$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa File: aa2da581-41e1-31da-a819-33c8e5a40b7c.roa (raw, json) Hash identifier: kLAsaKnck47Kws/QnzBWw8ZdrLHP+44VRhIBoFfdqdU= Subject key identifier: 7C:D9:38:75:FB:70:62:38:CF:6B:6B:4E:C8:45:0E:D3:18:29:5C:FC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F497469D1AA819C9C6DA7BF00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 107.167.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:69:d1:aa:81:9c:9c:6d:a7:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0036d919-9ad9-42c1-99d8-34dc89ad9d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:c1:b9:b4:e7:6f:4c:a0:79:8c:1b:52:2c: a3:34:e0:dc:59:ad:ae:78:3c:16:3c:96:d0:b8:44: 77:a1:1e:ba:74:c0:d6:e5:23:2e:2b:fb:8e:18:12: 4c:de:75:c0:df:e1:50:d3:99:2d:3a:65:3a:10:12: ef:11:93:da:70:bc:7c:6f:68:54:dc:15:b9:0a:44: 9c:61:dc:b5:4c:6b:00:5c:9e:14:a7:7f:ab:8c:ab: a6:4d:b7:20:10:74:a0:61:62:66:d6:c1:ba:37:ed: 22:c1:6e:d8:6c:f7:0a:f6:d4:bf:11:73:3c:5b:72: 0c:30:c5:a3:73:93:62:f5:33:74:ec:2e:81:6d:35: e0:c0:35:5e:00:31:e1:d8:00:34:7e:7f:ac:04:a8: 69:c2:53:c0:0a:62:86:30:3a:0a:16:bc:0c:db:c1: e4:09:4e:59:ee:ae:2c:4c:7c:74:4f:a0:c9:99:1c: 3b:51:64:39:50:24:54:0b:2e:0c:aa:53:3d:d5:c1: 24:82:02:a8:70:fe:2e:e1:72:ab:7a:1c:ea:10:38: ea:2e:7d:a5:59:7c:89:d8:d6:ea:c1:99:cf:6d:e5: 99:b8:52:07:57:51:b4:e3:58:e2:08:ad:5f:7b:03: 2e:93:13:36:0a:8e:9b:ec:97:67:61:7e:1c:37:fc: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D9:38:75:FB:70:62:38:CF:6B:6B:4E:C8:45:0E:D3:18:29:5C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2da581-41e1-31da-a819-33c8e5a40b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:89:7b:60:f7:53:f8:0c:b0:d9:f7:63:63:1c:0f:ae:bd:1a: 4f:ad:54:2b:a2:20:ba:1b:7b:db:52:09:d2:4b:b3:46:f6:d1: 11:af:bb:62:c7:02:ee:72:cf:65:70:33:65:a4:19:e6:7b:00: ea:5b:c4:f4:7e:5c:25:6b:1d:99:9f:51:bc:f7:f5:b2:8b:62: ba:51:1d:73:a6:3d:5d:72:eb:57:29:ed:0f:58:44:fb:2a:71: 67:0b:fd:a8:9a:4e:15:10:0b:16:8c:54:fa:89:9d:a4:10:4d: 0c:15:ca:cb:20:cb:37:67:63:6d:8f:1b:de:b0:23:56:b5:f9: cd:26:3f:f5:6b:14:67:58:94:a5:ed:87:14:30:44:c9:a5:92: 0f:64:40:c3:bf:12:fe:d5:a8:53:0c:fe:8a:9b:39:7a:db:72: 6a:28:14:84:e4:47:44:8f:f4:5d:ad:ba:46:ff:20:40:6c:b3: b3:99:8b:b3:b1:26:25:c2:73:f3:f4:76:5a:8f:26:7c:48:91: 2f:5b:0a:65:bb:af:79:7d:c3:cd:fd:a9:2f:f3:d4:6b:15:e8: 9e:cb:84:a0:3d:9f:7b:4e:2e:58:06:0a:98:51:93:1e:9f:7a: 2d:3a:f1:13:40:28:6c:87:04:4f:41:90:db:e3:f8:4d:97:2a: c4:ec:d9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGnRqoGcnG2nvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDAzNmQ5MTktOWFkOS00MmMxLTk5ZDgtMzRkYzg5YWQ5ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3PBubTnb0ygeYwbUiyjNODcWa2ueDwWPJbQ uER3oR66dMDW5SMuK/uOGBJM3nXA3+FQ05ktOmU6EBLvEZPacLx8b2hU3BW5CkSc Ydy1TGsAXJ4Up3+rjKumTbcgEHSgYWJm1sG6N+0iwW7YbPcK9tS/EXM8W3IMMMWj c5Ni9TN07C6BbTXgwDVeADHh2AA0fn+sBKhpwlPACmKGMDoKFrwM28HkCU5Z7q4s THx0T6DJmRw7UWQ5UCRUCy4MqlM91cEkggKocP4u4XKrehzqEDjqLn2lWXyJ2Nbq wZnPbeWZuFIHV1G041jiCK1fewMukxM2Co6b7JdnYX4cN/w9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzZOHX7cGI4z2trTshFDtMYKVz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEyZGE1ODEtNDFlMS0z MWRhLWE4MTktMzNjOGU1YTQwYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWJe2D3U/gMsNn3Y2McD669Gk+tVCuiILobe9tSCdJLs0b20RGvu2LH Au5yz2VwM2WkGeZ7AOpbxPR+XCVrHZmfUbz39bKLYrpRHXOmPV1y61cp7Q9YRPsq cWcL/aiaThUQCxaMVPqJnaQQTQwVyssgyzdnY22PG96wI1a1+c0mP/VrFGdYlKXt hxQwRMmlkg9kQMO/Ev7VqFMM/oqbOXrbcmooFITkR0SP9F2tukb/IEBss7OZi7Ox JiXCc/P0dlqPJnxIkS9bCmW7r3l9w839qS/z1GsV6J7LhKA9n3tOLlgGCphRkx6f ei068RNAKGyHBE9BkNvj+E2XKsTs2V8= -----END CERTIFICATE-----Generated at Fri Sep 25 10:43:49 2026 by rpki-client