$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1d9baa1-af60-343e-b6e6-64cbb4b9eb0d.roa File: c1d9baa1-af60-343e-b6e6-64cbb4b9eb0d.roa (raw, json) Hash identifier: TgxlaE9GNgIbp0pfub5c0ldXsSOIyUoNxq+qfANTtQk= Subject key identifier: 00:7E:EC:78:25:79:6F:C1:D5:86:D9:9D:26:B9:BD:E2:C8:BC:1C:F6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39CF3E5EF4A92DA5EB73AC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1d9baa1-af60-343e-b6e6-64cbb4b9eb0d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f3:e5:ef:4a:92:da:5e:b7:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3d3a6e69-e981-4595-8669-34d724eb26cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:ea:b4:16:ae:a1:f2:08:d7:f5:4c:3b:cc: ee:38:ee:97:d9:a0:ca:06:51:81:9b:1f:7b:ad:70: a2:89:82:68:00:4e:8d:7b:e0:ae:e6:bb:db:a8:39: 53:81:e4:e2:06:4d:de:38:bd:f0:f0:9d:06:6c:20: 6a:81:cc:fa:3e:2d:be:11:23:14:59:90:03:53:00: c7:6b:5e:f6:8c:ae:15:57:22:9b:c5:a2:bb:61:5d: ea:b7:06:25:60:d7:55:c2:34:3b:d6:2c:82:80:ed: ae:18:2f:71:b5:1a:a9:ac:10:dc:2a:d0:f3:f0:e6: dc:32:e6:5f:df:ec:c5:5e:6f:13:53:c5:7a:92:11: dc:e2:05:e6:ed:14:46:d9:f6:91:64:9b:83:9f:7e: 85:09:fa:02:c8:92:e8:af:ca:a6:e2:68:7c:2d:91: d0:29:2e:5f:a5:47:93:7b:72:fc:73:de:5a:be:29: c3:c0:a4:5d:8b:7d:ad:af:5f:c2:65:36:44:a4:88: 58:46:fb:10:db:67:b6:e9:eb:1a:fd:0c:e2:ec:ab: 5e:55:b2:a2:ec:ee:09:eb:2e:39:15:f7:8c:cf:b3: 7d:39:bb:e3:ec:8d:62:b9:e8:5a:8e:eb:1a:37:ee: b2:fd:c6:d3:9f:52:95:c2:8c:62:41:e4:3e:5d:97: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7E:EC:78:25:79:6F:C1:D5:86:D9:9D:26:B9:BD:E2:C8:BC:1C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1d9baa1-af60-343e-b6e6-64cbb4b9eb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:89:d7:0d:84:2c:0d:3b:14:86:15:39:b3:85:a7:3c:c4:05: 22:fd:9a:46:71:a3:9c:f5:61:b2:2e:8c:26:0e:46:24:a9:ab: 2a:de:1f:a3:a9:6e:6d:f9:44:13:53:79:d8:8e:e1:6b:d5:24: 37:49:35:67:10:65:25:dc:db:65:12:98:f5:2f:75:47:9c:87: a9:d0:2e:29:ea:ab:13:da:05:29:2d:91:8b:a8:73:42:e3:40: 51:7d:10:42:dd:e3:19:f6:91:94:e6:b0:d9:70:e3:9c:81:3f: a7:50:d3:9a:de:10:4a:0f:64:c2:92:a3:d3:dc:bf:25:3e:74: 65:3b:14:5e:4e:45:f8:35:93:8c:80:2e:55:9e:9e:8d:15:00: 54:65:88:5f:7f:26:30:81:17:a9:f5:09:f6:40:c6:df:e8:90: 86:b9:3f:15:e8:d6:56:6c:51:fb:09:d0:b7:cd:ee:52:89:6f: b3:85:36:60:1e:5c:77:87:9a:86:1e:6e:96:70:21:8f:33:72: 9e:0b:6e:f7:e7:e1:6b:81:a8:f5:e8:73:7e:6f:0f:e4:8d:88: 40:30:3d:94:7a:44:c8:d3:fa:0f:e2:2d:c6:56:45:21:23:3a: ed:43:6b:52:d6:d7:09:38:9d:cf:0b:5c:67:be:e6:2a:44:f8: 83:c4:c5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPPl70qS2l63OsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2QzYTZlNjktZTk4MS00NTk1LTg2NjktMzRkNzI0ZWIyNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA3qtBauofII1/VMO8zuOO6X2aDKBlGBmx97 rXCiiYJoAE6Ne+Cu5rvbqDlTgeTiBk3eOL3w8J0GbCBqgcz6Pi2+ESMUWZADUwDH a172jK4VVyKbxaK7YV3qtwYlYNdVwjQ71iyCgO2uGC9xtRqprBDcKtDz8ObcMuZf 3+zFXm8TU8V6khHc4gXm7RRG2faRZJuDn36FCfoCyJLor8qm4mh8LZHQKS5fpUeT e3L8c95avinDwKRdi32tr1/CZTZEpIhYRvsQ22e26esa/Qzi7KteVbKi7O4J6y45 FfeMz7N9Obvj7I1iuehajusaN+6y/cbTn1KVwoxiQeQ+XZeyVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB+7HgleW/B1YbZnSa5veLIvBz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzFkOWJhYTEtYWY2MC0z NDNlLWI2ZTYtNjRjYmI0YjllYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2J1w2ELA07FIYVObOFpzzEBSL9mkZxo5z1YbIujCYORiSpqyreH6Op bm35RBNTediO4WvVJDdJNWcQZSXc22USmPUvdUech6nQLinqqxPaBSktkYuoc0Lj QFF9EELd4xn2kZTmsNlw45yBP6dQ05reEEoPZMKSo9PcvyU+dGU7FF5ORfg1k4yA LlWeno0VAFRliF9/JjCBF6n1CfZAxt/okIa5PxXo1lZsUfsJ0LfN7lKJb7OFNmAe XHeHmoYebpZwIY8zcp4Lbvfn4WuBqPXoc35vD+SNiEAwPZR6RMjT+g/iLcZWRSEj Ou1Da1LW1wk4nc8LXGe+5ipE+IPExQ4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:34 2025 by rpki-client