$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cbe5733-f375-38f4-ab2a-b037c2bc4233.roa File: 2cbe5733-f375-38f4-ab2a-b037c2bc4233.roa (raw, json) Hash identifier: lxD1Asp9VhUONuqcJ0cnAkytOTZzJMBm+vAOoiFVZMQ= Subject key identifier: 70:04:F0:0A:B5:F1:BD:76:48:5C:88:BB:D2:3D:EF:E5:D7:14:3E:6A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BBCDAE33179D379D62798BA40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cbe5733-f375-38f4-ab2a-b037c2bc4233.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 30036 IP address blocks: 108.161.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e3:31:79:d3:79:d6:27:98:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=41912db0-9b60-4ab3-8b35-298052a15b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:ca:e5:91:c8:5d:e7:75:eb:dc:fc:88:78: b7:03:6b:7d:cb:19:d7:7a:67:45:e7:f0:14:00:b5: 19:a8:4b:28:3d:6c:f3:46:78:87:0f:1d:00:13:10: d1:52:8b:ba:81:bd:d8:2d:07:74:6a:1b:3b:80:60: 53:2b:d0:aa:20:08:e2:c0:8a:3d:9b:51:c2:9f:c5: aa:a1:d7:ae:8a:d4:29:c8:a3:92:83:e5:94:c6:c2: 61:0f:ea:b8:1c:33:3e:94:30:ac:9a:05:f0:93:5b: 8f:ce:4e:86:02:26:23:e9:26:f2:39:e7:68:b2:f6: a9:ce:d1:52:42:d8:99:1d:6b:0f:96:9b:bb:d2:33: c1:38:65:36:8f:a3:06:ba:a1:a6:10:38:a8:5d:5c: fe:b9:ed:10:21:ff:35:1e:83:a6:11:a6:8d:04:4f: 8a:f8:6f:d6:80:c2:de:6d:17:00:d7:b6:70:cc:c9: d2:0b:57:b9:3a:4a:91:b1:43:ab:79:7c:a8:e7:b6: 53:34:fd:42:29:7c:f2:ad:4c:5d:c5:8c:72:a6:d1: 63:44:9e:6d:01:b5:8e:10:b2:96:66:3a:7a:02:9a: ca:0a:3d:58:80:96:ea:5c:31:85:ee:5e:f8:a4:d8: f4:a3:c4:d6:c2:59:f0:38:be:21:d2:d3:94:64:48: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:04:F0:0A:B5:F1:BD:76:48:5C:88:BB:D2:3D:EF:E5:D7:14:3E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cbe5733-f375-38f4-ab2a-b037c2bc4233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9d:74:16:b3:43:0f:f6:94:93:77:a9:3d:41:3c:ab:9e:f6: 79:26:e3:d4:0c:94:68:1f:87:b0:14:11:fd:a9:d8:32:ff:d5: e0:31:c5:5c:ae:f5:2d:11:94:92:1d:72:25:c1:69:37:18:d3: df:02:71:e8:a6:c1:bd:5f:52:5d:3d:69:e3:47:29:51:a0:a1: 76:6b:3d:62:a9:cb:80:67:ef:22:92:06:35:77:8a:b8:02:7c: 21:8f:76:87:03:53:dc:08:b0:25:64:8c:61:1a:6d:a2:88:ee: 32:36:99:0f:8c:18:6e:d7:7c:17:b2:cc:36:66:50:40:0b:13: 8e:ac:5b:2f:7a:b7:34:26:eb:b1:fb:f0:38:c5:41:c2:8b:1d: 34:56:38:77:a2:20:aa:82:7f:b7:ac:45:87:dd:8a:77:52:ff: 83:28:7f:ee:6d:cb:8f:4f:04:3d:b8:cd:5e:16:a5:0c:aa:52: 2f:6a:f9:29:51:61:a5:80:bb:59:6e:b5:2b:43:e4:e2:81:01: eb:97:36:c0:6c:88:e9:ae:f3:68:1e:12:0a:fd:8b:98:e4:04: 81:75:cf:48:a7:77:47:b9:2f:45:71:21:a0:98:c9:dc:d7:3e: c5:de:87:a0:84:9b:16:50:51:fb:26:64:37:86:8c:a0:a8:4c: 15:e2:d4:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uMxedN51ieYukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk NDE5MTJkYjAtOWI2MC00YWIzLThiMzUtMjk4MDUyYTE1YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7zK5ZHIXed169z8iHi3A2t9yxnXemdF5/AU ALUZqEsoPWzzRniHDx0AExDRUou6gb3YLQd0ahs7gGBTK9CqIAjiwIo9m1HCn8Wq odeuitQpyKOSg+WUxsJhD+q4HDM+lDCsmgXwk1uPzk6GAiYj6SbyOedosvapztFS QtiZHWsPlpu70jPBOGU2j6MGuqGmEDioXVz+ue0QIf81HoOmEaaNBE+K+G/WgMLe bRcA17ZwzMnSC1e5OkqRsUOreXyo57ZTNP1CKXzyrUxdxYxyptFjRJ5tAbWOELKW Zjp6AprKCj1YgJbqXDGF7l74pNj0o8TWwlnwOL4h0tOUZEi92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAE8Aq18b12SFyIu9I97+XXFD5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmNiZTU3MzMtZjM3NS0z OGY0LWFiMmEtYjAzN2MyYmM0MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmddBazQw/2lJN3qT1BPKue9nkm49QMlGgfh7AUEf2p2DL/1eAxxVyu 9S0RlJIdciXBaTcY098Cceimwb1fUl09aeNHKVGgoXZrPWKpy4Bn7yKSBjV3irgC fCGPdocDU9wIsCVkjGEabaKI7jI2mQ+MGG7XfBeyzDZmUEALE46sWy96tzQm67H7 8DjFQcKLHTRWOHeiIKqCf7esRYfdindS/4Mof+5ty49PBD24zV4WpQyqUi9q+SlR YaWAu1lutStD5OKBAeuXNsBsiOmu82geEgr9i5jkBIF1z0ind0e5L0VxIaCYydzX PsXeh6CEmxZQUfsmZDeGjKCoTBXi1KY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:44 2025 by rpki-client