$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa File: 2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa (raw, json) Hash identifier: uLrD9l1csqKH7oAtHExX+uwVhNUp7lAxsoEnnPB3bBM= Subject key identifier: D5:83:B4:81:8B:7C:F0:61:2D:27:31:3E:56:D4:62:6E:BE:EF:28:BB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E4559E54496E4AEE2DF6F7A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 30036 IP address blocks: 108.166.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e5:44:96:e4:ae:e2:df:6f:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=fc5ddce4-efcd-4e1a-bcad-7c5e48ce3302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:da:78:bc:9e:1f:8b:56:50:45:9e:cf:f5: 39:1d:78:1a:6f:75:5c:f0:b5:62:ab:91:b3:de:b7: f2:f7:68:4b:78:07:51:f7:60:51:61:56:17:39:74: bc:c7:66:60:41:30:47:37:5f:32:44:03:4d:36:3c: e8:22:06:cb:e5:f4:ba:b6:73:6a:64:60:2c:e6:77: 0f:8e:66:c2:40:e9:ad:1f:05:6d:a3:e9:34:86:ca: af:7b:36:09:2a:0b:19:c2:90:d1:f7:c7:d8:74:47: 21:eb:2f:82:b5:6e:42:0f:ad:c3:dc:40:99:ee:2f: 47:25:75:84:67:65:c8:f7:cf:9a:b2:be:92:31:16: ef:34:94:01:11:5d:fa:b1:b9:e1:d0:2d:b7:18:55: db:1b:80:f8:ef:f9:f1:68:0e:4e:d2:1a:74:1c:43: 1f:dd:c3:a3:d2:86:c9:d1:4a:79:d9:8b:e6:e9:5d: 54:2a:cd:d7:ca:86:66:aa:09:c9:16:d4:06:27:4a: ef:a8:c9:33:72:1c:12:90:29:a1:ad:aa:37:d9:e5: 70:bb:e8:71:d6:42:9a:b7:06:18:87:55:e5:b9:54: 11:d0:d5:52:fb:6b:03:01:4e:5f:61:df:ae:92:b2: 40:43:03:ab:b0:df:2f:f6:af:d3:a6:25:57:16:ab: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:B4:81:8B:7C:F0:61:2D:27:31:3E:56:D4:62:6E:BE:EF:28:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9f:e1:72:73:04:ec:d6:88:9a:1f:b0:ac:af:66:18:85:96: 8d:f9:ee:6d:49:c2:6e:29:ef:46:8f:f5:6f:0c:fe:b9:77:81: 99:d7:d0:bf:6b:1e:47:c8:48:d7:70:9a:88:67:ca:e9:b0:cd: 60:c1:44:76:08:a4:b8:b8:f2:48:a4:a0:3b:34:06:47:3f:47: 25:9c:92:59:21:7c:04:d2:c7:90:05:d8:6a:d9:4b:1a:e8:ac: a0:cb:ce:ea:87:8e:b3:98:94:25:c8:f1:05:ae:bb:0b:95:01: d2:da:05:46:c4:a1:65:ce:62:f0:a9:63:36:df:a4:7f:ca:7a: 53:6e:47:79:33:b6:48:e1:66:77:c2:7e:8b:68:16:08:40:9f: 23:20:d8:0f:97:51:f8:75:3f:53:f1:35:97:11:87:6f:76:b9: 0c:87:63:d5:b6:81:42:89:c0:1a:4c:46:d4:ab:2a:a6:47:ac: e1:2d:ed:59:61:00:2b:41:ac:f5:62:9c:da:d9:f5:4c:ef:f4: 59:64:d3:33:ba:8a:d0:63:1a:c3:e9:54:df:68:dc:79:de:6e: 44:52:60:89:a0:cf:9d:c1:43:db:8f:2b:65:11:5c:7a:1b:bd: d1:28:59:31:cb:a4:a6:36:df:57:e8:39:9d:2e:5e:a9:e5:3a: c8:ac:c0:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWeVEluSu4t9vegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZmM1ZGRjZTQtZWZjZC00ZTFhLWJjYWQtN2M1ZTQ4Y2UzMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof/aeLyeH4tWUEWez/U5HXgab3Vc8LViq5Gz 3rfy92hLeAdR92BRYVYXOXS8x2ZgQTBHN18yRANNNjzoIgbL5fS6tnNqZGAs5ncP jmbCQOmtHwVto+k0hsqvezYJKgsZwpDR98fYdEch6y+CtW5CD63D3ECZ7i9HJXWE Z2XI98+asr6SMRbvNJQBEV36sbnh0C23GFXbG4D47/nxaA5O0hp0HEMf3cOj0obJ 0Up52Yvm6V1UKs3XyoZmqgnJFtQGJ0rvqMkzchwSkCmhrao32eVwu+hx1kKatwYY h1XluVQR0NVS+2sDAU5fYd+ukrJAQwOrsN8v9q/TpiVXFqsRIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWDtIGLfPBhLScxPlbUYm6+7yi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmI5MGU1MWMtZjYxZC0z YjczLWI1OGUtMWU0MWEzNTY5YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqf4XJzBOzWiJofsKyvZhiFlo357m1Jwm4p70aP9W8M/rl3gZnX0L9r HkfISNdwmohnyumwzWDBRHYIpLi48kikoDs0Bkc/RyWcklkhfATSx5AF2GrZSxro rKDLzuqHjrOYlCXI8QWuuwuVAdLaBUbEoWXOYvCpYzbfpH/KelNuR3kztkjhZnfC fotoFghAnyMg2A+XUfh1P1PxNZcRh292uQyHY9W2gUKJwBpMRtSrKqZHrOEt7Vlh ACtBrPVinNrZ9Uzv9Flk0zO6itBjGsPpVN9o3HnebkRSYImgz53BQ9uPK2URXHob vdEoWTHLpKY231foOZ0uXqnlOsiswIE= -----END CERTIFICATE-----Generated at Wed Jun 24 03:22:16 2026 by rpki-client