$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cedce60-24a7-3db1-941a-c4453e83a0f1.roa File: 0cedce60-24a7-3db1-941a-c4453e83a0f1.roa (raw, json) Hash identifier: 0MFEZBjvw3K8Jn4k3lcxFQISBi3h/dODTAdCzbK25yk= Subject key identifier: B4:1B:A3:CA:68:FE:CB:5D:22:6D:28:E6:81:09:44:25:22:FD:BD:1E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F3A17DA98475B32ADE8E6B700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cedce60-24a7-3db1-941a-c4453e83a0f1.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 108.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:da:98:47:5b:32:ad:e8:e6:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=01d3702b-0551-4b40-b3c4-60449bc3a0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9e:2e:12:f4:59:53:e7:a9:52:01:3b:cc:8f: e8:22:c5:ba:85:b5:22:3d:80:31:6f:83:4d:33:e0: 8c:cd:5e:8a:a5:4e:a2:83:11:7e:2f:dd:de:f0:3e: d1:87:17:24:06:9a:ef:fb:8f:8b:dd:ca:32:48:09: 9c:e6:35:00:c7:7f:f2:cc:46:16:e1:e8:92:67:97: 30:84:85:48:35:79:61:75:d0:93:5f:50:e9:fb:fd: 7f:c4:11:8c:8c:0a:54:6d:74:15:35:33:35:6c:bc: de:0a:41:a7:ae:23:a6:39:67:54:56:cf:dc:10:08: 64:06:9a:b6:ba:8f:96:95:dd:5d:91:d8:df:26:41: 6d:71:1c:8c:9b:50:95:b8:54:20:63:e4:de:9d:ca: ba:61:48:7a:9e:4a:47:b9:e2:b6:71:81:d8:f3:34: 78:84:30:56:10:5f:49:43:a1:b8:81:14:0c:ba:2e: 1f:99:0f:94:e6:48:ba:1d:67:07:a0:62:52:be:39: 66:e7:85:55:0c:d5:00:ee:bf:19:a8:9a:64:40:e9: 90:a1:61:20:23:13:c1:f9:17:6c:e8:20:3c:8a:95: bb:fe:7e:8f:0f:9a:89:4e:08:c5:05:b8:32:73:19: d9:b5:6e:46:b9:32:34:6f:4b:f7:09:1b:be:ed:c1: 0b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1B:A3:CA:68:FE:CB:5D:22:6D:28:E6:81:09:44:25:22:FD:BD:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0cedce60-24a7-3db1-941a-c4453e83a0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5f:6e:34:55:17:ad:6c:6e:33:2c:5e:46:28:83:8f:d3:b5: 38:a9:7b:91:8c:7e:bb:d4:1a:fa:bb:56:fb:84:c7:1e:27:55: df:03:08:2c:18:11:44:f1:f0:c2:00:23:9a:5c:cc:35:53:09: dc:e7:2e:24:87:8b:10:45:d5:78:aa:56:86:75:fb:10:a1:64: 3f:49:26:53:59:57:80:5c:21:7c:0c:e0:99:15:82:60:40:a1: 8d:5c:8f:e9:d4:ba:bf:6e:8c:ba:84:2a:3f:05:70:e0:61:54: 0a:80:ea:de:99:32:4c:bc:ab:66:f3:66:3e:65:cd:73:5f:57: f3:8a:6d:e0:e3:94:da:d2:c1:21:86:75:8b:34:9a:a1:2e:30: 5d:d2:33:e2:da:b7:9c:88:98:da:a8:54:97:44:78:c4:e6:54: fc:b9:ee:3a:7f:03:52:3b:93:85:65:9f:c9:df:fb:ca:ce:21: 91:85:64:2c:61:9d:7a:ae:22:a5:4e:73:07:c3:b3:56:e8:06: 0f:88:74:cf:71:70:9f:d0:c0:32:d7:85:e1:f8:aa:4b:c8:b8: a2:37:81:b3:45:33:b4:8f:6a:94:23:f4:ec:7c:0c:06:4f:41: b1:84:02:a0:a1:e2:1d:9c:72:0e:f6:eb:dc:ed:d2:23:b5:11: 84:19:a0:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9qYR1syrejmtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MDFkMzcwMmItMDU1MS00YjQwLWIzYzQtNjA0NDliYzNhMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ4uEvRZU+epUgE7zI/oIsW6hbUiPYAxb4NN M+CMzV6KpU6igxF+L93e8D7RhxckBprv+4+L3coySAmc5jUAx3/yzEYW4eiSZ5cw hIVINXlhddCTX1Dp+/1/xBGMjApUbXQVNTM1bLzeCkGnriOmOWdUVs/cEAhkBpq2 uo+Wld1dkdjfJkFtcRyMm1CVuFQgY+Tencq6YUh6nkpHueK2cYHY8zR4hDBWEF9J Q6G4gRQMui4fmQ+U5ki6HWcHoGJSvjlm54VVDNUA7r8ZqJpkQOmQoWEgIxPB+Rds 6CA8ipW7/n6PD5qJTgjFBbgycxnZtW5GuTI0b0v3CRu+7cEL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQbo8po/stdIm0o5oEJRCUi/b0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGNlZGNlNjAtMjRhNy0z ZGIxLTk0MWEtYzQ0NTNlODNhMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxfbjRVF61sbjMsXkYog4/TtTipe5GMfrvUGvq7VvuExx4nVd8DCCwY EUTx8MIAI5pczDVTCdznLiSHixBF1XiqVoZ1+xChZD9JJlNZV4BcIXwM4JkVgmBA oY1cj+nUur9ujLqEKj8FcOBhVAqA6t6ZMky8q2bzZj5lzXNfV/OKbeDjlNrSwSGG dYs0mqEuMF3SM+Lat5yImNqoVJdEeMTmVPy57jp/A1I7k4Vln8nf+8rOIZGFZCxh nXquIqVOcwfDs1boBg+IdM9xcJ/QwDLXheH4qkvIuKI3gbNFM7SPapQj9Ox8DAZP QbGEAqCh4h2ccg7269zt0iO1EYQZoGw= -----END CERTIFICATE-----Generated at Fri Sep 25 18:03:52 2026 by rpki-client