$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b709b69-7f90-3cd0-8f5b-2d964f98069d.roa File: 8b709b69-7f90-3cd0-8f5b-2d964f98069d.roa (raw, json) Hash identifier: NOoBH4ICtvyyUsyjO6lYMzzZZfF40wlC4F4OcKF7di8= Subject key identifier: C8:37:FC:E9:83:E8:19:5E:0A:41:0D:AD:70:71:BD:A4:D3:68:CE:AA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39CF27F0914020D30D217D0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b709b69-7f90-3cd0-8f5b-2d964f98069d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f2:7f:09:14:02:0d:30:d2:17:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=1a402a51-a901-4929-82cb-d95e10a38699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:05:d7:49:d3:aa:c5:84:59:ac:30:eb:ca: 62:31:35:c6:b2:37:bb:7f:ad:aa:7c:83:e9:5b:df: 01:8c:55:6a:bb:e7:a3:69:00:cc:1c:7f:52:44:a4: b5:27:82:ef:93:a7:c2:4d:e4:53:64:a1:b3:65:0e: 3f:d3:20:3c:d1:c4:c6:0a:ea:25:cb:19:80:85:4a: f9:44:bb:25:85:c6:59:1b:3c:a0:b1:83:0d:b4:95: 43:1c:9b:65:7a:6f:b3:89:e1:87:1f:8a:7f:6d:99: cf:86:10:f5:a2:2e:5c:7b:e7:75:08:9e:bb:36:b9: c8:0a:c9:4f:91:1e:b0:32:3c:5f:f3:fe:ce:5a:7f: 9e:96:b6:99:fb:4f:ad:68:ef:0a:76:db:c7:b3:4b: 39:43:c3:dc:40:6b:69:55:e8:4a:6d:fb:54:8c:31: a1:4e:b0:a0:07:eb:2c:c2:50:5c:79:e0:aa:c0:27: ed:1e:58:18:9a:42:2c:2c:f9:af:b5:2b:a2:08:4b: 00:6f:0a:58:26:6b:cf:f1:c4:cb:2f:03:bd:9e:3f: 22:6d:1d:ae:1f:d7:e6:aa:93:d2:af:b0:97:2c:88: 5c:70:b0:61:b1:3d:da:8e:e2:44:b9:71:60:4e:4e: f4:33:06:6e:0e:17:7a:03:b9:2d:0b:ec:41:9f:4a: e5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:37:FC:E9:83:E8:19:5E:0A:41:0D:AD:70:71:BD:A4:D3:68:CE:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b709b69-7f90-3cd0-8f5b-2d964f98069d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:33:64:43:30:43:bc:ff:6f:d3:d8:be:79:95:d6:51:bf:6f: ca:8b:c3:f4:8f:07:68:0a:ca:9e:e7:b8:36:b4:5f:47:e3:d5: a4:06:b3:0e:1a:8a:7a:25:66:f8:bd:04:f1:64:a6:4c:69:13: c4:6b:44:e7:3c:31:51:0a:5c:74:ba:49:2e:a8:96:23:5d:b7: fb:1c:09:94:05:1d:2f:95:27:de:a0:24:e9:bf:e1:6d:37:2f: 03:02:69:b9:41:d0:66:d6:a5:c9:7d:ac:12:5a:3b:00:86:27: 80:c6:f5:11:26:b4:69:0a:d2:8d:43:d4:47:c7:99:14:db:88: 61:6e:39:2b:a7:63:d8:a8:82:29:e4:92:eb:1f:b2:83:ef:ff: 5c:9e:ee:df:c3:b6:cb:9a:cc:60:ba:96:8a:8d:b6:3d:db:e7: bc:20:07:c3:27:77:5b:c3:ac:79:56:95:32:ee:5e:26:6a:6b: 3c:4a:74:3d:4a:b3:4b:b1:fd:49:ba:a2:f3:c4:f4:7a:06:22: c2:ac:0f:59:1e:ab:93:f0:10:c3:e5:82:3b:57:13:40:d7:dc: 55:94:38:0f:79:8b:f4:d7:89:18:3d:39:fc:aa:51:4f:d6:7a: f6:ea:6b:e9:fa:9a:99:d0:f9:ee:b2:e2:d6:fa:6c:12:f2:bd: a7:ef:7e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPJ/CRQCDTDSF9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWE0MDJhNTEtYTkwMS00OTI5LTgyY2ItZDk1ZTEwYTM4Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2QF10nTqsWEWaww68piMTXGsje7f62qfIPp W98BjFVqu+ejaQDMHH9SRKS1J4Lvk6fCTeRTZKGzZQ4/0yA80cTGCuolyxmAhUr5 RLslhcZZGzygsYMNtJVDHJtlem+zieGHH4p/bZnPhhD1oi5ce+d1CJ67NrnICslP kR6wMjxf8/7OWn+elraZ+0+taO8KdtvHs0s5Q8PcQGtpVehKbftUjDGhTrCgB+ss wlBceeCqwCftHlgYmkIsLPmvtSuiCEsAbwpYJmvP8cTLLwO9nj8ibR2uH9fmqpPS r7CXLIhccLBhsT3ajuJEuXFgTk70MwZuDhd6A7ktC+xBn0rljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg3/OmD6BleCkENrXBxvaTTaM6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGI3MDliNjktN2Y5MC0z Y2QwLThmNWItMmQ5NjRmOTgwNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAzZEMwQ7z/b9PYvnmV1lG/b8qLw/SPB2gKyp7nuDa0X0fj1aQGsw4a inolZvi9BPFkpkxpE8RrROc8MVEKXHS6SS6oliNdt/scCZQFHS+VJ96gJOm/4W03 LwMCablB0GbWpcl9rBJaOwCGJ4DG9REmtGkK0o1D1EfHmRTbiGFuOSunY9iogink kusfsoPv/1ye7t/DtsuazGC6loqNtj3b57wgB8Mnd1vDrHlWlTLuXiZqazxKdD1K s0ux/Um6ovPE9HoGIsKsD1keq5PwEMPlgjtXE0DX3FWUOA95i/TXiRg9OfyqUU/W evbqa+n6mpnQ+e6y4tb6bBLyvafvfjc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:44:15 2025 by rpki-client