$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6590e627-51d0-3133-8e49-9e6b524c2c3e.roa File: 6590e627-51d0-3133-8e49-9e6b524c2c3e.roa (raw, json) Hash identifier: 8h+NrQgiAMbJ4k2Ge/XHUHwfrDyXNjQWvIzFbVOTmBM= Subject key identifier: FA:0E:26:36:BC:4A:06:77:CE:07:50:C7:F5:E7:C4:8B:06:81:90:5C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3AA723278ADE4AF2B3A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6590e627-51d0-3133-8e49-9e6b524c2c3e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3a:a7:23:27:8a:de:4a:f2:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=99f4c730-1bdc-4ff7-ac44-8d61cae380dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:29:3b:d9:98:09:98:dd:4f:56:cb:0b:64: b3:fd:95:92:80:8f:f1:a1:f1:46:c3:63:22:f7:18: 04:78:a3:fa:1a:d4:11:29:e7:2e:2b:63:98:57:d3: ca:0b:15:c8:ef:aa:80:d8:d0:36:21:63:13:90:c2: cc:a0:1b:04:b2:6a:13:52:7d:26:15:cc:a4:3b:1e: 1c:0c:4c:af:62:7e:64:68:ec:70:81:24:ad:af:7a: 79:0b:10:ff:b6:71:2d:1f:61:7f:9a:4d:c3:84:bd: 04:fe:a6:42:1d:59:f9:6e:fb:0e:70:bd:e0:ff:12: e1:72:bc:19:81:df:8b:52:ad:e9:10:ac:49:d6:f9: 80:f4:8e:ae:01:b0:2c:7a:6e:46:dc:7b:43:7a:49: 5e:f2:97:90:27:14:04:fd:fb:11:a8:04:3f:8b:00: 52:20:d4:ce:ca:bc:e6:3c:f2:9f:8d:da:69:20:e6: 22:93:1d:45:c7:e3:fc:b8:a7:c5:68:e5:42:c9:1b: ad:fe:ca:cc:a1:ea:ba:1b:5f:03:53:28:db:5a:7b: a6:d0:92:8a:20:fa:33:b7:f7:28:63:68:2e:69:da: de:3e:63:25:cd:46:27:21:93:44:fc:c7:d3:72:02: fc:e4:46:38:97:22:0f:f6:de:ac:47:6e:99:dc:6e: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:26:36:BC:4A:06:77:CE:07:50:C7:F5:E7:C4:8B:06:81:90:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6590e627-51d0-3133-8e49-9e6b524c2c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c2:2b:a5:bb:0c:00:36:54:c5:c6:55:73:30:25:fa:19:59: f6:21:e0:1f:14:d2:fa:41:d6:70:46:c0:0b:9d:8c:63:17:a4: f3:2a:5e:dc:2c:c1:7e:37:ba:d6:6b:cf:d6:ed:de:b2:7d:4f: b6:82:9c:79:d6:63:46:92:af:2f:0d:65:9b:95:a0:ab:cb:6d: 1c:54:a3:4e:9c:11:43:58:c5:7d:2e:8f:ec:ba:1e:60:a8:ab: 15:6d:da:ce:86:73:8c:d0:26:c9:48:dc:7e:5a:07:35:f8:57: 6f:5f:3c:ff:14:b6:73:d8:31:61:e3:05:5d:aa:87:62:e4:cf: 69:21:28:c3:67:3f:84:ef:6d:44:47:d9:19:4d:4b:51:98:a2: c0:f6:57:17:c4:14:23:03:b2:e0:05:45:db:49:a6:c7:d4:13: 23:42:4c:23:72:0b:7b:d7:3b:87:77:60:98:77:40:cc:39:cd: 2e:3b:aa:0b:16:52:41:3b:5d:aa:b9:af:a1:e6:cc:c2:71:d3: f7:1d:8b:07:bf:bb:05:2b:07:28:a1:f4:35:df:97:17:17:3e: 0f:fb:67:0a:d9:1d:a6:7c:0c:98:aa:ca:8e:86:3d:ac:e9:2f: 8b:c0:8e:49:c1:dd:74:d2:97:6c:56:81:d1:df:a4:b5:b6:16: 19:98:be:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTqnIyeK3krys6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTlmNGM3MzAtMWJkYy00ZmY3LWFjNDQtOGQ2MWNhZTM4MGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP4pO9mYCZjdT1bLC2Sz/ZWSgI/xofFGw2Mi 9xgEeKP6GtQRKecuK2OYV9PKCxXI76qA2NA2IWMTkMLMoBsEsmoTUn0mFcykOx4c DEyvYn5kaOxwgSStr3p5CxD/tnEtH2F/mk3DhL0E/qZCHVn5bvsOcL3g/xLhcrwZ gd+LUq3pEKxJ1vmA9I6uAbAsem5G3HtDekle8peQJxQE/fsRqAQ/iwBSINTOyrzm PPKfjdppIOYikx1Fx+P8uKfFaOVCyRut/srMoeq6G18DUyjbWnum0JKKIPozt/co Y2guadrePmMlzUYnIZNE/MfTcgL85EY4lyIP9t6sR26Z3G7TKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoOJja8SgZ3zgdQx/XnxIsGgZBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjU5MGU2MjctNTFkMC0z MTMzLThlNDktOWU2YjUyNGMyYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnCK6W7DAA2VMXGVXMwJfoZWfYh4B8U0vpB1nBGwAudjGMXpPMqXtws wX43utZrz9bt3rJ9T7aCnHnWY0aSry8NZZuVoKvLbRxUo06cEUNYxX0uj+y6HmCo qxVt2s6Gc4zQJslI3H5aBzX4V29fPP8UtnPYMWHjBV2qh2Lkz2khKMNnP4TvbURH 2RlNS1GYosD2VxfEFCMDsuAFRdtJpsfUEyNCTCNyC3vXO4d3YJh3QMw5zS47qgsW UkE7Xaq5r6HmzMJx0/cdiwe/uwUrByih9DXflxcXPg/7ZwrZHaZ8DJiqyo6GPazp L4vAjknB3XTSl2xWgdHfpLW2FhmYvv0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:06 2025 by rpki-client