$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa File: 2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa (raw, json) Hash identifier: TyoecBf22CrWaz1Cu0OI1HZm9p8rJy28R51yQf82chM= Subject key identifier: 68:D0:4E:A0:E8:50:FA:DE:05:AA:70:F7:91:CC:FE:44:E6:27:79:C6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E4559FF23FCCCFD73CF3AB900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 30036 IP address blocks: 108.166.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ff:23:fc:cc:fd:73:cf:3a:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=78391f25-da9e-4d05-a8e0-9cda17c91fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:fb:bd:46:3d:4c:96:6e:f0:7a:63:fb:48: 4b:ec:8d:ac:94:c6:35:37:fe:bd:34:b1:4a:73:92: c4:3c:5e:f5:5c:d0:92:41:c1:56:06:0a:91:28:c1: ad:48:9f:dc:ba:6d:e0:6d:8d:1e:57:80:ee:81:84: 73:27:35:0e:6c:a7:08:fc:79:bd:6a:e3:87:4b:25: f3:58:98:fb:dd:cb:6d:fe:ea:f6:26:17:f2:50:da: 92:a1:c1:df:68:f2:3d:da:b5:44:09:cb:bf:68:74: 6c:27:ef:73:93:bf:09:fb:31:a3:3f:22:9a:67:72: 0e:f8:ed:e4:dd:7a:61:e1:2f:e6:b7:bd:b9:f9:01: a3:9c:83:da:e4:81:b2:e7:f3:2e:06:d2:13:91:17: c4:55:3c:58:7a:cf:dc:43:ba:be:c0:3d:03:37:c8: b3:bc:28:ba:b9:96:98:6d:41:e0:e2:37:7c:8f:0f: 50:cb:42:7f:85:66:5d:fe:f7:8a:aa:21:19:2f:62: 4a:72:3f:0c:4c:1e:d2:c3:91:92:1b:71:07:bc:99: 1d:05:ae:7e:da:88:a1:57:95:b7:45:75:b2:f1:86: fb:3a:86:33:3c:ce:84:15:c0:86:ef:b1:cc:b8:11: 8e:de:d9:2a:7b:fd:46:94:a1:62:5e:01:e5:72:96: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D0:4E:A0:E8:50:FA:DE:05:AA:70:F7:91:CC:FE:44:E6:27:79:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:86:b7:79:31:ce:fd:b3:90:f9:8a:c3:28:d0:62:d7:f6:51: 64:d7:8b:93:96:f2:44:8d:36:81:0d:ac:68:22:9b:44:5b:41: ad:10:36:ea:cb:44:e7:de:26:14:9c:d6:12:20:68:c5:3c:ac: d6:1b:29:e7:98:0c:46:ab:30:dc:1c:67:ef:74:40:64:6f:bc: 62:36:8f:33:a5:4e:0d:64:37:e0:da:41:f6:e2:31:f4:2a:11: 1c:13:0f:7e:28:d8:40:43:5c:3a:f0:98:36:6d:75:b2:f4:17: a3:ad:c0:f0:bb:2f:3b:45:dc:b5:04:87:6c:0b:1d:1a:50:5e: bb:c5:d8:72:66:c4:de:ca:7f:f9:3f:1b:f9:c4:ab:5a:dc:61: 9e:cf:e3:7d:93:ba:5c:91:fa:03:21:7e:25:22:27:47:06:ab: ab:f8:86:9f:48:3d:88:06:95:30:60:74:3d:35:bc:9e:d9:a5: 0b:09:46:0e:03:ef:ff:30:d2:4e:57:67:fd:66:b8:aa:0b:dc: 04:8c:bb:a0:21:b1:7c:d1:3d:ac:2c:62:ec:7c:f1:7e:ab:64: 07:4f:dc:fc:3c:18:50:99:ae:c3:2e:84:f2:fd:7c:89:69:fa: cf:f9:ba:0a:58:34:0b:60:c9:c0:b5:d5:3c:88:7f:31:58:c8: 04:88:e0:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWf8j/Mz9c886uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NzgzOTFmMjUtZGE5ZS00ZDA1LWE4ZTAtOWNkYTE3YzkxZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6f7vUY9TJZu8Hpj+0hL7I2slMY1N/69NLFK c5LEPF71XNCSQcFWBgqRKMGtSJ/cum3gbY0eV4DugYRzJzUObKcI/Hm9auOHSyXz WJj73ctt/ur2JhfyUNqSocHfaPI92rVECcu/aHRsJ+9zk78J+zGjPyKaZ3IO+O3k 3Xph4S/mt725+QGjnIPa5IGy5/MuBtITkRfEVTxYes/cQ7q+wD0DN8izvCi6uZaY bUHg4jd8jw9Qy0J/hWZd/veKqiEZL2JKcj8MTB7Sw5GSG3EHvJkdBa5+2oihV5W3 RXWy8Yb7OoYzPM6EFcCG77HMuBGO3tkqe/1GlKFiXgHlcpbDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjQTqDoUPreBapw95HM/kTmJ3nGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmE3MWRkOGMtZmMzNi0z MzI4LThkMmItZGMxZjExN2FlYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGGt3kxzv2zkPmKwyjQYtf2UWTXi5OW8kSNNoENrGgim0RbQa0QNurL ROfeJhSc1hIgaMU8rNYbKeeYDEarMNwcZ+90QGRvvGI2jzOlTg1kN+DaQfbiMfQq ERwTD34o2EBDXDrwmDZtdbL0F6OtwPC7LztF3LUEh2wLHRpQXrvF2HJmxN7Kf/k/ G/nEq1rcYZ7P432TulyR+gMhfiUiJ0cGq6v4hp9IPYgGlTBgdD01vJ7ZpQsJRg4D 7/8w0k5XZ/1muKoL3ASMu6AhsXzRPawsYux88X6rZAdP3Pw8GFCZrsMuhPL9fIlp +s/5ugpYNAtgycC11TyIfzFYyASI4I4= -----END CERTIFICATE-----Generated at Wed Jun 24 03:22:00 2026 by rpki-client