$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa File: d67fdd97-1889-3aed-be21-4c33f4030ea7.roa (raw, json) Hash identifier: iEpeKQTqtin21KCMosJs7sXaI/rqn8+DJkPA8gI8FSc= Subject key identifier: E3:20:88:E1:24:98:BA:2D:B3:3F:D7:42:08:7C:DF:D7:A0:79:7D:80 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D3B34D65B89F2C53739AC3F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 107.167.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d6:5b:89:f2:c5:37:39:ac:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=0ea07619-a0ee-4c18-aa6a-fec98f17ef2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:2d:36:fa:c9:e1:c6:69:93:87:02:75:9d: 22:21:72:6a:e0:e3:e7:37:16:68:71:65:77:cb:07: 9f:b7:90:02:e8:70:5c:3b:c8:9f:c4:1b:b3:90:01: d3:5e:e6:75:9f:a9:56:f8:23:6b:5b:3c:27:0a:ad: 0c:5b:4a:ec:9b:a3:3f:71:c7:58:da:1b:c8:cd:17: aa:33:25:7e:32:db:4c:08:c6:08:ed:f2:0d:29:74: 01:b6:27:40:ba:e9:5a:f4:eb:37:73:76:93:54:9d: 77:84:77:02:13:99:02:1b:b9:20:48:9b:10:23:30: 63:44:f0:c5:f9:e6:63:a5:5f:e6:f9:e3:76:40:d6: e1:67:62:e8:35:65:f5:c7:29:1e:8f:51:52:e2:20: 1f:4f:b6:97:47:7f:ac:bc:a9:25:04:bc:c7:34:30: 42:0c:b4:f9:cf:c0:eb:ec:3a:d7:9a:d5:f1:6b:3b: 2e:10:36:74:84:57:08:01:15:0e:97:3b:35:dc:11: 8e:93:e7:6f:71:7f:3d:50:f2:68:52:00:f7:73:fc: 7b:28:7f:09:bc:5b:2a:87:dd:fb:42:63:56:c9:99: ae:0e:33:74:bc:59:a2:0d:5f:6b:2f:4b:74:01:e9: 0b:84:b4:b3:0f:8b:5f:74:a8:f2:7f:fd:ff:e2:dd: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:88:E1:24:98:BA:2D:B3:3F:D7:42:08:7C:DF:D7:A0:79:7D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0a:7c:69:00:42:4b:61:e4:30:e1:e7:e3:4e:3c:2e:8d:96: 0b:8f:95:4b:f2:04:c1:b3:67:61:bb:ce:c8:86:00:d3:86:a3: d3:b9:42:3b:18:6d:d1:6a:52:ff:12:ec:77:e8:22:2f:f3:26: fb:a3:b7:c3:73:c8:40:7b:14:37:91:d1:a5:e2:4d:96:cf:99: 32:9d:c2:09:ff:31:9a:67:cf:19:00:c5:3d:d4:1b:66:95:bf: 61:90:75:e1:3f:c4:b3:92:74:cd:cc:67:a7:01:7c:d2:b1:48: 2f:dd:28:fd:7e:8e:1a:8d:1b:7e:c6:c5:b0:6d:65:ec:18:54: 29:39:5e:97:ee:b0:dc:d8:11:fa:e1:d3:a8:c3:79:f1:90:72: 0e:c2:df:3b:55:9c:a8:b3:8b:a4:a6:93:96:6e:3a:87:f7:1f: 00:1d:da:ab:e1:7c:96:71:72:3f:4f:22:1d:42:4e:bb:c1:60: ed:03:93:40:ed:12:47:a0:f6:af:d8:34:55:74:fb:ed:0d:e7: 7e:62:b0:48:82:b6:90:ec:14:7d:b2:39:f5:14:5b:b7:4a:6e: e3:51:9f:09:7e:14:69:c1:2a:f9:1d:35:62:d7:17:86:b6:ab: e6:99:4f:38:6b:5b:d7:73:1a:12:75:2f:a5:4c:c4:44:d5:e0: 5d:9b:61:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNZbifLFNzmsP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk MGVhMDc2MTktYTBlZS00YzE4LWFhNmEtZmVjOThmMTdlZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvUtNvrJ4cZpk4cCdZ0iIXJq4OPnNxZocWV3 yweft5AC6HBcO8ifxBuzkAHTXuZ1n6lW+CNrWzwnCq0MW0rsm6M/ccdY2hvIzReq MyV+MttMCMYI7fINKXQBtidAuula9Os3c3aTVJ13hHcCE5kCG7kgSJsQIzBjRPDF +eZjpV/m+eN2QNbhZ2LoNWX1xykej1FS4iAfT7aXR3+svKklBLzHNDBCDLT5z8Dr 7DrXmtXxazsuEDZ0hFcIARUOlzs13BGOk+dvcX89UPJoUgD3c/x7KH8JvFsqh937 QmNWyZmuDjN0vFmiDV9rL0t0AekLhLSzD4tfdKjyf/3/4t0NjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMgiOEkmLotsz/XQgh839egeX2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDY3ZmRkOTctMTg4OS0z YWVkLWJlMjEtNGMzM2Y0MDMwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAKfGkAQkth5DDh5+NOPC6NlguPlUvyBMGzZ2G7zsiGANOGo9O5QjsY bdFqUv8S7HfoIi/zJvujt8NzyEB7FDeR0aXiTZbPmTKdwgn/MZpnzxkAxT3UG2aV v2GQdeE/xLOSdM3MZ6cBfNKxSC/dKP1+jhqNG37GxbBtZewYVCk5XpfusNzYEfrh 06jDefGQcg7C3ztVnKizi6Smk5ZuOof3HwAd2qvhfJZxcj9PIh1CTrvBYO0Dk0Dt Ekeg9q/YNFV0++0N535isEiCtpDsFH2yOfUUW7dKbuNRnwl+FGnBKvkdNWLXF4a2 q+aZTzhrW9dzGhJ1L6VMxETV4F2bYWk= -----END CERTIFICATE-----Generated at Thu Mar 26 05:47:59 2026 by rpki-client