84:c0:28: 18:d3:26:36:35:45:8f:a7:65:2c:f8:4f:56:fa:b5: 1b:03:57:0a:65:92:2b:84:0d:a2:f6:1a:b2:ae:59: 0d:f4:53:8c:a4:b2:66:c8:8e:23:71:8b:4b:11:ac: 31:0c:c5:3a:cb:44:fe:a3:83:1a:89:1f:7b:ca:ca: 2e:86:3c:07:fe:b3:9c:f9:4a:cf:2d:d2:36:94:6a: c4:6d:7d:92:fa:fd:14:1f:f8:19:43:08:2b:1e:11: ad:ca:21:2e:10:63:ff:d6:59:70:5f:34:85:88:36: 67:1d:10:db:a9:60:55:6e:c9:11:f4:5b:89:5e:0e: 9b:75:e7:ff:e0:7f:e9:c6:c1:c2:94:57:8b:2a:7b: bc:b1:d5:21:be:6c:88:0f:72:e1:87:16:dd:50:96: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:14:9F:3C:A5:73:28:76:64:C7:1E:89:49:A5:90:76:3D:37:C8:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8d:cf:ca:dd:ab:a3:11:49:e8:f2:05:18:68:10:24:07:71: 66:a4:7a:b4:5c:aa:50:f5:40:a6:07:a0:9b:00:bb:35:f3:3b: c0:2a:dd:ee:5e:13:b9:96:81:19:73:6e:ee:67:96:6a:2a:24: 1e:f4:72:17:d8:90:21:89:38:a2:47:10:6e:67:ba:29:46:b5: dc:3f:3f:c3:98:13:dd:39:33:86:f3:63:42:b9:ca:44:5a:5e: 58:65:1d:b8:36:25:70:2f:d9:8e:d4:c5:f1:17:c5:d0:45:f6: 2a:d6:5d:10:3b:1d:87:e7:4e:3e:41:3e:35:e5:8b:bf:5a:f5: fa:51:0e:be:ed:5a:04:28:b2:cb:d7:3f:8c:dd:92:a7:1a:c5: b4:3b:ae:8c:1a:53:ba:b2:9a:e1:4e:4e:7f:e4:6b:ab:69:b1: 02:55:e3:47:a1:37:c6:b2:e7:83:16:08:39:68:bf:08:cf:23: bb:e8:34:47:7c:b6:09:c1:42:e0:2b:c9:6d:ad:7b:a8:ff:b9: 1e:10:3a:01:b0:87:f8:b4:84:4a:e5:c8:60:cc:00:9f:40:d1: 58:88:78:03:e0:de:b7:2b:de:13:18:42:b1:02:86:a2:5f:65: ba:39:7f:fe:13:63:ba:87:38:7f:85:8a:68:ce:d3:31:e7:51: 6f:4c:41:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSSbqDMxLrD1HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MTdmODlkMGYtYzQzMi00NmFhLThjYjktNzZiOGQwMGE5YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hk4656g8le/QpGHo7wC0GxQOqwP3cVi6vuu UiJ93OIYpMZxc9IP+pnpyXzYUlxRpxRPjk3l0XX0kZzHPSe2ABe5mHsrvA3Dg0Ns NKwCILxjn1htslR3mdJHrQlDlxBeotDBHrmEwCgY0yY2NUWPp2Us+E9W+rUbA1cK ZZIrhA2i9hqyrlkN9FOMpLJmyI4jcYtLEawxDMU6y0T+o4MaiR97ysouhjwH/rOc +UrPLdI2lGrEbX2S+v0UH/gZQwgrHhGtyiEuEGP/1llwXzSFiDZnHRDbqWBVbskR 9FuJXg6bdef/4H/pxsHClFeLKnu8sdUhvmyID3LhhxbdUJZ4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcUnzylcyh2ZMceiUmlkHY9N8hWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2IzOTY3YWMtZGIwZi0z OTczLTgzYTItN2JmYjdlODI1NDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGNz8rdq6MRSejyBRhoECQHcWakerRcqlD1QKYHoJsAuzXzO8Aq3e5e E7mWgRlzbu5nlmoqJB70chfYkCGJOKJHEG5nuilGtdw/P8OYE905M4bzY0K5ykRa XlhlHbg2JXAv2Y7UxfEXxdBF9irWXRA7HYfnTj5BPjXli79a9fpRDr7tWgQossvX P4zdkqcaxbQ7rowaU7qymuFOTn/ka6tpsQJV40ehN8ay54MWCDlovwjPI7voNEd8 tgnBQuAryW2te6j/uR4QOgGwh/i0hErlyGDMAJ9A0ViIeAPg3rcr3hMYQrEChqJf Zbo5f/4TY7qHOH+FimjO0zHnUW9MQbM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:40:55 2026 by rpki-client