$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa File: 9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa (raw, json) Hash identifier: 0JtsdRhOjX1sl7b0IsZ5E8BP7xUONdDZncbujqVfEA8= Subject key identifier: 64:2C:1E:8C:84:B6:7E:F5:88:62:65:65:8D:3B:4C:3C:80:02:D4:15 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EC371B7D681CF69DDF5B1BB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 30036 IP address blocks: 108.166.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b7:d6:81:cf:69:dd:f5:b1:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=bcf99e6a-9735-4ee1-b62a-af418c334b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fa:96:81:5a:1b:2d:f7:97:63:50:34:66:0a: 5d:7c:99:a0:40:0d:5a:cf:00:00:fe:af:6f:d5:7a: 54:3c:d3:db:6c:7d:cc:1e:19:aa:22:6a:f2:4a:57: 84:06:72:cd:01:3f:9b:f7:3c:fe:21:b5:ed:38:35: e0:2b:b9:42:b6:4b:48:f7:49:ec:15:e6:eb:05:67: 65:3a:fe:4d:6a:e9:a4:b0:6f:c0:66:f1:a9:85:db: 3f:17:92:f1:57:11:14:93:25:13:5e:bb:b3:93:b6: 9c:48:a9:10:9a:e1:b3:b9:ba:5e:38:59:59:c1:e9: 39:37:4e:26:bb:83:c2:40:38:e3:f2:62:eb:c9:d1: f3:cc:b4:a5:0b:2e:a0:9e:b3:28:cd:36:ea:c2:60: 6e:9e:8b:42:0b:8f:7a:14:68:7d:e8:24:85:21:d9: f4:40:a4:88:68:c6:9b:d4:89:69:3e:1a:68:27:06: 62:d4:1f:62:97:f4:92:f6:e0:74:68:c2:7a:c3:53: 05:a9:16:9d:e0:33:fa:47:62:94:a8:02:18:66:3b: 4b:87:d0:15:6e:38:3d:be:d7:47:cd:ae:23:ca:9a: e2:32:cf:1d:ae:5e:ca:f7:12:cd:47:cc:cc:13:e2: 41:41:30:e4:ae:d3:2d:1e:1d:44:d0:f3:ee:8e:14: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:1E:8C:84:B6:7E:F5:88:62:65:65:8D:3B:4C:3C:80:02:D4:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6d:50:35:31:db:c2:05:f0:73:30:df:f5:74:e2:20:a6:c3: c5:ce:7b:d1:23:ff:37:60:1f:d4:16:67:4d:3a:b1:c0:1d:08: 28:37:75:f5:d6:d8:f4:fa:3a:86:83:81:77:af:64:a8:4b:7b: c4:24:9b:a7:9b:99:5a:90:80:a4:67:79:56:f7:21:7c:8d:43: 10:c3:00:8c:0c:0a:c5:f1:16:a8:9d:0b:f9:c2:f3:f0:c0:8f: 37:a9:3a:77:9a:0d:7d:53:0a:ff:20:8f:5f:ef:0f:6a:b6:1a: be:aa:af:98:9f:d0:b1:5b:39:2b:18:9e:16:32:2a:01:53:59: ab:df:6d:90:21:1a:9a:0e:41:c9:81:69:3b:69:b4:a8:82:4c: ed:ee:fc:e2:2e:9d:cd:45:1b:c0:0f:a3:f9:75:aa:cd:8f:15: 9d:b4:2c:07:42:d3:03:d3:c3:ef:05:a6:af:b2:e0:d9:85:75: 01:4f:fd:e4:99:ea:0d:ba:51:fc:6b:4e:c3:1d:fb:9f:cd:d4: 78:1c:c9:8f:5f:2f:25:ca:65:a3:e5:15:42:64:5e:93:80:f2: 7c:5a:87:37:c5:4e:45:2b:f2:68:06:bc:cc:65:4b:96:b2:52: 0f:75:8e:e0:32:71:25:14:80:7d:04:63:7e:2d:28:02:13:88: c6:76:e3:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbfWgc9p3fWxu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YmNmOTllNmEtOTczNS00ZWUxLWI2MmEtYWY0MThjMzM0YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/qWgVobLfeXY1A0ZgpdfJmgQA1azwAA/q9v 1XpUPNPbbH3MHhmqImrySleEBnLNAT+b9zz+IbXtODXgK7lCtktI90nsFebrBWdl Ov5NaumksG/AZvGphds/F5LxVxEUkyUTXruzk7acSKkQmuGzubpeOFlZwek5N04m u4PCQDjj8mLrydHzzLSlCy6gnrMozTbqwmBunotCC496FGh96CSFIdn0QKSIaMab 1IlpPhpoJwZi1B9il/SS9uB0aMJ6w1MFqRad4DP6R2KUqAIYZjtLh9AVbjg9vtdH za4jypriMs8drl7K9xLNR8zME+JBQTDkrtMtHh1E0PPujhRwtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQsHoyEtn71iGJlZY07TDyAAtQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWFhMzE1NGQtZjFmNS0z ZDZhLWFhMWYtYzc1OTk0ZTA4NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhtUDUx28IF8HMw3/V04iCmw8XOe9Ej/zdgH9QWZ006scAdCCg3dfXW 2PT6OoaDgXevZKhLe8Qkm6ebmVqQgKRneVb3IXyNQxDDAIwMCsXxFqidC/nC8/DA jzepOneaDX1TCv8gj1/vD2q2Gr6qr5if0LFbOSsYnhYyKgFTWavfbZAhGpoOQcmB aTtptKiCTO3u/OIunc1FG8APo/l1qs2PFZ20LAdC0wPTw+8Fpq+y4NmFdQFP/eSZ 6g26UfxrTsMd+5/N1HgcyY9fLyXKZaPlFUJkXpOA8nxahzfFTkUr8mgGvMxlS5ay Ug91juAycSUUgH0EY34tKAITiMZ24yE= -----END CERTIFICATE-----Generated at Fri Aug 21 01:47:43 2026 by rpki-client