$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa File: c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa (raw, json) Hash identifier: zDrjLIkwWvzTdQ1vbfX2gIeKF3W1Fsp3od+G+ieP1OI= Subject key identifier: ED:27:C0:94:29:57:45:B7:36:DE:92:FC:79:63:9A:40:7D:F9:DA:A3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F612D6A8D14DE19113405EA20 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 30036 IP address blocks: 108.166.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6a:8d:14:de:19:11:34:05:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=3edadac1-0ee4-4a0e-87c4-2a7e11b36fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:4f:ba:b3:df:a9:85:fd:2a:a8:3b:9c:9c: 0f:a4:c5:ba:76:79:ef:3c:44:79:32:c9:34:22:84: 4c:6e:48:33:7e:23:bb:b2:89:80:12:d1:50:6f:52: 13:ab:9e:15:22:22:2f:16:c1:b5:34:f0:8a:1c:74: b5:26:d6:ca:20:b4:ad:14:39:00:55:bc:25:04:c6: 88:7c:c6:e3:a4:11:1f:34:c5:16:70:d7:f8:ae:78: 35:d8:be:27:05:76:5f:de:f3:3c:4f:21:4a:51:ef: 12:f8:7d:f6:83:3d:84:43:6d:bf:6b:f2:03:11:11: 50:6c:d0:b9:5d:d2:e5:cb:d7:54:d6:6d:5c:0e:9c: 0c:7c:ff:41:90:a5:98:7f:73:47:a5:53:8c:95:56: f2:55:75:71:74:81:85:64:72:15:52:8d:40:7a:cb: b5:59:fa:0f:fc:77:b9:ee:3d:ce:8e:38:30:b9:76: c8:ab:5c:26:1e:af:79:37:4f:dc:1c:4d:14:6c:7f: 5a:c6:f2:86:11:d6:75:f6:84:54:eb:9a:60:b8:f3: a1:9d:24:89:40:6c:d3:25:0d:e0:d5:97:3b:35:18: 6d:e8:21:cf:ed:e4:11:c1:bb:b0:ab:c7:17:ef:3f: 1e:87:ef:c3:fe:73:ca:61:30:0c:24:be:07:11:77: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:27:C0:94:29:57:45:B7:36:DE:92:FC:79:63:9A:40:7D:F9:DA:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bc:9b:d7:8b:6f:ec:d3:33:95:da:6f:fc:33:2b:90:d7:2e: 90:a8:93:8e:4a:74:4d:0b:2a:b1:31:b1:52:b0:06:fe:cc:64: 71:83:a7:83:4c:ab:be:20:24:4c:9e:09:00:d4:1f:2c:aa:fa: 7b:97:44:5e:41:87:7c:4a:82:f4:f8:f3:30:ac:4c:71:33:13: 30:dd:76:5a:1c:25:fa:4f:ff:6f:14:b6:41:2b:e0:2c:e9:7c: 2a:25:9b:04:3a:3a:63:14:02:7f:a4:4d:fa:52:99:85:b0:31: 77:8d:00:ae:4b:00:35:d0:68:7f:35:41:4d:b7:de:68:10:bd: 37:70:af:56:3e:d7:3f:5f:8d:68:1a:89:02:d3:4a:9d:58:cd: f7:c8:2e:28:63:0b:e3:90:d1:a1:06:28:d2:18:75:8e:4e:d3: e9:75:55:a2:1c:5c:aa:40:f0:f1:3d:f2:73:6d:05:1f:40:32: f0:e8:cf:61:fb:77:21:e8:af:f2:79:15:7d:c6:97:d8:53:96: 17:e1:70:c9:b6:e7:5b:ce:01:3b:a5:6b:f5:2f:41:02:28:de: f0:7d:63:17:0a:a7:8b:eb:05:b1:63:cf:3a:9f:13:eb:88:55: 9e:e4:c4:0f:ef:32:f5:44:d4:93:e0:5e:15:4a:40:43:1b:57: cc:d0:dd:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWqNFN4ZETQF6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk M2VkYWRhYzEtMGVlNC00YTBlLTg3YzQtMmE3ZTExYjM2ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln1PurPfqYX9Kqg7nJwPpMW6dnnvPER5Msk0 IoRMbkgzfiO7somAEtFQb1ITq54VIiIvFsG1NPCKHHS1JtbKILStFDkAVbwlBMaI fMbjpBEfNMUWcNf4rng12L4nBXZf3vM8TyFKUe8S+H32gz2EQ22/a/IDERFQbNC5 XdLly9dU1m1cDpwMfP9BkKWYf3NHpVOMlVbyVXVxdIGFZHIVUo1Aesu1WfoP/He5 7j3OjjgwuXbIq1wmHq95N0/cHE0UbH9axvKGEdZ19oRU65pguPOhnSSJQGzTJQ3g 1Zc7NRht6CHP7eQRwbuwq8cX7z8eh+/D/nPKYTAMJL4HEXdfMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0nwJQpV0W3Nt6S/HljmkB9+dqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzhmYTUxMTYtODgwZC0z YTQxLWFlMGUtYjc3YTE2NzIyZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+8m9eLb+zTM5Xab/wzK5DXLpCok45KdE0LKrExsVKwBv7MZHGDp4NM q74gJEyeCQDUHyyq+nuXRF5Bh3xKgvT48zCsTHEzEzDddlocJfpP/28UtkEr4Czp fColmwQ6OmMUAn+kTfpSmYWwMXeNAK5LADXQaH81QU233mgQvTdwr1Y+1z9fjWga iQLTSp1YzffILihjC+OQ0aEGKNIYdY5O0+l1VaIcXKpA8PE98nNtBR9AMvDoz2H7 dyHor/J5FX3Gl9hTlhfhcMm251vOATula/UvQQIo3vB9YxcKp4vrBbFjzzqfE+uI VZ7kxA/vMvVE1JPgXhVKQEMbV8zQ3b0= -----END CERTIFICATE-----Generated at Tue Oct 13 17:40:50 2026 by rpki-client