$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d0da0a6-9f0f-3f19-b7ec-ac153efb7274.roa File: 4d0da0a6-9f0f-3f19-b7ec-ac153efb7274.roa (raw, json) Hash identifier: qdUR6EhU12t9GV/Ib0VmrSnOmMOtc7PpkpYMUG1WY74= Subject key identifier: D5:08:E1:2F:E8:A4:0E:95:38:A6:D8:8A:C5:BF:9C:FB:01:C8:B7:62 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3A0A830E0EB83A40E800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d0da0a6-9f0f-3f19-b7ec-ac153efb7274.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3a:0a:83:0e:0e:b8:3a:40:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=524dbb1b-a993-439b-8a21-17a80f80ba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:9e:69:b8:4b:29:8d:c5:a2:85:9f:bc:16: 8b:49:ae:75:21:6d:62:ed:ab:a3:a7:31:4f:07:b7: 80:2d:d8:1e:b4:5e:bd:e5:b9:08:44:26:f9:85:66: 19:a6:ce:ff:ad:21:da:6c:c6:65:9f:4d:71:23:a9: c8:bf:24:da:c4:11:a5:c1:ed:28:0c:c6:1e:08:95: 4f:13:21:35:5a:b8:3b:50:1b:0e:4f:7e:41:d5:e6: aa:80:9a:f9:50:e3:63:7b:a1:9b:35:43:2d:c9:82: 24:86:87:cd:92:ab:41:2c:bb:52:54:54:3a:15:c1: 15:66:80:89:58:9a:c5:9b:42:a0:f1:1b:56:27:a6: dc:ec:84:d8:ea:e4:9f:23:18:af:5f:d7:9c:09:45: 3e:63:2d:fa:ad:2e:25:a3:f8:d5:e4:9f:19:ae:6e: 90:2e:14:8d:c5:47:fa:66:dd:dd:e7:64:0a:c0:12: cb:a6:68:c8:ac:18:b6:76:9c:b3:75:3e:6d:cb:05: fd:34:0e:6b:7f:04:ae:89:81:c7:54:50:c3:32:67: 78:6b:4c:7d:bd:13:68:1f:d6:85:a1:bd:26:ee:b4: 01:fb:17:6c:9e:85:82:cc:2b:98:a0:b7:09:6f:c0: 56:09:15:a8:d0:c5:5f:e3:33:30:cd:f7:14:de:96: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:08:E1:2F:E8:A4:0E:95:38:A6:D8:8A:C5:BF:9C:FB:01:C8:B7:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d0da0a6-9f0f-3f19-b7ec-ac153efb7274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a7:70:33:bd:bf:7d:c9:3d:25:89:6b:c4:72:f4:2d:52:32: 8f:6e:73:a9:53:84:8f:72:5b:a0:e7:4a:4f:76:c4:0f:b2:09: 50:b2:f7:6b:95:17:59:b5:a7:ea:d2:48:89:dc:eb:12:dd:2d: 36:77:8c:e3:83:26:89:fa:c9:ba:e3:c9:91:5a:17:9f:f7:c7: 0a:9e:a9:45:83:33:a1:75:e4:87:86:46:d4:56:6a:bd:a1:b3: e4:b5:6f:6c:f6:73:51:dd:97:9c:d4:df:d2:03:23:1b:0c:8f: b3:a2:4f:9e:69:ff:f7:ad:75:ca:ca:6f:bc:87:0b:2e:be:7e: 85:2b:a3:8b:77:5f:45:29:ab:be:10:98:bb:4f:68:c6:14:09: 38:0d:9f:af:fa:90:1c:da:6a:d7:59:72:83:74:24:73:01:46: 2c:cf:04:72:1e:cf:42:a6:84:a7:c2:c7:53:8d:c2:bc:37:78: b9:bd:f9:f5:50:38:31:80:90:df:2a:13:73:00:32:fa:ef:db: 3e:c7:bd:09:b9:cd:c1:03:82:04:2c:bb:d2:39:f1:99:b8:42: e8:aa:55:cf:26:7a:8e:d9:fd:3f:c8:c2:b7:cf:37:b9:22:eb: 89:c4:80:dd:78:5b:8f:6a:8f:c1:96:e8:55:d3:25:b1:7f:29: 58:6b:23:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnToKgw4OuDpA6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTI0ZGJiMWItYTk5My00MzliLThhMjEtMTdhODBmODBiYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ueabhLKY3FooWfvBaLSa51IW1i7aujpzFP B7eALdgetF695bkIRCb5hWYZps7/rSHabMZln01xI6nIvyTaxBGlwe0oDMYeCJVP EyE1Wrg7UBsOT35B1eaqgJr5UONje6GbNUMtyYIkhofNkqtBLLtSVFQ6FcEVZoCJ WJrFm0Kg8RtWJ6bc7ITY6uSfIxivX9ecCUU+Yy36rS4lo/jV5J8Zrm6QLhSNxUf6 Zt3d52QKwBLLpmjIrBi2dpyzdT5tywX9NA5rfwSuiYHHVFDDMmd4a0x9vRNoH9aF ob0m7rQB+xdsnoWCzCuYoLcJb8BWCRWo0MVf4zMwzfcU3pZNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUI4S/opA6VOKbYisW/nPsByLdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGQwZGEwYTYtOWYwZi0z ZjE5LWI3ZWMtYWMxNTNlZmI3Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWncDO9v33JPSWJa8Ry9C1SMo9uc6lThI9yW6DnSk92xA+yCVCy92uV F1m1p+rSSInc6xLdLTZ3jOODJon6ybrjyZFaF5/3xwqeqUWDM6F15IeGRtRWar2h s+S1b2z2c1Hdl5zU39IDIxsMj7OiT55p//etdcrKb7yHCy6+foUro4t3X0Upq74Q mLtPaMYUCTgNn6/6kBzaatdZcoN0JHMBRizPBHIez0KmhKfCx1ONwrw3eLm9+fVQ ODGAkN8qE3MAMvrv2z7HvQm5zcEDggQsu9I58Zm4QuiqVc8meo7Z/T/IwrfPN7ki 64nEgN14W49qj8GW6FXTJbF/KVhrI/g= -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:32 2025 by rpki-client