$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d40a89a2-1671-3a29-af96-9af8f9a4518d.roa File: d40a89a2-1671-3a29-af96-9af8f9a4518d.roa (raw, json) Hash identifier: 4MRNxL5AUwX2G3BT6t/Xo0vq4svCx4Kexq/iCeJpa6o= Subject key identifier: 18:51:E5:C2:4E:82:C1:A9:66:93:02:B1:8D:F7:0C:CE:53:40:CE:99 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EE7BC97ED8E6594C69B5B1C80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d40a89a2-1671-3a29-af96-9af8f9a4518d.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 107.167.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:97:ed:8e:65:94:c6:9b:5b:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=6be63347-34fc-4292-a0e9-07af1a6d559d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:7c:92:be:e6:d6:f5:56:f8:8e:64:97:66: 30:42:79:6f:80:28:8e:2e:89:a8:5d:2b:7e:65:b7: da:dd:be:0e:a7:c7:d6:89:7a:82:1c:8b:77:9e:75: 92:c5:c2:6a:76:51:69:36:cb:69:fc:3c:4b:84:80: 39:b5:a8:3e:c2:9f:71:84:c7:df:e9:46:ff:1f:e6: a3:5a:ed:3b:7e:7d:da:f9:10:ae:26:b7:b6:43:b5: 24:97:84:55:78:11:73:8e:7a:5a:5d:7d:d9:c9:e1: 86:53:3e:f6:fe:9c:d1:6c:89:80:e1:f0:9d:d0:c4: c3:d6:63:1e:2b:a0:0a:9c:49:e4:a2:00:e2:bd:05: ee:38:62:fd:bd:4f:3b:cf:03:33:98:64:24:73:6d: 42:f4:57:31:da:4c:28:4f:67:a0:98:fb:ba:f7:5b: 71:c1:6f:29:6f:fb:a4:4a:c4:2b:d0:85:af:2e:99: b5:72:20:b6:e4:e1:04:57:04:b8:04:1b:35:1f:9d: e3:4f:95:86:2d:d8:36:c8:30:45:72:a5:05:75:7b: 02:b0:b4:c9:ed:26:c9:c4:50:c8:fd:b1:5d:5f:62: af:82:59:72:35:f1:74:b0:44:11:2f:43:76:b5:e0: 1d:f8:7d:25:d7:4e:56:c7:3e:f2:7e:e2:db:89:84: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:51:E5:C2:4E:82:C1:A9:66:93:02:B1:8D:F7:0C:CE:53:40:CE:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d40a89a2-1671-3a29-af96-9af8f9a4518d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1d:7f:5f:bd:0b:08:1b:08:44:d9:42:d1:47:94:a6:cc:bb: f3:4c:96:63:01:e7:7c:af:65:e7:68:3f:48:37:80:c9:49:29: b0:51:cc:d5:9a:fc:77:f0:9b:f2:a6:ee:30:e0:b9:26:93:1e: 13:1f:ef:ff:6e:8f:b3:ff:13:bb:9a:16:bb:66:15:ce:cf:62: 9e:52:34:82:e4:d5:b1:cd:be:af:8a:a8:9d:69:81:ca:c0:81: dd:59:bf:f9:e5:55:1b:f0:1e:b8:66:07:50:b0:58:63:09:39: 12:17:14:ec:75:d2:9e:eb:f6:5f:f2:7b:fc:d2:c6:9b:d1:00: 50:b9:b6:82:ea:d1:27:82:40:af:5a:34:33:57:63:ab:a5:d8: 9b:8e:88:15:8b:c1:ee:ae:0f:09:42:dc:02:46:b6:3d:ca:a8: 4e:6c:94:07:29:65:3b:53:89:dc:f8:f2:a2:6e:38:f5:9e:c3: 28:c1:b1:bd:71:7a:4e:dc:c2:bb:b7:60:60:ae:59:c7:ad:22: 52:91:aa:77:61:bc:2e:be:60:f7:03:9a:e3:14:75:42:35:91: 62:2e:e3:9d:ad:0f:4b:01:e7:27:40:ae:c6:3b:79:66:ef:62: f6:85:19:53:08:18:89:88:c6:97:b4:15:0e:2a:fd:8f:42:82: ca:d6:2f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJftjmWUxptbHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NmJlNjMzNDctMzRmYy00MjkyLWEwZTktMDdhZjFhNmQ1NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/t8kr7m1vVW+I5kl2YwQnlvgCiOLomoXSt+ Zbfa3b4Op8fWiXqCHIt3nnWSxcJqdlFpNstp/DxLhIA5tag+wp9xhMff6Ub/H+aj Wu07fn3a+RCuJre2Q7Ukl4RVeBFzjnpaXX3ZyeGGUz72/pzRbImA4fCd0MTD1mMe K6AKnEnkogDivQXuOGL9vU87zwMzmGQkc21C9Fcx2kwoT2egmPu691txwW8pb/uk SsQr0IWvLpm1ciC25OEEVwS4BBs1H53jT5WGLdg2yDBFcqUFdXsCsLTJ7SbJxFDI /bFdX2KvgllyNfF0sEQRL0N2teAd+H0l105Wxz7yfuLbiYScUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhR5cJOgsGpZpMCsY33DM5TQM6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDQwYTg5YTItMTY3MS0z YTI5LWFmOTYtOWFmOGY5YTQ1MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHodf1+9CwgbCETZQtFHlKbMu/NMlmMB53yvZedoP0g3gMlJKbBRzNWa /Hfwm/Km7jDguSaTHhMf7/9uj7P/E7uaFrtmFc7PYp5SNILk1bHNvq+KqJ1pgcrA gd1Zv/nlVRvwHrhmB1CwWGMJORIXFOx10p7r9l/ye/zSxpvRAFC5toLq0SeCQK9a NDNXY6ul2JuOiBWLwe6uDwlC3AJGtj3KqE5slAcpZTtTidz48qJuOPWewyjBsb1x ek7cwru3YGCuWcetIlKRqndhvC6+YPcDmuMUdUI1kWIu452tD0sB5ydArsY7eWbv YvaFGVMIGImIxpe0FQ4q/Y9CgsrWL1A= -----END CERTIFICATE-----Generated at Mon Sep 28 18:05:42 2026 by rpki-client