$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/749c66c9-faa7-320d-95c5-d118c8574d7b.roa File: 749c66c9-faa7-320d-95c5-d118c8574d7b.roa (raw, json) Hash identifier: BzVeYITLMH2WX3gl80AaU5dEqF3Ll0v8zPjFZ1p7wzI= Subject key identifier: 0A:7F:06:E0:DC:E0:65:08:D8:B2:7F:AE:24:38:54:AD:93:97:18:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BBCDAE36A6D9BA8932D62A780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/749c66c9-faa7-320d-95c5-d118c8574d7b.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 30036 IP address blocks: 108.161.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e3:6a:6d:9b:a8:93:2d:62:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=19d36047-1601-459c-ac66-7ddca5f65b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:db:81:aa:63:32:3a:67:d2:15:8b:ab:38: 31:33:f7:41:8a:51:05:f6:1a:7f:29:05:c8:17:a1: 5b:2f:35:5f:e9:f4:18:84:df:97:d1:e7:18:31:37: cf:be:94:35:fc:8f:22:a5:99:7c:b3:61:af:2d:a5: 12:52:b1:3c:01:7e:ff:ee:f2:2f:8e:37:36:92:b9: a7:5f:a3:da:43:70:41:f6:58:5b:a0:16:e2:2a:1a: ee:e4:98:a0:74:fc:82:88:8d:0c:ad:00:8d:8a:3b: a4:a8:29:88:68:17:bb:53:8e:90:fb:ef:2a:e4:26: d7:47:3d:25:ba:ab:1f:c4:0d:9b:c3:42:8a:d0:8c: dc:a7:b1:13:71:7b:8b:31:7f:6a:b7:aa:56:ae:cf: 4d:c5:43:09:24:00:76:b5:86:5d:86:a2:ea:91:08: 32:ef:62:8e:7d:8b:fc:99:e7:81:08:4b:33:f0:d4: 50:29:e8:cc:65:bd:9f:b4:bd:dc:10:b7:5a:9b:64: 1e:16:43:a6:b0:45:9c:f3:46:e7:c1:bd:b0:0d:2b: 1b:94:98:25:59:84:c6:c4:44:d5:04:10:a3:50:42: d2:6d:48:38:19:33:5a:8c:e8:74:70:45:4d:87:2d: 26:d3:e3:6d:d9:62:f9:8e:b9:db:e9:44:d6:10:7c: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7F:06:E0:DC:E0:65:08:D8:B2:7F:AE:24:38:54:AD:93:97:18:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/749c66c9-faa7-320d-95c5-d118c8574d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:bb:7d:45:ed:1a:df:52:cf:d0:83:67:7b:fc:c4:b3:59:8e: b8:c1:de:19:fd:b0:99:6f:fc:26:d4:1f:9b:51:bf:32:c9:6d: 00:85:46:c1:37:e9:92:7d:3e:51:4e:c3:df:81:8c:60:b2:03: 29:f1:93:c8:e6:16:53:c9:44:36:2f:7b:ee:62:a6:a2:55:ca: 95:5c:96:7b:a3:93:35:16:88:a9:ff:30:df:db:df:cc:64:54: 9e:a3:43:d9:ff:38:e2:ca:1c:f5:3b:21:4d:56:9e:a0:77:a0: de:37:5c:57:23:f7:7a:7e:60:40:82:dd:aa:10:15:cb:fc:d0: bd:1f:45:42:c0:6e:29:c6:be:d7:b1:9b:50:80:62:11:89:01: bc:9c:96:74:52:5c:24:c0:5a:ce:35:76:3c:39:2c:14:9e:06: fc:49:f7:95:cf:78:03:a3:ec:4d:81:0c:9e:16:48:10:1f:52: 0e:d8:ca:0d:3a:4e:e7:8f:07:35:de:da:d3:9a:b4:e0:70:53: 25:31:78:fd:33:fc:1a:ad:59:ad:75:b1:81:27:b0:67:9b:3c: 4d:5d:b0:ce:16:ae:69:5c:6e:64:c6:4e:7d:0b:7b:9a:4f:85: bd:31:31:b1:f9:42:38:26:59:97:bb:2b:ad:7c:31:87:33:84: 54:fc:5f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uNqbZuoky1ip4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk MTlkMzYwNDctMTYwMS00NTljLWFjNjYtN2RkY2E1ZjY1YjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7PbgapjMjpn0hWLqzgxM/dBilEF9hp/KQXI F6FbLzVf6fQYhN+X0ecYMTfPvpQ1/I8ipZl8s2GvLaUSUrE8AX7/7vIvjjc2krmn X6PaQ3BB9lhboBbiKhru5JigdPyCiI0MrQCNijukqCmIaBe7U46Q++8q5CbXRz0l uqsfxA2bw0KK0Izcp7ETcXuLMX9qt6pWrs9NxUMJJAB2tYZdhqLqkQgy72KOfYv8 meeBCEsz8NRQKejMZb2ftL3cELdam2QeFkOmsEWc80bnwb2wDSsblJglWYTGxETV BBCjUELSbUg4GTNajOh0cEVNhy0m0+Nt2WL5jrnb6UTWEHzHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp/BuDc4GUI2LJ/riQ4VK2TlxhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzQ5YzY2YzktZmFhNy0z MjBkLTk1YzUtZDExOGM4NTc0ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES7fUXtGt9Sz9CDZ3v8xLNZjrjB3hn9sJlv/CbUH5tRvzLJbQCFRsE3 6ZJ9PlFOw9+BjGCyAynxk8jmFlPJRDYve+5ipqJVypVclnujkzUWiKn/MN/b38xk VJ6jQ9n/OOLKHPU7IU1WnqB3oN43XFcj93p+YECC3aoQFcv80L0fRULAbinGvtex m1CAYhGJAbyclnRSXCTAWs41djw5LBSeBvxJ95XPeAOj7E2BDJ4WSBAfUg7Yyg06 TuePBzXe2tOatOBwUyUxeP0z/BqtWa11sYEnsGebPE1dsM4WrmlcbmTGTn0Le5pP hb0xMbH5QjgmWZe7K618MYczhFT8X7A= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:13 2025 by rpki-client