$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa File: 3132e54d-3fe8-35dd-8703-eae748695c8e.roa (raw, json) Hash identifier: rqaTVC7fzaUAbOhwOk+PeScyJ/WlkSn0noAzOU6r5NE= Subject key identifier: 39:BD:88:B7:50:89:B8:1F:4E:34:0F:2E:C0:8D:24:10:A1:26:77:FF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3853693EC33F4A172D00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:38:53:69:3e:c3:3f:4a:17:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=895ed2f3-4aa8-4dd6-825f-e91f6be9ea24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:04:5a:36:26:af:3b:ad:bf:74:9b:3e:e3: d5:4c:6c:46:f5:bc:65:37:c4:30:a5:f4:74:00:cd: 2c:22:ab:54:53:00:fd:a2:53:54:88:47:1d:bc:12: 84:68:fd:b4:f4:5d:bc:87:03:c0:78:05:34:82:2b: 71:2a:e7:6e:8d:b0:7b:de:68:33:bf:6f:53:29:60: ef:fa:e9:ee:99:dc:9f:18:7d:2f:7b:ec:42:b7:8a: be:5e:72:7c:83:fd:e7:0d:80:25:95:d3:ed:6c:a7: 0e:f9:84:f6:6e:ca:cd:09:47:e9:3f:83:e0:9c:6d: 38:5e:13:ee:1a:ca:30:21:98:11:7c:d3:69:d6:5f: 20:c5:69:2a:da:b9:25:dc:2a:21:3e:b4:90:be:9f: f5:7a:17:15:d1:49:8a:bc:fd:f6:d3:64:3d:14:e9: 3a:66:30:87:9e:ab:32:e7:9d:b6:30:d4:59:7c:62: 9f:a3:a2:8b:fd:89:24:61:c3:6c:cd:72:0d:8d:43: 2c:45:79:8b:e6:e9:f5:15:34:5e:24:cf:1a:ca:e3: 17:06:44:05:4a:d0:57:7a:c0:42:ab:17:d4:f3:4c: 6a:1e:da:ff:ef:8f:87:c5:b5:06:50:a1:06:6a:c8: 17:f5:54:20:c8:94:37:56:41:df:f2:a0:95:09:f3: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BD:88:B7:50:89:B8:1F:4E:34:0F:2E:C0:8D:24:10:A1:26:77:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:89:cc:73:c7:09:77:f0:dd:7a:a0:19:32:66:82:54:96:7e: 66:23:c1:36:5f:b6:e2:18:fb:ae:6e:87:ab:69:f9:fd:38:0e: e5:19:22:a8:ad:ab:5c:07:64:f3:b7:fd:1b:15:2a:a8:6a:86: e3:d8:dd:b0:9f:8a:65:55:18:69:2d:dc:d5:03:0b:06:ad:d7: 20:5b:5b:55:b9:e4:9d:be:09:b1:16:11:73:53:32:31:d0:c0: b0:ee:cb:0e:56:c8:f1:73:84:cb:dd:c8:a5:36:10:1b:33:a0: 06:bb:1d:d0:04:22:dd:3c:85:90:13:18:18:b3:58:08:1c:7c: c1:7a:45:4a:08:95:be:8a:89:5e:33:93:f9:7a:2f:da:ef:58: e7:17:7a:80:62:7f:75:9f:3e:cf:38:79:8b:05:6a:50:bb:51: 69:ae:9c:0d:63:d2:6c:4c:69:f8:56:59:1d:35:ee:bd:5d:87: f9:f7:d0:df:54:d7:9e:1e:1f:ad:ec:09:3f:c2:4b:a6:02:d7: a1:63:d2:34:5d:92:f6:72:b6:29:18:85:31:4a:54:8e:09:f8: 23:6f:27:72:fe:18:48:2f:e5:ed:a6:44:97:39:49:60:cc:16: ac:61:d7:c4:73:84:9e:be:a9:ab:0f:2b:83:9a:66:c4:9f:ce: 83:01:24:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnThTaT7DP0oXLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODk1ZWQyZjMtNGFhOC00ZGQ2LTgyNWYtZTkxZjZiZTllYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrsEWjYmrzutv3SbPuPVTGxG9bxlN8QwpfR0 AM0sIqtUUwD9olNUiEcdvBKEaP209F28hwPAeAU0gitxKudujbB73mgzv29TKWDv +unumdyfGH0ve+xCt4q+XnJ8g/3nDYAlldPtbKcO+YT2bsrNCUfpP4PgnG04XhPu GsowIZgRfNNp1l8gxWkq2rkl3CohPrSQvp/1ehcV0UmKvP3202Q9FOk6ZjCHnqsy 5522MNRZfGKfo6KL/YkkYcNszXINjUMsRXmL5un1FTReJM8ayuMXBkQFStBXesBC qxfU80xqHtr/74+HxbUGUKEGasgX9VQgyJQ3VkHf8qCVCfO3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm9iLdQibgfTjQPLsCNJBChJnf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzEzMmU1NGQtM2ZlOC0z NWRkLTg3MDMtZWFlNzQ4Njk1YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6JzHPHCXfw3XqgGTJmglSWfmYjwTZftuIY+65uh6tp+f04DuUZIqit q1wHZPO3/RsVKqhqhuPY3bCfimVVGGkt3NUDCwat1yBbW1W55J2+CbEWEXNTMjHQ wLDuyw5WyPFzhMvdyKU2EBszoAa7HdAEIt08hZATGBizWAgcfMF6RUoIlb6KiV4z k/l6L9rvWOcXeoBif3WfPs84eYsFalC7UWmunA1j0mxMafhWWR017r1dh/n30N9U 154eH63sCT/CS6YC16Fj0jRdkvZytikYhTFKVI4J+CNvJ3L+GEgv5e2mRJc5SWDM Fqxh18RzhJ6+qasPK4OaZsSfzoMBJOY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:09:43 2025 by rpki-client