$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3878af0a-7b19-3244-a212-1b8f8d69eb41.roa File: 3878af0a-7b19-3244-a212-1b8f8d69eb41.roa (raw, json) Hash identifier: h/R6BX4N/qJe9CZLjm5ZDVR7WHvX+n4RZpks2akNqT0= Subject key identifier: B7:21:88:5F:1B:E6:E4:F3:20:41:A2:D6:7B:8B:74:1A:54:07:B1:97 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8476E1907B1DB90429AACCC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3878af0a-7b19-3244-a212-1b8f8d69eb41.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 104.201.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:e1:90:7b:1d:b9:04:29:aa:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=6c68131d-cf7f-40ff-9c28-6e07e1964afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:c7:23:36:37:d5:2e:74:cc:18:2d:f6:fc: 97:c0:42:48:6a:75:dc:cf:c0:52:3c:cc:fe:d1:f6: ae:0e:63:a2:2c:10:79:ad:5d:d9:73:73:a4:29:c0: 33:a0:c4:8f:d9:55:44:76:5a:cc:7e:37:ad:02:4f: c2:b6:bc:47:2f:6f:4c:00:8b:1c:6c:27:e5:ca:28: 7b:45:e6:f7:74:22:3a:45:b1:88:85:bf:ed:f0:c1: c7:8a:13:5d:5e:c9:62:7c:83:1a:7b:07:75:d1:01: c9:c9:68:4b:98:ce:be:34:f2:3f:d2:79:a5:7c:1e: 5b:0c:3a:10:7e:36:c8:98:c6:f5:60:02:d4:0b:cb: 60:7b:78:92:a9:b7:11:07:cf:4e:32:2c:08:f5:9e: d5:d9:85:dc:86:b2:c7:69:9f:b9:b6:af:29:15:cb: f6:8f:be:58:3d:cf:12:b0:33:a5:ed:d4:62:99:f6: c1:dc:fa:05:66:32:33:96:f1:48:1f:d3:c0:fe:e2: b0:32:30:94:24:79:0d:3f:1e:9d:63:ae:a3:92:70: be:9b:71:54:f5:4f:b3:db:6e:5b:30:86:6b:dc:9a: 67:a2:1d:aa:ab:54:56:cb:dd:1a:f8:46:11:4e:8a: 08:07:e2:19:2e:03:3e:d8:ee:c1:94:ae:bc:5d:ff: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:88:5F:1B:E6:E4:F3:20:41:A2:D6:7B:8B:74:1A:54:07:B1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3878af0a-7b19-3244-a212-1b8f8d69eb41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:56:c0:0c:b9:8e:3d:57:4a:71:ec:f5:1b:7d:72:51:73:b7: 94:7c:66:d3:e5:76:2a:3c:2b:2c:14:00:9c:be:19:8e:d9:c0: 2c:1a:03:fc:c2:0f:6e:34:8a:6b:73:32:5f:96:6a:bb:7a:9c: af:88:60:d3:07:01:1f:7d:0f:48:bb:cf:55:a5:1e:86:ed:f1: b1:de:59:d4:d9:58:5b:f4:96:37:18:32:79:df:e8:65:17:2d: a4:bb:79:0e:75:67:d6:97:34:b6:37:34:06:74:5e:0c:ef:e5: e5:e8:4b:34:90:6a:87:71:6e:68:45:1d:41:9a:5c:01:77:9f: b6:32:4c:d1:73:60:1b:63:82:63:6c:81:42:8a:fc:16:a6:77: 48:45:d5:06:a9:0e:5f:02:1f:04:ec:bb:42:55:4b:6c:ff:2c: b1:db:08:1c:13:8a:c3:d1:b5:c3:db:92:af:7e:bf:46:9c:3f: 3b:1c:4c:13:00:64:17:ad:83:85:4a:37:f1:1c:15:6e:92:46: 2d:93:ce:30:ce:a8:d3:21:0f:9c:16:5f:1d:f1:91:9f:70:7a: bc:a5:3b:34:80:f3:42:c5:39:dd:81:e3:88:6d:d8:f9:56:46: 10:30:e9:1d:85:27:cc:43:8f:40:ff:f1:e2:3d:fc:16:bc:e1: 26:9b:e5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEduGQex25BCmqzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk NmM2ODEzMWQtY2Y3Zi00MGZmLTljMjgtNmUwN2UxOTY0YWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1DHIzY31S50zBgt9vyXwEJIanXcz8BSPMz+ 0fauDmOiLBB5rV3Zc3OkKcAzoMSP2VVEdlrMfjetAk/CtrxHL29MAIscbCflyih7 Reb3dCI6RbGIhb/t8MHHihNdXslifIMaewd10QHJyWhLmM6+NPI/0nmlfB5bDDoQ fjbImMb1YALUC8tge3iSqbcRB89OMiwI9Z7V2YXchrLHaZ+5tq8pFcv2j75YPc8S sDOl7dRimfbB3PoFZjIzlvFIH9PA/uKwMjCUJHkNPx6dY66jknC+m3FU9U+z225b MIZr3Jpnoh2qq1RWy90a+EYRTooIB+IZLgM+2O7BlK68Xf8c5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLchiF8b5uTzIEGi1nuLdBpUB7GXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzg3OGFmMGEtN2IxOS0z MjQ0LWEyMTItMWI4ZjhkNjllYjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBWwAy5jj1XSnHs9Rt9clFzt5R8ZtPldio8KywUAJy+GY7ZwCwaA/zC D240imtzMl+Wart6nK+IYNMHAR99D0i7z1WlHobt8bHeWdTZWFv0ljcYMnnf6GUX LaS7eQ51Z9aXNLY3NAZ0Xgzv5eXoSzSQaodxbmhFHUGaXAF3n7YyTNFzYBtjgmNs gUKK/Bamd0hF1QapDl8CHwTsu0JVS2z/LLHbCBwTisPRtcPbkq9+v0acPzscTBMA ZBetg4VKN/EcFW6SRi2TzjDOqNMhD5wWXx3xkZ9werylOzSA80LFOd2B44ht2PlW RhAw6R2FJ8xDj0D/8eI9/Ba84Sab5a8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:55 2026 by rpki-client