$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa File: 4891ec23-8655-37a8-bed4-a2fa941dd916.roa (raw, json) Hash identifier: IRd9pljshoab6O9tnPUiA09voJCRXe5rRVdWO5pMn6Q= Subject key identifier: 84:CB:02:CE:39:DF:D0:F7:E7:16:8A:CB:C5:54:8B:64:5C:F7:4C:7C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8477045B3534472FDFE4C8C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 104.201.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:04:5b:35:34:47:2f:df:e4:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=38c19972-7854-4e65-a5bd-fa852abbf890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:c7:d7:05:b3:1e:76:79:6c:80:f6:45:36: 9b:79:44:96:85:ea:a0:ff:1e:89:eb:49:15:4c:34: d7:37:ee:63:a8:93:7c:28:b6:01:01:e9:f5:21:09: d7:59:a9:9a:d1:2a:43:19:c8:89:6e:2b:07:43:42: de:3e:21:83:52:08:71:f8:be:43:44:56:17:65:06: 4c:b2:dc:96:2c:dd:3c:e1:14:88:89:28:9c:c3:d7: 82:3e:4b:fe:06:74:54:17:ee:e9:46:7a:e4:b6:a2: cd:35:60:da:bc:80:b4:f6:ca:bf:35:0c:40:4a:2a: c8:d0:89:06:1d:b1:44:f9:db:8a:48:db:05:08:3d: f3:40:d1:21:2a:d5:18:54:e5:1c:12:39:2f:8e:dd: bf:ed:a1:22:4e:03:f1:31:36:ba:b4:4c:6e:dc:31: 24:b1:57:61:7f:a8:e7:b4:58:8b:39:91:5c:18:41: 69:ba:fd:de:56:0e:4f:24:f9:65:76:7b:4a:36:b5: ed:e1:3e:df:b9:1f:53:a5:93:33:af:14:c2:54:95: 9c:04:ea:e0:9c:82:f0:a6:45:0c:10:03:64:ce:a0: 4a:c7:ca:66:12:9a:89:4c:05:d0:7b:51:14:93:e9: 8f:14:eb:d1:c2:0e:80:79:c4:ba:7b:5f:64:bc:07: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:02:CE:39:DF:D0:F7:E7:16:8A:CB:C5:54:8B:64:5C:F7:4C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:45:4e:e7:21:9b:ba:5d:86:48:bf:4f:3b:09:83:d1:31:69: d6:4b:2f:5c:43:46:a9:7e:21:d4:87:97:8f:d4:cf:1d:5f:63: ea:b2:21:9d:da:17:7c:70:cb:75:24:68:1d:ec:ad:60:8d:10: 0d:0a:96:44:d9:8c:b3:42:6b:a7:f4:95:f4:a4:b3:79:90:00: ab:0d:21:0c:b7:eb:5d:c7:a5:47:91:0b:a0:4b:c1:49:8b:18: d8:ca:6b:60:05:e0:c5:4b:78:47:c3:5b:82:c8:18:07:8d:06: ec:0f:01:1d:bf:e9:bb:c7:67:35:d8:43:99:c9:bb:ef:77:5f: e3:8e:20:c6:85:ad:c0:19:37:0b:29:98:3c:ef:ce:db:0b:39: d7:d6:33:99:73:d5:ca:5a:20:e5:3d:c8:f2:0a:41:b0:1f:10: 09:95:15:98:8c:d3:a9:c0:3e:2b:b2:51:1e:9c:bb:78:03:0d: 56:15:dc:e3:ea:fd:58:a9:07:e2:46:06:1d:28:a3:81:d6:94: ce:24:9b:88:49:47:24:f1:12:b4:a8:78:d4:f4:ef:c3:73:f9: 04:1d:a5:7c:a2:db:72:f1:44:bc:05:0c:09:6f:d2:ae:15:df: 84:8b:20:5b:2d:bb:08:f3:61:2e:b5:27:00:5b:f9:ff:14:00: 31:f0:c2:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwRbNTRHL9/kyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk MzhjMTk5NzItNzg1NC00ZTY1LWE1YmQtZmE4NTJhYmJmODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA/H1wWzHnZ5bID2RTabeUSWheqg/x6J60kV TDTXN+5jqJN8KLYBAen1IQnXWama0SpDGciJbisHQ0LePiGDUghx+L5DRFYXZQZM styWLN084RSIiSicw9eCPkv+BnRUF+7pRnrktqLNNWDavIC09sq/NQxASirI0IkG HbFE+duKSNsFCD3zQNEhKtUYVOUcEjkvjt2/7aEiTgPxMTa6tExu3DEksVdhf6jn tFiLOZFcGEFpuv3eVg5PJPlldntKNrXt4T7fuR9TpZMzrxTCVJWcBOrgnILwpkUM EANkzqBKx8pmEpqJTAXQe1EUk+mPFOvRwg6AecS6e19kvAcAhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITLAs4539D35xaKy8VUi2Rc90x8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDg5MWVjMjMtODY1NS0z N2E4LWJlZDQtYTJmYTk0MWRkOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVFTuchm7pdhki/TzsJg9ExadZLL1xDRql+IdSHl4/Uzx1fY+qyIZ3a F3xwy3UkaB3srWCNEA0KlkTZjLNCa6f0lfSks3mQAKsNIQy3613HpUeRC6BLwUmL GNjKa2AF4MVLeEfDW4LIGAeNBuwPAR2/6bvHZzXYQ5nJu+93X+OOIMaFrcAZNwsp mDzvztsLOdfWM5lz1cpaIOU9yPIKQbAfEAmVFZiM06nAPiuyUR6cu3gDDVYV3OPq /VipB+JGBh0oo4HWlM4km4hJRyTxErSoeNT078Nz+QQdpXyi23LxRLwFDAlv0q4V 34SLIFstuwjzYS61JwBb+f8UADHwwtw= -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:56 2026 by rpki-client