$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa File: 3c57040a-21fd-373d-8b33-4e16f3470c09.roa (raw, json) Hash identifier: ZXb3rvHCm3Un8nYZWDA6JLKf1yVEd5wDl/xErny2EHA= Subject key identifier: 8E:BA:20:29:A7:D9:48:E4:B7:72:80:5C:6D:DB:5C:63:01:10:B1:F9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EF44CB044297F6327C8218300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 30036 IP address blocks: 108.178.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b0:44:29:7f:63:27:c8:21:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=fd498f8a-c000-452c-a9c5-d4a3d3671899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:20:fa:d0:0e:08:f9:64:a0:a2:b4:c4:ff: 73:63:a5:f0:de:ea:85:d3:af:df:3b:42:66:f5:be: f5:bc:66:6c:04:4d:b1:98:96:8c:16:35:bf:46:f0: 7b:54:d2:5c:ce:ad:d3:81:38:c2:ae:c8:93:a6:0b: 27:39:1c:0b:79:72:e9:8d:98:58:c2:17:82:75:16: ba:39:4b:31:1b:4c:e6:69:1b:fc:fd:26:67:8a:e6: ce:d0:7b:3f:e3:af:88:b7:1b:06:0f:d1:9e:1d:f6: 9d:e9:09:28:ea:8a:ec:69:41:65:2c:44:a7:52:a4: 48:f4:02:e8:9b:46:ee:e2:04:f9:1b:0a:4f:a9:22: 52:92:d8:b4:19:e6:06:64:d6:21:46:1f:5e:e1:71: b1:74:aa:c5:aa:7a:df:66:49:c7:6d:7f:5d:23:99: 2b:ce:72:70:d4:d4:d2:aa:02:b4:dc:c9:c4:5e:f9: 0f:9a:5b:56:7f:88:b9:3e:8f:87:98:21:f7:7f:b8: ae:03:8c:84:db:be:cf:e2:63:b1:9f:aa:e1:4d:df: 7c:83:c5:09:01:a7:36:a2:e8:21:b3:29:d4:07:cd: 87:2f:ca:a6:05:4b:a6:73:80:60:d6:82:f8:87:97: 84:01:e1:15:03:49:07:ed:23:d6:8d:44:8d:71:dd: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BA:20:29:A7:D9:48:E4:B7:72:80:5C:6D:DB:5C:63:01:10:B1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c57040a-21fd-373d-8b33-4e16f3470c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:71:56:75:ed:9d:ed:41:cf:37:42:81:c4:98:47:3f:40:af: f3:cc:71:ba:e8:01:30:86:64:38:c8:9c:49:c5:ab:95:00:fa: 4e:09:99:12:6a:7e:51:57:c9:db:db:b8:a6:2d:de:99:ba:94: 32:ed:84:51:86:32:f0:b4:62:1b:93:6b:42:f2:eb:84:49:39: 6f:b1:cd:9f:6e:f3:66:1d:80:bc:a3:9c:02:2f:4d:9f:bd:02: c2:64:ab:18:88:dd:97:ba:58:a1:70:92:66:23:45:92:53:3c: 10:a0:08:07:6a:77:dc:d2:50:9b:1f:ab:78:88:75:14:01:a0: ed:7d:d2:02:42:b4:82:bc:40:eb:bd:d2:71:8d:d5:af:d9:ad: a7:5b:e7:bd:e4:ad:d2:09:21:dc:6f:3b:f4:d4:fa:7d:62:3b: 9c:80:56:71:6e:66:b2:90:01:d0:37:91:1e:f5:5e:b1:64:e4: 4f:b8:c2:d7:e6:d4:fd:f8:f4:45:53:1f:66:68:b8:d4:64:3e: da:90:e6:0b:05:89:1c:fb:b3:0b:f4:a0:5f:13:2c:ec:14:bc: fb:80:f9:86:4a:99:de:54:46:0e:f9:07:e7:a8:ce:ba:05:5e: 34:41:62:2b:5f:b6:59:26:d0:db:1f:e0:e3:1b:10:5c:01:ff: 21:94:66:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLBEKX9jJ8ghgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmQ0OThmOGEtYzAwMC00NTJjLWE5YzUtZDRhM2QzNjcxODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Ig+tAOCPlkoKK0xP9zY6Xw3uqF06/fO0Jm 9b71vGZsBE2xmJaMFjW/RvB7VNJczq3TgTjCrsiTpgsnORwLeXLpjZhYwheCdRa6 OUsxG0zmaRv8/SZniubO0Hs/46+ItxsGD9GeHfad6Qko6orsaUFlLESnUqRI9ALo m0bu4gT5GwpPqSJSkti0GeYGZNYhRh9e4XGxdKrFqnrfZknHbX9dI5krznJw1NTS qgK03MnEXvkPmltWf4i5Po+HmCH3f7iuA4yE277P4mOxn6rhTd98g8UJAac2ough synUB82HL8qmBUumc4Bg1oL4h5eEAeEVA0kH7SPWjUSNcd1Z3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI66ICmn2Ujkt3KAXG3bXGMBELH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2M1NzA0MGEtMjFmZC0z NzNkLThiMzMtNGUxNmYzNDcwYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNxVnXtne1BzzdCgcSYRz9Ar/PMcbroATCGZDjInEnFq5UA+k4JmRJq flFXydvbuKYt3pm6lDLthFGGMvC0YhuTa0Ly64RJOW+xzZ9u82YdgLyjnAIvTZ+9 AsJkqxiI3Ze6WKFwkmYjRZJTPBCgCAdqd9zSUJsfq3iIdRQBoO190gJCtIK8QOu9 0nGN1a/Zradb573krdIJIdxvO/TU+n1iO5yAVnFuZrKQAdA3kR71XrFk5E+4wtfm 1P349EVTH2ZouNRkPtqQ5gsFiRz7swv0oF8TLOwUvPuA+YZKmd5URg75B+eozroF XjRBYitftlkm0Nsf4OMbEFwB/yGUZuw= -----END CERTIFICATE-----Generated at Sat Sep 26 10:42:57 2026 by rpki-client