$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4e17f1e1-bce4-3b35-953d-52d4f5e1766c.roa File: 4e17f1e1-bce4-3b35-953d-52d4f5e1766c.roa (raw, json) Hash identifier: 4WOI2nDzUkqSjKmyP7lCgaamyy1h7rxj/cMQ83KEDG0= Subject key identifier: 24:F8:B6:98:19:94:CF:3E:94:60:79:4D:FC:CB:E8:BE:00:61:7E:F8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D39D6F7A17C13F05FE290 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4e17f1e1-bce4-3b35-953d-52d4f5e1766c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:39:d6:f7:a1:7c:13:f0:5f:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3ec3653e-ac0d-4bb2-92ce-4bd1a03e9d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:f2:78:53:31:04:1e:f1:8d:50:d3:92:4c: 92:56:d8:b0:8e:35:14:18:62:31:6e:6d:d4:0f:09: ed:11:8d:fe:a9:de:dc:13:c0:16:41:ce:75:aa:3b: 20:d3:89:02:29:13:f1:2c:b8:6b:98:f2:56:d0:06: dc:76:80:3f:41:3f:43:2f:44:7e:58:3c:8d:32:fd: f7:b1:1b:e3:d9:a0:6f:04:46:cf:3e:15:99:61:67: c2:a0:14:a6:8e:67:29:98:9b:47:52:c2:82:dc:24: b4:44:78:e4:8c:21:db:5a:b9:9f:34:e5:9a:a3:6f: e9:25:38:1e:cd:8f:12:a1:bd:c6:fc:3c:af:9d:e4: 3b:c6:82:c1:cc:26:5b:2c:39:55:2a:d8:1c:79:ff: e5:79:93:49:87:71:bf:eb:13:db:f5:9c:c2:e6:cc: 36:ea:b5:43:4d:09:7b:cb:d2:3a:2f:f2:6b:ea:a9: 57:c9:dc:7f:d4:ef:80:27:8c:ca:86:18:7d:c4:5a: 90:9f:50:04:b9:a9:06:bf:69:b1:02:8d:a4:df:d8: 45:92:9f:fe:f3:a8:11:e4:bf:cc:43:25:63:6f:1c: 43:05:31:ef:b8:e8:69:31:6e:28:76:37:76:e9:99: 56:40:66:86:cb:76:85:ad:d0:d2:a9:08:60:f9:b6: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:B6:98:19:94:CF:3E:94:60:79:4D:FC:CB:E8:BE:00:61:7E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4e17f1e1-bce4-3b35-953d-52d4f5e1766c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cc:0b:8f:0a:4e:be:3c:99:22:07:fe:4e:19:21:33:e3:76: 34:30:75:88:35:37:44:d4:e0:66:ec:0a:36:22:de:61:fb:e7: 4e:64:91:33:c4:1b:9f:3e:72:cf:01:15:8e:6d:ff:15:97:d5: 26:56:9c:d5:3f:60:ec:29:f1:36:80:cc:68:cf:d7:86:63:27: a6:ed:61:4c:3b:24:dc:78:c1:ff:a8:81:9d:04:95:12:3a:d9: 42:ee:78:bb:1c:41:21:27:3c:4f:fb:3e:8c:f8:11:06:96:11: 54:27:4d:a6:d1:74:4e:06:29:87:09:8b:d9:d2:e8:6e:08:a4: 63:03:02:d3:a4:81:d8:12:88:9a:70:cf:61:95:c9:a8:e1:c7: 28:07:38:94:22:44:48:d6:a1:76:23:78:f1:61:a9:45:03:6e: 0e:0d:46:36:e4:a8:6b:2b:0d:ed:38:aa:e3:88:a3:51:d8:06: 92:3d:60:22:40:cd:50:99:53:ea:e3:2c:04:86:cf:66:f1:80: 70:01:75:9d:50:22:aa:15:df:a7:5f:dd:88:36:84:e7:ef:66: 4f:01:20:39:3a:85:52:aa:f6:28:d4:ae:32:0a:70:5f:af:39: be:d7:c9:6e:ed:1e:50:ef:f0:dc:fa:df:7f:e1:18:31:41:6e: 94:fe:d6:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTnW96F8E/Bf4pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2VjMzY1M2UtYWMwZC00YmIyLTkyY2UtNGJkMWEwM2U5ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmvyeFMxBB7xjVDTkkySVtiwjjUUGGIxbm3U DwntEY3+qd7cE8AWQc51qjsg04kCKRPxLLhrmPJW0AbcdoA/QT9DL0R+WDyNMv33 sRvj2aBvBEbPPhWZYWfCoBSmjmcpmJtHUsKC3CS0RHjkjCHbWrmfNOWao2/pJTge zY8Sob3G/DyvneQ7xoLBzCZbLDlVKtgcef/leZNJh3G/6xPb9ZzC5sw26rVDTQl7 y9I6L/Jr6qlXydx/1O+AJ4zKhhh9xFqQn1AEuakGv2mxAo2k39hFkp/+86gR5L/M QyVjbxxDBTHvuOhpMW4odjd26ZlWQGaGy3aFrdDSqQhg+bY+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT4tpgZlM8+lGB5TfzL6L4AYX74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGUxN2YxZTEtYmNlNC0z YjM1LTk1M2QtNTJkNGY1ZTE3NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMldMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjMC48KTr48mSIH/k4ZITPjdjQwdYg1N0TU4GbsCjYi3mH7505kkTPE G58+cs8BFY5t/xWX1SZWnNU/YOwp8TaAzGjP14ZjJ6btYUw7JNx4wf+ogZ0ElRI6 2ULueLscQSEnPE/7Poz4EQaWEVQnTabRdE4GKYcJi9nS6G4IpGMDAtOkgdgSiJpw z2GVyajhxygHOJQiREjWoXYjePFhqUUDbg4NRjbkqGsrDe04quOIo1HYBpI9YCJA zVCZU+rjLASGz2bxgHABdZ1QIqoV36df3Yg2hOfvZk8BIDk6hVKq9ijUrjIKcF+v Ob7XyW7tHlDv8Nz633/hGDFBbpT+1sQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:55 2025 by rpki-client