$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa File: 2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa (raw, json) Hash identifier: yCHgwCIuxT6ac2od34fDU0MfGrPPAI08iUVLq8Y5ZHs= Subject key identifier: BF:20:56:F4:9D:66:A5:80:6F:7D:C5:7B:03:DC:B6:4C:7E:A7:A5:E3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EE7BCB0F905C73E9A0456C300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 108.166.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b0:f9:05:c7:3e:9a:04:56:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=84b0baf3-50af-4707-be3e-f90bb7d3ae8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:31:c0:6c:db:a2:a6:48:65:1a:a6:7f:a1:ad: a8:ad:68:7b:aa:3d:d5:49:0a:d3:df:78:8a:09:98: 7d:7a:fa:f9:1f:83:8d:f8:34:3c:80:8c:c2:12:0a: cf:de:81:d3:6f:ee:b4:0c:ea:00:7a:d0:83:9f:93: 2b:89:de:f7:71:da:7c:68:33:82:c7:8a:df:1e:b2: 08:e2:c3:e7:5b:6f:2f:eb:48:1b:ed:26:97:9f:cb: f3:04:1e:96:d9:6d:37:56:92:40:07:7b:5f:b6:16: 79:b2:ce:73:e5:be:8b:cd:d2:30:cc:04:00:46:c6: 89:44:39:ae:e9:b0:d5:00:08:e1:c5:8b:06:f2:9e: 5a:2b:3a:6b:09:38:42:84:fd:8c:8b:09:ef:58:7f: 57:22:b7:d0:86:49:4c:23:21:74:05:18:b8:d3:7c: 4d:a9:d7:d0:29:0d:70:b0:f9:e7:97:66:89:a7:b2: dc:dd:33:61:20:3b:b9:d9:b4:03:bc:5f:a4:80:49: 22:53:a3:d3:8a:d5:9a:29:2f:31:76:70:b2:4e:c0: e4:52:5b:40:77:af:24:2f:63:ef:a1:40:6c:a8:3f: f7:a2:2f:ea:b6:cf:af:6c:0a:4d:17:d3:6d:0e:61: 4f:bc:a7:ed:28:4d:65:05:cb:8e:ba:2c:3d:05:93: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:56:F4:9D:66:A5:80:6F:7D:C5:7B:03:DC:B6:4C:7E:A7:A5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5e:a3:ad:c3:0f:37:7f:85:2b:18:c4:41:a1:aa:0a:5b:68: a7:e5:12:8e:7d:6c:23:1a:15:5b:50:61:5e:10:ce:8a:7b:35: e3:9b:49:f4:59:58:bb:1a:3f:29:18:37:36:f9:c0:b7:ba:d6: 57:27:f9:f6:a9:24:44:86:b2:e2:67:6c:4d:e0:56:5d:50:d2: d0:ce:49:4b:4f:70:dd:aa:52:78:70:af:43:7d:9a:ca:4a:13: aa:dc:7b:fc:53:e2:af:f8:71:02:d1:0d:48:27:3a:73:42:8c: 3c:50:78:95:b1:95:50:77:8f:bf:b9:94:c0:68:88:01:61:e9: fa:5d:ba:e7:6b:c7:82:78:28:7d:af:8a:ee:f5:0f:9c:a4:57: 04:8e:11:6e:e8:f4:8e:9e:07:01:8e:b4:40:b3:ed:35:c5:5e: 67:48:83:82:fa:61:46:34:13:fd:02:99:b8:7c:31:ca:35:6a: 5f:96:0a:a2:5a:c5:3d:eb:36:de:ab:d9:f3:a5:5c:88:98:a3: 1c:08:29:0a:20:ef:52:da:6e:af:24:2f:c6:d8:9a:a3:82:bf: 7e:92:1d:04:b6:ba:46:51:43:21:94:e4:56:1a:58:dd:0c:01: 11:53:80:b2:2b:0e:01:11:a6:99:f2:b0:c7:d2:2e:fc:78:17: fd:41:fd:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLD5Bcc+mgRWwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ODRiMGJhZjMtNTBhZi00NzA3LWJlM2UtZjkwYmI3ZDNhZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5THAbNuipkhlGqZ/oa2orWh7qj3VSQrT33iK CZh9evr5H4ON+DQ8gIzCEgrP3oHTb+60DOoAetCDn5Mrid73cdp8aDOCx4rfHrII 4sPnW28v60gb7SaXn8vzBB6W2W03VpJAB3tfthZ5ss5z5b6LzdIwzAQARsaJRDmu 6bDVAAjhxYsG8p5aKzprCThChP2MiwnvWH9XIrfQhklMIyF0BRi403xNqdfQKQ1w sPnnl2aJp7Lc3TNhIDu52bQDvF+kgEkiU6PTitWaKS8xdnCyTsDkUltAd68kL2Pv oUBsqD/3oi/qts+vbApNF9NtDmFPvKftKE1lBcuOuiw9BZPO4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8gVvSdZqWAb33FewPctkx+p6XjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmI5MGU1MWMtZjYxZC0z YjczLWI1OGUtMWU0MWEzNTY5YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFeo63DDzd/hSsYxEGhqgpbaKflEo59bCMaFVtQYV4Qzop7NeObSfRZ WLsaPykYNzb5wLe61lcn+fapJESGsuJnbE3gVl1Q0tDOSUtPcN2qUnhwr0N9mspK E6rce/xT4q/4cQLRDUgnOnNCjDxQeJWxlVB3j7+5lMBoiAFh6fpduudrx4J4KH2v iu71D5ykVwSOEW7o9I6eBwGOtECz7TXFXmdIg4L6YUY0E/0Cmbh8Mco1al+WCqJa xT3rNt6r2fOlXIiYoxwIKQog71Labq8kL8bYmqOCv36SHQS2ukZRQyGU5FYaWN0M ARFTgLIrDgERppnysMfSLvx4F/1B/VM= -----END CERTIFICATE-----Generated at Thu Oct 8 15:45:43 2026 by rpki-client