$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa File: 9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa (raw, json) Hash identifier: nqAkJqxGG/gvmV0KoWYlvNq+JqVPJdUVtjKW7dGMVjQ= Subject key identifier: C4:A4:9A:27:35:EE:7C:1E:F5:70:C3:DD:C6:47:B8:38:00:44:AF:19 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F655D6D416EBF84CFCAEB45C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 30036 IP address blocks: 108.166.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6d:41:6e:bf:84:cf:ca:eb:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=45bfc29a-67e4-43bd-83b7-a0874064b2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:fd:87:2e:9a:70:35:1e:59:5b:e0:5e:2b: a2:c5:47:6b:87:c0:b7:09:13:58:b4:10:d1:2e:cc: c6:b8:b6:ab:ec:35:5e:0e:73:c6:3e:b5:94:c4:8a: 3d:3c:35:37:74:1d:7e:f6:9d:0a:f2:71:a7:56:45: 8b:30:8b:c3:89:8d:50:4f:f3:43:2a:31:a2:95:50: 00:7b:ab:cc:e3:51:c5:31:49:f1:af:96:0b:d4:d5: aa:96:49:75:6c:42:c7:78:55:a4:a1:8c:1b:0f:e0: 67:3d:66:62:8e:ef:a8:86:49:75:4c:55:98:88:8a: 54:de:f0:12:cb:d6:ca:66:ef:72:c7:fc:75:35:9e: a3:03:cd:17:ce:d1:62:df:4a:ec:40:23:cb:61:49: 3b:4f:36:d6:e0:cf:36:34:12:03:21:85:8d:52:0a: 02:82:3a:01:c5:45:d9:84:00:c9:50:e2:e2:5e:94: cd:ad:38:33:89:22:ce:6e:9a:4b:06:f5:d1:22:3c: 31:5c:d2:b4:f8:44:d5:19:fe:af:68:cb:dd:6a:36: 68:e4:9c:02:84:bf:b9:20:b5:9c:46:9d:21:04:94: 97:60:32:4a:ae:18:26:d1:58:22:a0:47:9a:41:a8: 16:b1:24:16:6d:58:5c:4f:d9:66:12:e6:1e:48:f2: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A4:9A:27:35:EE:7C:1E:F5:70:C3:DD:C6:47:B8:38:00:44:AF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:4c:44:0e:59:37:06:92:f3:61:c0:28:9d:11:ca:f8:4f:62: 91:42:8e:16:51:46:a2:f0:79:82:6a:3c:21:52:9c:cf:e6:07: cf:af:a6:c8:a4:82:83:dd:4b:bb:2a:1d:af:23:49:9d:e8:db: 16:fd:d8:83:d4:2a:d6:e8:0b:b2:30:e2:96:7a:41:2a:da:1b: 35:4c:03:2e:df:bc:80:8f:77:76:43:61:79:4f:36:0b:36:26: 56:88:df:58:f6:5e:5b:93:12:aa:c0:b5:c2:47:1c:e5:59:38: 02:99:84:f9:f6:b4:18:8b:cc:e4:1b:6d:e4:39:ea:42:f7:9e: d5:1c:0a:b6:e0:fe:a8:29:f9:8c:66:d1:4b:a6:86:b4:1f:87: e0:7d:64:51:fa:7c:c9:7d:d8:8c:75:e2:aa:5a:03:36:97:87: d6:ef:2c:99:c1:04:8c:75:5b:fc:a7:b6:ca:76:53:ac:05:84: d9:68:77:ff:95:b1:8b:18:0b:9b:1c:32:58:1c:50:df:89:be: 54:a8:cf:25:d9:30:d5:5b:39:86:cb:a2:e8:3b:e9:50:db:83: a7:46:0e:06:e4:d3:49:22:03:84:98:da:c0:e5:40:d7:b1:a4: 90:72:aa:b1:e7:56:b3:67:f7:2e:14:ae:3d:cc:64:aa:89:2d: 84:54:d6:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXW1Bbr+Ez8rrRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NDViZmMyOWEtNjdlNC00M2JkLTgzYjctYTA4NzQwNjRiMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryf9hy6acDUeWVvgXiuixUdrh8C3CRNYtBDR LszGuLar7DVeDnPGPrWUxIo9PDU3dB1+9p0K8nGnVkWLMIvDiY1QT/NDKjGilVAA e6vM41HFMUnxr5YL1NWqlkl1bELHeFWkoYwbD+BnPWZiju+ohkl1TFWYiIpU3vAS y9bKZu9yx/x1NZ6jA80XztFi30rsQCPLYUk7TzbW4M82NBIDIYWNUgoCgjoBxUXZ hADJUOLiXpTNrTgziSLObppLBvXRIjwxXNK0+ETVGf6vaMvdajZo5JwChL+5ILWc Rp0hBJSXYDJKrhgm0VgioEeaQagWsSQWbVhcT9lmEuYeSPKHdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSkmic17nwe9XDD3cZHuDgARK8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWFhMzE1NGQtZjFmNS0z ZDZhLWFhMWYtYzc1OTk0ZTA4NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1MRA5ZNwaS82HAKJ0RyvhPYpFCjhZRRqLweYJqPCFSnM/mB8+vpsik goPdS7sqHa8jSZ3o2xb92IPUKtboC7Iw4pZ6QSraGzVMAy7fvICPd3ZDYXlPNgs2 JlaI31j2XluTEqrAtcJHHOVZOAKZhPn2tBiLzOQbbeQ56kL3ntUcCrbg/qgp+Yxm 0UumhrQfh+B9ZFH6fMl92Ix14qpaAzaXh9bvLJnBBIx1W/yntsp2U6wFhNlod/+V sYsYC5scMlgcUN+JvlSozyXZMNVbOYbLoug76VDbg6dGDgbk00kiA4SY2sDlQNex pJByqrHnVrNn9y4Urj3MZKqJLYRU1tw= -----END CERTIFICATE-----Generated at Sun Oct 11 23:41:39 2026 by rpki-client