$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa File: 3132e54d-3fe8-35dd-8703-eae748695c8e.roa (raw, json) Hash identifier: 3BOSdBGoJx8ScJXyD2KeKzC/MKlXzfNaNlQO2Bieji4= Subject key identifier: 03:7D:B4:8F:EE:38:29:82:C6:FA:15:78:52:E3:C0:63:A2:CB:B0:01 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8477030F6C082A0855775BB0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 104.201.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:03:0f:6c:08:2a:08:55:77:5b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=71d82fa1-5ca5-4db9-9d09-53594646e695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a2:68:3d:14:96:db:ca:bf:87:00:7d:f7:cb: 6d:28:1e:61:ae:43:e8:21:ea:ab:e0:3c:25:81:41: e9:d2:57:5a:eb:26:54:be:72:c8:93:41:b1:3d:92: 23:f7:64:c9:4c:da:d0:62:95:2b:94:db:1e:b2:04: 41:b8:3f:a5:65:e4:60:69:9f:62:a2:1a:86:3b:ad: 02:bb:8b:e9:2e:b0:59:a2:f0:df:cc:12:49:42:72: fe:f1:d2:b4:0d:7e:46:bb:ab:61:d3:d5:33:ea:8b: 9b:1e:3e:3b:24:bb:f2:70:e3:cc:5e:1e:a6:ab:82: 8c:82:98:db:43:44:6c:5f:f9:8c:de:15:56:31:4f: b7:59:bc:ff:9f:25:ff:f6:32:1e:73:6c:82:04:3b: c2:34:de:12:3c:c8:ba:1b:e0:75:e2:43:17:86:e6: 09:43:b1:a5:75:63:dd:8a:2a:4f:b1:c3:23:64:7d: 22:6c:e8:a6:a9:bd:23:85:fd:24:d4:3e:33:8f:3b: 44:59:e9:57:7b:9e:2e:d2:6e:31:bd:99:06:e7:f4: 55:91:9a:77:03:68:51:1d:86:67:db:ba:64:c4:0d: 93:7a:4c:24:31:bb:90:61:88:aa:54:b9:09:5e:64: 2d:da:c0:58:12:3d:e3:14:80:37:b9:3b:ae:5e:22: 6a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7D:B4:8F:EE:38:29:82:C6:FA:15:78:52:E3:C0:63:A2:CB:B0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a6:53:dd:4d:39:7f:f8:b3:8f:39:98:41:f5:ef:95:51:ee: e7:3a:a0:b9:f3:34:55:37:98:2a:24:b8:a4:d4:85:20:bb:81: b5:90:b1:cc:4d:66:48:7a:a2:a6:70:b1:23:39:62:68:c1:4d: 38:77:ac:61:b7:71:93:f5:08:b8:ba:54:24:f1:8f:ac:12:44: 02:8a:cb:54:01:6d:83:2b:ec:ea:bb:14:c2:9b:62:de:ad:fe: 77:b2:55:4f:06:ba:8e:f2:1c:1c:52:c8:58:bc:fd:5f:5f:12: 1f:4e:9b:77:05:84:1c:1f:b7:1b:70:ff:d3:16:07:27:57:e1: c5:8f:15:a0:47:52:40:f5:15:d4:0a:3e:7e:3e:a2:16:db:b0: c6:23:cc:6e:32:14:a2:c4:40:8b:58:66:67:be:38:67:c9:83: 90:33:e1:94:fa:bd:04:94:5c:8c:90:4b:b9:96:74:2e:b6:79: 06:8c:89:1f:e7:1f:44:01:4b:f1:97:80:0d:24:97:1f:34:7d: bd:d9:2f:b0:42:17:65:29:91:fb:19:41:6a:70:de:f5:1a:6c: 2e:6d:17:81:1d:f9:30:5b:c9:c8:87:5b:6c:81:c9:8d:3d:37: 17:be:e6:f2:cc:66:14:24:f5:e9:1b:c5:05:fa:e9:1e:c6:c9: da:31:58:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwMPbAgqCFV3W7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk NzFkODJmYTEtNWNhNS00ZGI5LTlkMDktNTM1OTQ2NDZlNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaJoPRSW28q/hwB998ttKB5hrkPoIeqr4Dwl gUHp0lda6yZUvnLIk0GxPZIj92TJTNrQYpUrlNsesgRBuD+lZeRgaZ9iohqGO60C u4vpLrBZovDfzBJJQnL+8dK0DX5Gu6th09Uz6oubHj47JLvycOPMXh6mq4KMgpjb Q0RsX/mM3hVWMU+3Wbz/nyX/9jIec2yCBDvCNN4SPMi6G+B14kMXhuYJQ7GldWPd iipPscMjZH0ibOimqb0jhf0k1D4zjztEWelXe54u0m4xvZkG5/RVkZp3A2hRHYZn 27pkxA2TekwkMbuQYYiqVLkJXmQt2sBYEj3jFIA3uTuuXiJqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN9tI/uOCmCxvoVeFLjwGOiy7ABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzEzMmU1NGQtM2ZlOC0z NWRkLTg3MDMtZWFlNzQ4Njk1YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADamU91NOX/4s485mEH175VR7uc6oLnzNFU3mCokuKTUhSC7gbWQscxN Zkh6oqZwsSM5YmjBTTh3rGG3cZP1CLi6VCTxj6wSRAKKy1QBbYMr7Oq7FMKbYt6t /neyVU8Guo7yHBxSyFi8/V9fEh9Om3cFhBwftxtw/9MWBydX4cWPFaBHUkD1FdQK Pn4+ohbbsMYjzG4yFKLEQItYZme+OGfJg5Az4ZT6vQSUXIyQS7mWdC62eQaMiR/n H0QBS/GXgA0klx80fb3ZL7BCF2UpkfsZQWpw3vUabC5tF4Ed+TBbyciHW2yByY09 Nxe+5vLMZhQk9ekbxQX66R7GydoxWJM= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:20 2026 by rpki-client