$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f9fa1ae-55e8-30f4-b476-e8ff81cfa272.roa File: 3f9fa1ae-55e8-30f4-b476-e8ff81cfa272.roa (raw, json) Hash identifier: hMjY42aVXnhUOmWLWqsnWLdWYfbxwprD0QhyjrSopQU= Subject key identifier: 4A:FA:56:25:12:A4:8F:A9:DB:11:10:47:91:B1:49:69:34:6A:86:6E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3AD99514EB9C4AA76100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f9fa1ae-55e8-30f4-b476-e8ff81cfa272.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3a:d9:95:14:eb:9c:4a:a7:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=7d03540a-a294-4536-a6fc-2cd4ad885527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:a4:53:a8:ad:55:0f:6f:01:9b:03:1d:60: 43:9e:79:fa:73:49:91:f6:a3:98:06:1e:58:55:ac: 5d:87:b6:68:24:0f:23:09:60:dd:f0:8b:de:d6:8f: c1:c1:c1:27:58:60:8e:f9:dc:05:3e:96:41:3c:80: 20:9f:a7:62:99:b4:e6:ba:3e:43:79:f7:2c:b0:f6: d0:1e:dc:20:c9:d1:22:e3:29:24:1e:dc:d9:6e:73: 30:c8:1c:e9:0a:21:94:1b:f9:41:eb:a9:75:fe:cd: a3:46:62:df:c8:62:a3:85:bf:6a:f4:b2:a4:2c:27: 1a:4d:63:9a:4f:48:c2:0d:f3:31:97:c6:db:da:df: 8a:4b:61:46:65:38:92:57:b1:df:ee:a7:ca:a2:db: 09:16:79:87:31:2b:7d:a1:17:eb:dc:32:a2:fe:0c: dd:f2:f1:85:e8:21:1a:01:4e:5c:a7:4b:40:4a:a6: 85:55:35:77:72:0d:dc:f5:d8:81:3d:84:a2:fb:05: c0:e0:d7:34:b1:fb:29:03:2f:c2:8e:2f:37:e7:4b: 23:a0:19:54:7d:b9:b4:ca:88:89:56:6a:ce:11:e2: 2c:bd:02:3c:14:7d:4c:a1:24:18:5b:ef:78:fe:61: 3a:12:42:f9:ed:00:91:8a:21:f5:00:df:b6:e7:2e: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FA:56:25:12:A4:8F:A9:DB:11:10:47:91:B1:49:69:34:6A:86:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f9fa1ae-55e8-30f4-b476-e8ff81cfa272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9c:97:ee:c6:b0:8f:3e:dd:f9:06:eb:7d:9e:f6:fa:fd:a8: f7:49:83:60:ad:2a:70:31:af:8b:c3:0d:f2:d1:9b:b0:8c:98: a8:16:e7:cb:d6:6f:15:77:6c:c9:40:40:f0:f3:c6:4e:e8:35: f0:5b:9e:b8:5a:28:00:84:53:39:22:54:6a:db:af:0d:62:50: 72:cd:54:95:2d:e0:c4:0a:4a:97:83:c1:a5:c3:51:43:59:76: 82:57:3d:97:62:0f:c5:33:f7:5f:79:75:d4:12:a6:b9:42:5b: 32:f9:47:0f:97:86:44:65:fe:80:d0:60:05:88:c8:5f:6c:1b: 91:41:91:79:61:a9:8e:5d:99:71:35:08:e3:49:05:aa:ce:f0: 18:38:21:57:a7:c5:4b:2c:04:00:18:bb:f6:b9:b4:e0:e3:cd: 51:56:5f:89:9d:2f:42:6a:e4:d4:b5:54:fe:84:6a:ae:71:21: 95:20:db:0c:d1:7c:80:8a:a4:2e:35:c2:4b:ac:69:48:a2:23: d5:57:fa:15:a3:df:b6:ae:52:6e:e7:1e:30:2c:32:f8:2d:7a: 93:b9:79:cf:e8:11:1b:2b:e8:09:51:55:e5:7b:62:a5:1b:63: cd:e8:63:60:46:d4:0e:b7:2d:aa:f7:95:62:04:67:4d:1f:02: ff:4e:97:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTrZlRTrnEqnYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk N2QwMzU0MGEtYTI5NC00NTM2LWE2ZmMtMmNkNGFkODg1NTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLmkU6itVQ9vAZsDHWBDnnn6c0mR9qOYBh5Y Vaxdh7ZoJA8jCWDd8Ive1o/BwcEnWGCO+dwFPpZBPIAgn6dimbTmuj5DefcssPbQ HtwgydEi4ykkHtzZbnMwyBzpCiGUG/lB66l1/s2jRmLfyGKjhb9q9LKkLCcaTWOa T0jCDfMxl8bb2t+KS2FGZTiSV7Hf7qfKotsJFnmHMSt9oRfr3DKi/gzd8vGF6CEa AU5cp0tASqaFVTV3cg3c9diBPYSi+wXA4Nc0sfspAy/Cji8350sjoBlUfbm0yoiJ VmrOEeIsvQI8FH1MoSQYW+94/mE6EkL57QCRiiH1AN+25y7IMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr6ViUSpI+p2xEQR5GxSWk0aoZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y5ZmExYWUtNTVlOC0z MGY0LWI0NzYtZThmZjgxY2ZhMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2cl+7GsI8+3fkG632e9vr9qPdJg2CtKnAxr4vDDfLRm7CMmKgW58vW bxV3bMlAQPDzxk7oNfBbnrhaKACEUzkiVGrbrw1iUHLNVJUt4MQKSpeDwaXDUUNZ doJXPZdiD8Uz9195ddQSprlCWzL5Rw+XhkRl/oDQYAWIyF9sG5FBkXlhqY5dmXE1 CONJBarO8Bg4IVenxUssBAAYu/a5tODjzVFWX4mdL0Jq5NS1VP6Eaq5xIZUg2wzR fICKpC41wkusaUiiI9VX+hWj37auUm7nHjAsMvgtepO5ec/oERsr6AlRVeV7YqUb Y83oY2BG1A63Lar3lWIEZ00fAv9Ol7E= -----END CERTIFICATE-----Generated at Wed Nov 5 03:10:15 2025 by rpki-client