$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa File: 4891ec23-8655-37a8-bed4-a2fa941dd916.roa (raw, json) Hash identifier: IgONPimjNFOjMKU1cYFEtfEHCXFB2awbbxyDuanCOzs= Subject key identifier: 3A:5E:FA:43:74:9E:8A:2D:6F:94:63:04:BE:C1:42:8D:AD:B1:70:04 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D397FB339B94313ADC500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:39:7f:b3:39:b9:43:13:ad:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=814bcff2-8936-4c14-b226-c59470f8172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:b0:f3:42:a5:0a:1f:19:1b:36:e4:e6:a3: 6d:ef:c7:8e:36:9f:17:93:6c:68:28:72:31:77:1f: 0d:98:26:44:de:c8:40:c3:29:38:72:30:84:5f:c6: bf:dd:ad:73:e4:b7:e6:94:c8:54:d9:f1:cd:64:a7: 03:e6:89:b0:00:65:52:3f:b8:93:5b:2e:e2:69:37: 56:5f:12:3d:f4:c9:14:84:b9:5e:e1:5c:56:e0:5a: a3:01:cf:5a:0d:54:15:90:24:d7:7e:1f:b8:77:d8: 9e:a6:54:4d:39:48:5b:18:32:a8:de:d9:70:4a:36: de:73:0d:53:bf:2c:cb:b5:d9:74:22:85:9e:29:4b: b0:1f:c9:ff:33:a2:ff:8a:3f:10:b1:22:75:af:02: 22:e2:da:ad:ff:dd:ec:53:a5:af:b3:dd:eb:e1:8b: 77:09:4b:21:ca:48:17:2d:3e:75:dd:67:bc:e7:6e: 4f:0a:9b:90:a2:82:15:dc:c4:0b:cf:f0:27:1e:b3: fa:d2:39:66:a4:d0:60:95:c0:6a:35:07:1a:6c:fc: ae:42:f8:08:14:07:61:60:3a:cc:ba:7d:4b:e7:ca: 35:96:d2:8f:51:70:cd:ce:92:3f:86:8d:c3:cf:c3: dd:f6:dd:5d:c3:d1:43:1b:8b:ad:c7:4d:6e:d5:59: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5E:FA:43:74:9E:8A:2D:6F:94:63:04:BE:C1:42:8D:AD:B1:70:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:43:f8:da:48:aa:dd:8c:13:a9:17:8c:77:eb:9c:e5:94:68: 16:39:bb:20:67:1c:e7:56:20:c7:df:99:d4:3e:38:c6:35:3a: 8e:e6:44:5a:d3:c7:09:41:46:a5:99:e3:8f:08:92:ab:cd:17: 09:48:bc:72:8d:a5:46:12:01:94:bd:17:de:a6:f2:24:19:f7: 02:7c:a0:0d:c3:52:47:8b:9c:55:7a:11:63:bd:9e:e3:6f:ce: 86:9e:84:36:42:47:a4:c0:11:c8:31:f7:b3:49:9d:57:a1:71: 05:45:22:86:30:d9:9a:d4:da:38:75:54:30:19:49:99:a7:39: 9b:0c:ca:43:5d:57:fd:f0:b0:2f:7d:e7:46:0f:ef:78:67:1c: 31:1a:6b:3a:96:14:85:cc:4b:10:ff:5a:12:7e:a9:1c:96:4a: bf:34:ec:56:5f:c5:be:f4:e1:40:99:86:2c:19:cf:5c:7f:ea: 51:04:36:2d:ec:de:ba:d0:c1:58:e6:f6:e7:a6:95:be:09:58: 1e:d3:bb:51:40:c8:9e:14:be:75:27:90:ed:47:3d:81:fe:9a: 6c:3d:44:99:f4:67:33:c0:0f:db:10:3b:d6:af:85:34:f1:c6: ee:e1:2f:f2:13:e3:08:ad:3e:8d:7e:36:15:14:25:0e:10:29: 94:d5:92:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTl/szm5QxOtxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODE0YmNmZjItODkzNi00YzE0LWIyMjYtYzU5NDcwZjgxNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4Sw80KlCh8ZGzbk5qNt78eONp8Xk2xoKHIx dx8NmCZE3shAwyk4cjCEX8a/3a1z5LfmlMhU2fHNZKcD5omwAGVSP7iTWy7iaTdW XxI99MkUhLle4VxW4FqjAc9aDVQVkCTXfh+4d9ieplRNOUhbGDKo3tlwSjbecw1T vyzLtdl0IoWeKUuwH8n/M6L/ij8QsSJ1rwIi4tqt/93sU6Wvs93r4Yt3CUshykgX LT513We8525PCpuQooIV3MQLz/AnHrP60jlmpNBglcBqNQcabPyuQvgIFAdhYDrM un1L58o1ltKPUXDNzpI/ho3Dz8Pd9t1dw9FDG4utx01u1VnB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpe+kN0nootb5RjBL7BQo2tsXAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDg5MWVjMjMtODY1NS0z N2E4LWJlZDQtYTJmYTk0MWRkOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJD+NpIqt2ME6kXjHfrnOWUaBY5uyBnHOdWIMffmdQ+OMY1Oo7mRFrT xwlBRqWZ448IkqvNFwlIvHKNpUYSAZS9F96m8iQZ9wJ8oA3DUkeLnFV6EWO9nuNv zoaehDZCR6TAEcgx97NJnVehcQVFIoYw2ZrU2jh1VDAZSZmnOZsMykNdV/3wsC99 50YP73hnHDEaazqWFIXMSxD/WhJ+qRyWSr807FZfxb704UCZhiwZz1x/6lEENi3s 3rrQwVjm9uemlb4JWB7Tu1FAyJ4UvnUnkO1HPYH+mmw9RJn0ZzPAD9sQO9avhTTx xu7hL/IT4witPo1+NhUUJQ4QKZTVkuM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:00:21 2025 by rpki-client