$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cffafbee-a62e-3b7a-96f1-9365277e8060.roa File: cffafbee-a62e-3b7a-96f1-9365277e8060.roa (raw, json) Hash identifier: NEryR4yJpBOsihkf2grx2rp4gPQ4cdVr9uCUOf7sZOc= Subject key identifier: BD:2E:AC:C2:C7:9B:49:4B:5C:85:8B:D1:D0:C9:94:9A:C4:E4:74:94 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BBCDAE4810B40C035D541C280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cffafbee-a62e-3b7a-96f1-9365277e8060.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 30036 IP address blocks: 108.161.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e4:81:0b:40:c0:35:d5:41:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=03d55888-c1ae-4ee3-bd08-d1f95d2331f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:b3:43:58:72:9f:a2:90:46:2f:17:43:73: b9:55:35:1b:f4:6d:13:18:03:62:2c:72:9a:64:1e: cb:87:66:e0:d5:7e:b8:63:16:55:65:2b:94:04:9f: b1:dc:70:81:a0:f7:32:ba:ed:41:bc:2b:ac:b0:a8: 53:ca:f8:8f:45:dc:5f:fa:bd:3e:43:2d:bb:04:d6: 77:e7:b4:93:f9:6a:3b:24:d6:a2:88:2b:74:d7:67: b3:63:47:4e:4a:55:94:51:6d:08:f9:16:42:08:ee: a0:72:62:03:42:9e:43:cd:f3:92:23:85:69:5f:4e: a7:04:ab:b5:eb:12:46:6e:5f:a4:75:dc:49:3a:35: 48:c4:d0:97:b2:65:69:6d:2b:60:ee:38:21:4a:32: fc:aa:88:e4:1b:08:87:e3:85:09:08:e9:bd:93:79: a8:d5:24:b8:9c:17:04:2b:b4:63:25:a0:38:da:02: f2:b8:57:43:de:fa:8d:3e:bf:62:31:0f:72:ef:de: 22:7a:b0:2d:e8:c2:3f:7c:53:b3:e6:a6:ab:03:b7: a1:fc:3e:f0:31:21:01:89:a3:48:5e:59:db:60:90: 5d:70:58:c2:c2:8f:2a:61:c8:ec:11:6d:60:24:01: 45:ec:4e:4e:14:3d:c5:1c:8b:c9:79:19:c8:3a:bc: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:AC:C2:C7:9B:49:4B:5C:85:8B:D1:D0:C9:94:9A:C4:E4:74:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cffafbee-a62e-3b7a-96f1-9365277e8060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9b:de:36:dc:1a:72:d7:74:18:e0:e6:53:a6:cd:28:1c:06: 8f:b9:e0:dd:b7:1d:ce:10:24:3d:76:24:e5:14:fa:56:53:a6: fb:bd:a5:4c:0c:f2:ab:28:2b:b0:45:01:54:aa:48:6b:a0:a3: 6e:ad:3c:d3:9c:30:6d:89:58:f5:14:13:4a:48:54:83:3d:f5: 30:0e:39:b1:07:68:83:37:99:b2:83:e4:fb:e6:db:b9:38:0b: 5e:c5:7b:d9:5a:5f:f6:ca:04:43:12:66:49:17:f8:a3:75:06: 9f:17:26:cb:4e:4a:f4:a9:f1:97:38:a9:ef:d9:26:19:46:45: 00:19:fd:0d:0a:38:7d:fb:b4:6f:1f:db:f9:7f:0f:36:3e:d5: 71:ab:db:b5:a4:51:df:63:bb:0d:30:be:2e:eb:ce:bf:36:0b: d7:47:8f:1e:30:68:25:27:c1:83:8c:94:2f:95:fa:7e:e8:32: aa:95:8d:2a:26:b9:03:57:34:84:5f:e9:0a:94:9c:2c:76:5a: 66:3e:b5:1e:03:43:d4:9d:52:d3:22:e2:34:09:7a:cd:5c:d3: ff:d2:dc:b7:41:05:8a:32:1f:29:3b:be:81:c4:98:a7:23:82: 6d:74:55:2f:df:fc:e2:a0:d0:5d:20:8a:6a:d8:c8:66:f7:a9: 0c:1a:a5:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uSBC0DANdVBwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk MDNkNTU4ODgtYzFhZS00ZWUzLWJkMDgtZDFmOTVkMjMzMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnruzQ1hyn6KQRi8XQ3O5VTUb9G0TGANiLHKa ZB7Lh2bg1X64YxZVZSuUBJ+x3HCBoPcyuu1BvCussKhTyviPRdxf+r0+Qy27BNZ3 57ST+Wo7JNaiiCt012ezY0dOSlWUUW0I+RZCCO6gcmIDQp5DzfOSI4VpX06nBKu1 6xJGbl+kddxJOjVIxNCXsmVpbStg7jghSjL8qojkGwiH44UJCOm9k3mo1SS4nBcE K7RjJaA42gLyuFdD3vqNPr9iMQ9y794ierAt6MI/fFOz5qarA7eh/D7wMSEBiaNI XlnbYJBdcFjCwo8qYcjsEW1gJAFF7E5OFD3FHIvJeRnIOrzTkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0urMLHm0lLXIWL0dDJlJrE5HSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2ZmYWZiZWUtYTYyZS0z YjdhLTk2ZjEtOTM2NTI3N2U4MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2b3jbcGnLXdBjg5lOmzSgcBo+54N23Hc4QJD12JOUU+lZTpvu9pUwM 8qsoK7BFAVSqSGugo26tPNOcMG2JWPUUE0pIVIM99TAOObEHaIM3mbKD5Pvm27k4 C17Fe9laX/bKBEMSZkkX+KN1Bp8XJstOSvSp8Zc4qe/ZJhlGRQAZ/Q0KOH37tG8f 2/l/DzY+1XGr27WkUd9juw0wvi7rzr82C9dHjx4waCUnwYOMlC+V+n7oMqqVjSom uQNXNIRf6QqUnCx2WmY+tR4DQ9SdUtMi4jQJes1c0//S3LdBBYoyHyk7voHEmKcj gm10VS/f/OKg0F0gimrYyGb3qQwapeM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:18 2025 by rpki-client