$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa File: af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa (raw, json) Hash identifier: 4C8+NWtxbg9U1SGMaUOtwtIB/pHt5eXy43WYMSvbzSM= Subject key identifier: 29:44:F3:F2:C7:FB:8F:0C:3E:7B:EE:2A:09:B7:BA:33:1E:14:8A:B8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E51E9E1924AE6423C63E2A700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 30036 IP address blocks: 108.178.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:e1:92:4a:e6:42:3c:63:e2:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=198d6712-2b3a-435b-890f-68fef48ee6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:df:71:2a:26:a8:af:1c:aa:b2:26:94:b7: 83:4b:37:cc:14:30:8f:22:63:86:47:c9:28:0e:6a: f0:05:9a:f9:9d:d5:bb:74:c3:81:64:ee:ae:93:22: 65:d5:0f:66:a6:ea:49:06:4d:25:99:d2:87:7d:ac: 36:ff:02:4e:e9:a3:d0:8e:f7:95:80:ba:7a:3e:83: cf:23:b6:34:81:b9:fa:04:58:f8:dd:52:e9:7b:d5: be:98:d1:58:48:e3:d2:45:51:db:ce:19:4d:9a:99: cf:65:f0:4b:2a:40:5d:98:a6:be:10:20:31:fa:b0: e1:e1:5d:0f:9b:18:2e:d9:51:6a:40:38:a7:7f:34: 88:ab:dd:43:12:f1:d1:57:a3:e5:bc:ae:90:02:a6: 28:3f:6d:7f:e1:b4:64:ad:02:2d:37:33:f9:2f:ec: 6e:62:ec:48:93:e1:e8:58:2e:07:22:67:d7:e3:14: ee:cc:a8:0c:cc:c1:e4:66:48:e1:27:ce:ad:b8:13: 57:ce:84:32:d7:f8:9c:6d:43:d2:7a:d3:ae:f2:8c: fa:3d:21:31:19:6a:bd:bc:91:0b:78:86:c5:1e:ed: 20:89:21:3a:3e:6c:e1:e2:d9:0d:26:ae:d4:e4:0d: a4:4c:b0:a4:b5:e7:42:a2:3e:be:7c:e4:ae:30:4e: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:44:F3:F2:C7:FB:8F:0C:3E:7B:EE:2A:09:B7:BA:33:1E:14:8A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af50b1a0-b749-35e1-af0a-03a5e6201e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:dc:e6:db:92:50:97:ec:c2:b4:ba:29:f5:4a:46:c0:0d:79: 66:8b:df:d3:79:be:33:c8:11:c1:e3:0a:92:9f:73:d9:96:e9: aa:ca:78:cd:da:25:eb:44:b1:8f:75:d5:fc:0a:b8:07:0e:11: 62:c1:7c:f1:30:d8:ce:f0:6a:c4:f7:74:d7:c9:df:6f:3a:17: f4:f1:4d:63:75:13:02:37:e3:97:fe:61:ca:f3:e0:5c:ae:b9: 04:90:98:af:b9:bb:13:76:91:d5:2d:2b:10:d5:47:ed:9e:75: 1d:b3:06:2b:b7:b5:4a:ba:ae:bf:3b:b3:5a:3b:58:fc:1d:a7: fd:da:59:ea:90:5f:d4:05:42:78:64:2d:3d:21:0c:59:de:b1: a0:99:99:6d:60:15:09:44:0b:07:55:40:8b:eb:35:00:da:44: 60:54:96:3f:3b:37:e5:11:8a:d4:39:ad:5e:2f:d9:c0:99:b7: ad:eb:15:76:85:08:ae:7f:04:da:3a:d9:f4:89:af:22:f0:83: 61:d8:f4:f9:d9:23:f8:51:06:12:ed:30:8a:c4:33:c7:22:f9: ca:6e:3a:52:81:95:73:db:e7:64:0d:2a:58:57:06:d7:10:d5: 5a:d4:93:ed:bc:c0:b9:c4:09:f7:83:8b:49:66:b6:d4:f3:2d: 5a:88:3e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6eGSSuZCPGPipwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk MTk4ZDY3MTItMmIzYS00MzViLTg5MGYtNjhmZWY0OGVlNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplDfcSomqK8cqrImlLeDSzfMFDCPImOGR8ko DmrwBZr5ndW7dMOBZO6ukyJl1Q9mpupJBk0lmdKHfaw2/wJO6aPQjveVgLp6PoPP I7Y0gbn6BFj43VLpe9W+mNFYSOPSRVHbzhlNmpnPZfBLKkBdmKa+ECAx+rDh4V0P mxgu2VFqQDinfzSIq91DEvHRV6PlvK6QAqYoP21/4bRkrQItNzP5L+xuYuxIk+Ho WC4HImfX4xTuzKgMzMHkZkjhJ86tuBNXzoQy1/icbUPSetOu8oz6PSExGWq9vJEL eIbFHu0giSE6Pmzh4tkNJq7U5A2kTLCktedCoj6+fOSuME4xdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClE8/LH+48MPnvuKgm3ujMeFIq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWY1MGIxYTAtYjc0OS0z NWUxLWFmMGEtMDNhNWU2MjAxZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzc5tuSUJfswrS6KfVKRsANeWaL39N5vjPIEcHjCpKfc9mW6arKeM3a JetEsY911fwKuAcOEWLBfPEw2M7wasT3dNfJ3286F/TxTWN1EwI345f+Ycrz4Fyu uQSQmK+5uxN2kdUtKxDVR+2edR2zBiu3tUq6rr87s1o7WPwdp/3aWeqQX9QFQnhk LT0hDFnesaCZmW1gFQlECwdVQIvrNQDaRGBUlj87N+URitQ5rV4v2cCZt63rFXaF CK5/BNo62fSJryLwg2HY9PnZI/hRBhLtMIrEM8ci+cpuOlKBlXPb52QNKlhXBtcQ 1VrUk+28wLnECfeDi0lmttTzLVqIPjk= -----END CERTIFICATE-----Generated at Fri Jul 24 11:36:06 2026 by rpki-client