$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8677d907-a0a1-3ca0-8f13-e8e8cedfd601.roa File: 8677d907-a0a1-3ca0-8f13-e8e8cedfd601.roa (raw, json) Hash identifier: +jdHj6+i3FulUMIxx3fii1H1akj2xJIVQXrUYeievpA= Subject key identifier: 14:5C:03:17:F2:B5:DC:E1:91:1E:AD:8C:89:DD:F9:26:11:6C:0D:44 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8476E01D20E3E245DA14EB58 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8677d907-a0a1-3ca0-8f13-e8e8cedfd601.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 104.201.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:e0:1d:20:e3:e2:45:da:14:eb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=279f2932-eacd-4beb-bb51-ba347a52d20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:ce:54:9f:ad:96:ac:81:1b:51:bf:bf:4c: 92:f2:bc:ed:5f:24:ac:60:2f:cf:27:b7:4d:b2:d7: b4:41:11:68:53:50:28:12:b2:9d:07:25:0b:44:3c: 98:70:b9:a1:85:f4:b2:71:25:60:f2:2f:ac:c1:be: 9f:6c:a8:0e:2f:78:dd:76:4b:0e:26:6f:c6:2f:d4: 31:9d:50:55:a7:6d:08:41:ff:0d:f6:6a:ea:0e:27: e6:8f:4f:aa:db:5d:69:08:5c:5d:9c:c9:c0:df:7a: e1:20:37:3a:a0:1e:e0:1e:19:fc:7e:b8:a9:42:05: 06:95:c9:14:0e:b9:43:f5:00:02:70:2b:0f:c7:e2: 96:0b:6f:a3:f0:16:34:2b:91:3c:9a:1a:c6:3f:30: 49:13:88:07:87:51:9d:65:1e:05:f0:53:e0:8e:e6: 47:cf:3d:b2:65:15:e2:3d:b0:03:ef:5e:5d:fc:6f: b9:59:ef:17:b8:93:13:0c:f2:65:8b:b6:65:46:18: 05:f7:92:1f:83:1b:45:ff:22:ac:f9:10:04:0b:79: 5f:80:57:73:29:71:84:d7:b9:a2:d3:0a:5f:ea:81: 67:34:bb:db:73:83:53:88:9c:c5:06:06:e4:b1:39: 39:e8:14:62:67:11:0f:7c:37:4f:f9:7a:e8:fe:fa: 0b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5C:03:17:F2:B5:DC:E1:91:1E:AD:8C:89:DD:F9:26:11:6C:0D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8677d907-a0a1-3ca0-8f13-e8e8cedfd601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:23:7e:6a:9d:62:cc:f7:ea:2f:06:02:c7:7a:fe:fc:71:aa: 50:a0:0f:7a:4a:b1:ec:00:82:16:c2:b9:31:b4:91:87:38:37: 05:20:23:48:db:fe:78:f1:32:4b:03:49:67:c9:7e:0a:fb:9d: b3:04:af:b7:4a:7e:f7:40:95:23:0b:dc:f7:8f:1c:a5:55:d4: 82:a7:9c:12:4d:95:70:56:e4:29:ce:77:36:5a:21:9b:33:65: 99:52:fe:79:ad:8d:06:6b:96:1e:a0:3b:ea:fc:da:49:de:42: 81:d7:86:a5:d5:49:73:f6:2f:29:6a:ee:1f:69:75:08:39:3f: b6:ea:52:95:5b:82:5f:14:cf:37:eb:ac:a3:f3:a1:fb:0d:88: f5:90:f0:94:68:20:1b:e5:66:e2:97:b9:a1:a4:33:73:a1:28: 81:9f:56:6a:69:97:16:74:20:cf:8d:36:e9:36:2a:09:52:99: 6e:da:ae:e5:a9:89:70:7b:c6:39:b5:13:e0:11:b7:82:e2:a9: e0:6d:9c:fd:ab:7a:cd:5a:bf:83:38:8e:a5:d1:de:0e:28:a0: 2a:f3:23:c0:53:b5:02:34:10:42:43:98:3b:63:af:4d:8c:01: 59:06:48:23:d9:79:21:79:64:4f:f0:fb:7e:f7:e5:7d:be:f6: 39:5c:b9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEduAdIOPiRdoU61gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk Mjc5ZjI5MzItZWFjZC00YmViLWJiNTEtYmEzNDdhNTJkMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWLOVJ+tlqyBG1G/v0yS8rztXySsYC/PJ7dN ste0QRFoU1AoErKdByULRDyYcLmhhfSycSVg8i+swb6fbKgOL3jddksOJm/GL9Qx nVBVp20IQf8N9mrqDifmj0+q211pCFxdnMnA33rhIDc6oB7gHhn8fripQgUGlckU DrlD9QACcCsPx+KWC2+j8BY0K5E8mhrGPzBJE4gHh1GdZR4F8FPgjuZHzz2yZRXi PbAD715d/G+5We8XuJMTDPJli7ZlRhgF95IfgxtF/yKs+RAEC3lfgFdzKXGE17mi 0wpf6oFnNLvbc4NTiJzFBgbksTk56BRiZxEPfDdP+Xro/voLNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRcAxfytdzhkR6tjInd+SYRbA1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODY3N2Q5MDctYTBhMS0z Y2EwLThmMTMtZThlOGNlZGZkNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMjfmqdYsz36i8GAsd6/vxxqlCgD3pKsewAghbCuTG0kYc4NwUgI0jb /njxMksDSWfJfgr7nbMEr7dKfvdAlSML3PePHKVV1IKnnBJNlXBW5CnOdzZaIZsz ZZlS/nmtjQZrlh6gO+r82kneQoHXhqXVSXP2Lylq7h9pdQg5P7bqUpVbgl8Uzzfr rKPzofsNiPWQ8JRoIBvlZuKXuaGkM3OhKIGfVmpplxZ0IM+NNuk2KglSmW7aruWp iXB7xjm1E+ARt4LiqeBtnP2res1av4M4jqXR3g4ooCrzI8BTtQI0EEJDmDtjr02M AVkGSCPZeSF5ZE/w+3735X2+9jlcueA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:14 2026 by rpki-client