$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391a8c14-019d-33ea-ac62-c75672c9dfa6.roa File: 391a8c14-019d-33ea-ac62-c75672c9dfa6.roa (raw, json) Hash identifier: jVsm9NQTAqNfBbyefYQEAtAET96UiCPYLBzIPEiyU/k= Subject key identifier: 4A:53:AD:71:DD:62:05:C3:A9:E7:74:19:EB:5D:43:E4:A5:CE:4D:58 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8476DEF2FABD8D5E4B535780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391a8c14-019d-33ea-ac62-c75672c9dfa6.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 104.201.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:de:f2:fa:bd:8d:5e:4b:53:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=c3b8ea2c-bd38-47a8-a7da-08ac41199542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:ed:bc:53:47:a0:34:15:59:a1:c1:ed:c6: 18:83:b4:10:87:b6:29:9a:bb:7f:dd:2f:33:32:ee: 1c:45:c6:e1:61:92:29:aa:50:b9:a7:04:50:b0:da: 23:56:7a:4a:73:3b:8a:f6:95:60:09:7b:fc:6e:84: bd:99:19:06:0d:dd:a4:ba:07:f8:96:91:66:2c:8c: 18:16:b9:3e:24:64:72:5c:a1:57:c4:3b:01:ca:6c: 05:ee:b3:75:5d:9d:da:c4:1b:6c:9f:67:c8:5c:4b: 1b:05:76:05:ff:10:f0:1c:b5:c4:71:19:c3:b6:59: 30:01:57:60:bc:3f:8d:91:d9:97:eb:9f:84:b3:85: 66:d1:2a:1c:94:6c:55:ab:4d:d6:e9:bc:ac:ac:ae: 40:1c:58:cf:b0:bf:f7:c1:50:fd:a3:c4:b9:a4:1f: 6b:b8:02:46:1c:56:2e:1f:a6:51:f5:14:6b:9c:d7: 09:9e:0e:b8:a7:89:4f:71:ff:e5:da:90:8a:80:6a: b4:25:31:7b:a9:90:24:a2:72:15:b2:ab:74:4a:70: 0e:b3:3b:56:8f:c2:14:7f:0b:21:3a:4c:f0:50:63: a5:2c:e0:2e:d3:47:98:9e:c3:11:c3:58:6c:1a:45: 72:25:7d:26:79:cc:25:68:fa:d8:96:dc:66:37:31: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:53:AD:71:DD:62:05:C3:A9:E7:74:19:EB:5D:43:E4:A5:CE:4D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391a8c14-019d-33ea-ac62-c75672c9dfa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ce:80:92:0a:f5:ae:40:12:a8:ae:f6:17:92:ff:4b:b1:75: e9:0a:ed:9e:d8:55:ac:42:2b:8a:64:59:6b:8a:62:c7:a7:df: 60:00:3a:cc:26:48:ac:af:b9:be:25:64:95:0e:9a:d4:75:6b: 77:17:54:28:47:d9:df:5f:ec:8c:5a:d3:33:60:73:7d:d1:be: 0c:60:6f:17:e8:dc:91:4c:2a:03:e5:d9:8d:b6:c6:df:5b:09: 15:0d:47:4a:ce:d7:25:64:2f:8f:be:67:86:ee:16:69:83:91: 1c:c0:bc:d5:6e:fc:e3:9d:24:0d:1d:af:6f:27:58:ac:c3:0e: 0e:e7:77:7e:bd:55:5e:45:91:88:e7:f6:f2:6b:ea:ef:3d:1e: 62:65:20:30:a4:80:04:b3:e9:b3:f5:73:c1:2c:00:85:3c:a9: ea:21:3c:5f:fa:d6:3a:47:4b:13:e9:2b:f0:8a:c5:92:11:69: 3d:1f:a4:d0:82:8e:0c:53:f2:4f:0e:de:c9:01:45:1a:c4:e4: 10:11:51:a1:3d:f0:e5:71:80:9c:02:13:7a:85:75:4b:5c:9f: f3:97:bd:c2:5d:8b:3b:4e:eb:6f:30:d4:dc:66:1c:cc:e9:17: 3a:1e:6f:05:bc:84:3d:6a:c1:df:87:fa:dd:5b:0c:e5:b2:6f: 7c:fa:ee:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdt7y+r2NXktTV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YzNiOGVhMmMtYmQzOC00N2E4LWE3ZGEtMDhhYzQxMTk5NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS/tvFNHoDQVWaHB7cYYg7QQh7Ypmrt/3S8z Mu4cRcbhYZIpqlC5pwRQsNojVnpKczuK9pVgCXv8boS9mRkGDd2kugf4lpFmLIwY Frk+JGRyXKFXxDsBymwF7rN1XZ3axBtsn2fIXEsbBXYF/xDwHLXEcRnDtlkwAVdg vD+NkdmX65+Es4Vm0SoclGxVq03W6bysrK5AHFjPsL/3wVD9o8S5pB9ruAJGHFYu H6ZR9RRrnNcJng64p4lPcf/l2pCKgGq0JTF7qZAkonIVsqt0SnAOsztWj8IUfwsh OkzwUGOlLOAu00eYnsMRw1hsGkVyJX0mecwlaPrYltxmNzG7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpTrXHdYgXDqed0GetdQ+Slzk1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzkxYThjMTQtMDE5ZC0z M2VhLWFjNjItYzc1NjcyYzlkZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPOgJIK9a5AEqiu9heS/0uxdekK7Z7YVaxCK4pkWWuKYsen32AAOswm SKyvub4lZJUOmtR1a3cXVChH2d9f7Ixa0zNgc33Rvgxgbxfo3JFMKgPl2Y22xt9b CRUNR0rO1yVkL4++Z4buFmmDkRzAvNVu/OOdJA0dr28nWKzDDg7nd369VV5FkYjn 9vJr6u89HmJlIDCkgASz6bP1c8EsAIU8qeohPF/61jpHSxPpK/CKxZIRaT0fpNCC jgxT8k8O3skBRRrE5BARUaE98OVxgJwCE3qFdUtcn/OXvcJdiztO628w1NxmHMzp FzoebwW8hD1qwd+H+t1bDOWyb3z67vY= -----END CERTIFICATE-----Generated at Sun Mar 1 20:56:22 2026 by rpki-client