$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa File: f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa (raw, json) Hash identifier: MPdRFxYKl9MNwUIGdemnYx0rYTLaIlQMaKgIsjN+fMs= Subject key identifier: F4:85:E7:B8:4B:E0:52:8A:CD:30:2C:62:A0:E3:87:C8:3F:2B:C3:8F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C84770496D38B411F5935AD20 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 108.166.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:04:96:d3:8b:41:1f:59:35:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=fb5b3436-5763-4210-b3f2-4b4ba345f561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9d:a0:85:17:12:c1:b0:9d:0a:17:f1:11:75: 22:c2:c6:51:bb:3d:8a:d3:03:df:50:ea:43:d8:42: 3e:bb:24:be:02:0f:fc:c0:2f:eb:35:65:af:2e:52: e6:4d:4a:bb:a8:c5:54:70:6f:21:2a:84:bd:25:f0: 1f:b9:0a:bf:0d:d1:68:d0:41:a8:9b:47:3b:7b:86: 0b:83:5a:c9:92:b0:79:1a:16:50:df:98:8a:fd:56: 15:ce:39:d5:22:be:14:e5:8b:cd:dc:6f:d5:1b:87: 91:42:47:b1:ca:59:40:99:ca:55:47:36:77:eb:a5: f4:e2:f1:69:4e:65:5c:cd:71:ec:52:10:ff:82:be: 14:f1:91:f3:63:f7:f3:94:72:51:34:8b:f7:ff:7f: f3:ef:17:16:d7:46:07:6b:50:21:d5:73:90:ea:9e: b5:eb:a0:8b:0c:f6:5a:3f:d5:d5:e5:ad:dd:c2:c7: a5:e5:b5:76:6f:70:fc:8a:65:d7:c0:4d:e2:1a:fb: dd:4f:85:4f:4b:b2:71:36:8d:14:21:af:25:51:8e: 04:61:7c:90:d4:dc:66:c8:30:af:ce:12:bb:81:15: 45:1b:77:67:d7:a7:d0:04:47:a0:0c:54:42:12:6c: ec:7f:34:34:a8:b3:59:e3:e9:ba:97:0c:be:f3:6b: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:E7:B8:4B:E0:52:8A:CD:30:2C:62:A0:E3:87:C8:3F:2B:C3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f4:07:db:4b:08:1a:c2:9f:1c:4f:2a:0d:a2:be:1a:0c:b8: 0a:25:fc:30:cd:f3:13:aa:b7:d6:72:b9:13:1b:cd:42:b3:b8: 6b:8c:19:8d:1c:c3:a8:a0:02:75:5f:49:7b:4a:60:69:ab:59: 3c:fa:48:81:e8:b6:e9:0a:5f:ef:6d:a0:43:f6:5c:e0:10:f8: 4a:f4:6a:d1:a1:34:05:57:4e:11:9b:96:c7:f3:bc:da:53:d7: 0f:cb:9d:27:33:7e:ec:a6:44:57:4e:86:9e:16:91:f6:d0:55: df:94:a7:c7:32:11:e1:df:eb:c8:36:e6:11:f4:d6:ba:6a:e9: 02:a9:42:75:22:c7:17:68:b1:60:d6:20:74:f7:b8:5f:07:34: 95:75:e6:8c:31:33:18:9a:d8:7b:78:97:7b:5e:c5:9a:91:ed: f7:03:ea:36:ad:b9:a8:d2:31:34:3a:44:83:f6:58:b1:99:da: c5:1a:ca:6d:cb:45:e7:86:2f:7f:a8:eb:94:3c:5a:27:98:8c: 25:c0:51:9b:85:32:ce:dd:57:36:49:5a:f6:ad:ec:e5:77:7a: 45:43:6d:26:20:5d:d2:c3:2e:f9:2e:4a:99:63:29:fd:20:2d: 80:4f:a1:f1:c6:04:4c:6a:7a:6d:36:74:9e:70:b3:44:f7:8a: eb:ef:57:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwSW04tBH1k1rSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZmI1YjM0MzYtNTc2My00MjEwLWIzZjItNGI0YmEzNDVmNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ2ghRcSwbCdChfxEXUiwsZRuz2K0wPfUOpD 2EI+uyS+Ag/8wC/rNWWvLlLmTUq7qMVUcG8hKoS9JfAfuQq/DdFo0EGom0c7e4YL g1rJkrB5GhZQ35iK/VYVzjnVIr4U5YvN3G/VG4eRQkexyllAmcpVRzZ366X04vFp TmVczXHsUhD/gr4U8ZHzY/fzlHJRNIv3/3/z7xcW10YHa1Ah1XOQ6p6166CLDPZa P9XV5a3dwsel5bV2b3D8imXXwE3iGvvdT4VPS7JxNo0UIa8lUY4EYXyQ1NxmyDCv zhK7gRVFG3dn16fQBEegDFRCEmzsfzQ0qLNZ4+m6lwy+82tPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSF57hL4FKKzTAsYqDjh8g/K8OPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjU4YjY2ZjMtZmVmNC0z YzEzLWFmODEtYWNkODg2ZjZmNmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP0B9tLCBrCnxxPKg2ivhoMuAol/DDN8xOqt9ZyuRMbzUKzuGuMGY0c w6igAnVfSXtKYGmrWTz6SIHotukKX+9toEP2XOAQ+Er0atGhNAVXThGblsfzvNpT 1w/LnSczfuymRFdOhp4WkfbQVd+Up8cyEeHf68g25hH01rpq6QKpQnUixxdosWDW IHT3uF8HNJV15owxMxia2Ht4l3texZqR7fcD6jatuajSMTQ6RIP2WLGZ2sUaym3L ReeGL3+o65Q8WieYjCXAUZuFMs7dVzZJWvat7OV3ekVDbSYgXdLDLvkuSpljKf0g LYBPofHGBExqem02dJ5ws0T3iuvvV/g= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:45 2026 by rpki-client