$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d3b8810-28ce-3354-b339-8a8e7d81520d.roa File: 3d3b8810-28ce-3354-b339-8a8e7d81520d.roa (raw, json) Hash identifier: 5IfhC8wle7KuEw2ZlHE9lnSjSu3zDSKWlza5/XPh2Nk= Subject key identifier: A3:BD:3C:3D:99:BB:DB:35:61:C1:AE:D4:4A:D2:F0:6B:F2:AE:A7:FC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E5E79FEBD703B4D0B9544F380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d3b8810-28ce-3354-b339-8a8e7d81520d.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 30036 IP address blocks: 108.161.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:79:fe:bd:70:3b:4d:0b:95:44:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=834d78e1-ff59-413e-86d6-bd978bf5763f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:72:2e:e2:fa:18:08:81:30:f4:3f:3d:7e: 9e:31:bf:98:b7:61:82:02:8c:53:69:60:87:2e:f4: 76:8b:88:b1:45:1e:ba:b0:20:a1:24:be:be:1c:cd: c6:cb:bf:89:c6:a8:3a:26:84:66:7a:88:7b:4d:ec: b5:e1:92:64:4a:49:03:90:df:0d:b3:18:90:5e:7b: 55:b6:02:9b:d7:0e:93:19:f0:7c:78:af:9f:2c:27: 72:b2:71:77:c7:39:3d:2d:9c:cc:1c:77:0a:79:61: 94:e6:aa:d2:43:18:c1:1d:2a:84:5c:5b:dd:62:04: 13:84:c8:0d:9d:9f:af:55:33:ab:e9:32:40:86:f4: 4e:e4:cf:96:a5:f1:a1:6c:a0:d0:48:5d:8d:e4:7e: 1e:4d:f1:08:3a:de:a2:e9:1d:23:3b:35:cd:59:ab: a1:36:3e:5c:39:69:a4:45:70:e2:fe:7a:fc:ee:79: 9b:9c:ad:b1:6d:bc:1e:6d:1e:55:a5:c5:ba:22:06: 1f:bd:96:77:20:4b:15:42:e5:4e:3b:e5:0b:67:13: 90:8f:7b:86:ad:85:c7:93:72:05:cd:84:95:2f:45: ee:30:e3:51:b8:d5:54:5b:e9:b0:90:42:0d:41:bb: c3:10:a4:cf:20:b0:0e:a3:b3:28:0d:82:76:d5:07: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:3C:3D:99:BB:DB:35:61:C1:AE:D4:4A:D2:F0:6B:F2:AE:A7:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d3b8810-28ce-3354-b339-8a8e7d81520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b9:e0:62:0f:37:36:45:f7:d6:71:dd:c2:8b:8c:bf:3e:90: c2:76:7a:d5:ff:b0:3f:35:42:71:45:aa:b0:db:fe:7d:e9:73: df:cd:c6:76:f9:13:a8:2d:b7:52:25:bd:f3:e5:c7:a8:46:67: 0e:85:d2:3d:c4:2b:dd:68:50:2c:6c:36:48:d2:13:c2:c6:fa: f4:2c:c2:e3:94:4e:f0:6a:c4:c5:9e:fd:dc:c3:07:57:d8:1f: f5:c0:50:5d:e4:05:7a:47:54:e2:01:a0:9b:07:a9:d1:4a:a2: b4:f7:93:16:54:30:14:ee:fa:02:75:99:cb:79:08:d1:49:96: fc:ff:5c:3d:bb:b2:a4:0c:29:7d:17:f0:97:31:db:8c:22:dc: be:d8:a9:2e:f8:a8:5b:d6:58:89:82:da:cd:59:1b:cf:50:8d: f7:75:b1:71:bf:92:a3:83:68:cb:04:62:c1:53:83:74:d3:01: 8f:8b:d8:b3:a3:e2:b9:37:26:71:ae:3e:ad:cf:11:35:f6:fe: 20:a4:87:a0:6f:8c:4c:f4:84:dc:d2:4e:6d:2a:74:a8:b5:08: 4e:8e:62:3f:07:e9:6f:8a:4e:06:29:c4:c5:59:f9:3f:f4:47: 86:b8:d7:98:92:fa:71:57:b0:4a:23:10:b5:e5:52:cc:58:07: 9d:29:5f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eef69cDtNC5VE84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk ODM0ZDc4ZTEtZmY1OS00MTNlLTg2ZDYtYmQ5NzhiZjU3NjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5yLuL6GAiBMPQ/PX6eMb+Yt2GCAoxTaWCH LvR2i4ixRR66sCChJL6+HM3Gy7+Jxqg6JoRmeoh7Tey14ZJkSkkDkN8NsxiQXntV tgKb1w6TGfB8eK+fLCdysnF3xzk9LZzMHHcKeWGU5qrSQxjBHSqEXFvdYgQThMgN nZ+vVTOr6TJAhvRO5M+WpfGhbKDQSF2N5H4eTfEIOt6i6R0jOzXNWauhNj5cOWmk RXDi/nr87nmbnK2xbbwebR5VpcW6IgYfvZZ3IEsVQuVOO+ULZxOQj3uGrYXHk3IF zYSVL0XuMONRuNVUW+mwkEINQbvDEKTPILAOo7MoDYJ21Qd7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO9PD2Zu9s1YcGu1ErS8Gvyrqf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2QzYjg4MTAtMjhjZS0z MzU0LWIzMzktOGE4ZTdkODE1MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe54GIPNzZF99Zx3cKLjL8+kMJ2etX/sD81QnFFqrDb/n3pc9/Nxnb5 E6gtt1IlvfPlx6hGZw6F0j3EK91oUCxsNkjSE8LG+vQswuOUTvBqxMWe/dzDB1fY H/XAUF3kBXpHVOIBoJsHqdFKorT3kxZUMBTu+gJ1mct5CNFJlvz/XD27sqQMKX0X 8Jcx24wi3L7YqS74qFvWWImC2s1ZG89Qjfd1sXG/kqODaMsEYsFTg3TTAY+L2LOj 4rk3JnGuPq3PETX2/iCkh6BvjEz0hNzSTm0qdKi1CE6OYj8H6W+KTgYpxMVZ+T/0 R4a415iS+nFXsEojELXlUsxYB50pX50= -----END CERTIFICATE-----Generated at Fri Jul 24 08:33:14 2026 by rpki-client