$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d45f596d-8d81-3c27-89f3-4ea066d089f7.roa File: d45f596d-8d81-3c27-89f3-4ea066d089f7.roa (raw, json) Hash identifier: jG56lLNt0QHx+PCMzSfMxXAZYWwz0oqIXzkB7W7nvNw= Subject key identifier: 18:07:19:4F:46:FB:98:58:C4:34:46:05:C2:45:AC:AF:1D:71:40:1B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D3874FFBC4D7646A89080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d45f596d-8d81-3c27-89f3-4ea066d089f7.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:38:74:ff:bc:4d:76:46:a8:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9c6a7ca5-5e6b-4590-9fc1-b89af70604d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:0a:1f:c6:2f:2c:53:02:c2:f9:bb:5c:7b: a5:59:eb:d6:9a:f1:90:9c:b2:bc:5f:31:15:6d:cd: 96:44:ca:2d:a3:5c:e7:b2:0a:a4:8d:24:1f:49:5c: e5:57:71:aa:58:3d:69:ce:b4:e0:3c:03:e8:77:f3: a8:28:54:ba:87:fb:b6:5a:d4:5e:f4:66:ab:15:8f: 9a:79:af:60:05:88:dc:0f:40:aa:8d:9c:98:5a:10: 63:63:08:47:4f:64:97:a0:9e:ca:21:5c:9a:64:e0: 51:93:8a:47:d0:80:df:aa:36:d7:99:24:0d:d2:fc: 3f:10:74:f5:a5:5b:45:e1:2e:9d:5d:ca:5a:ad:d3: 3a:f1:7e:fc:bf:7a:75:8d:23:3d:09:90:c5:9b:71: 23:86:48:72:6e:e2:ce:7d:ac:65:fc:51:f0:28:17: 55:a8:01:09:b9:70:c5:ef:d4:d0:ea:07:ed:01:24: 34:87:9f:fb:0f:98:76:a8:ef:f8:2f:dd:e5:c4:73: af:30:69:5d:15:be:0c:55:3d:e7:f7:9e:d0:b7:c3: 48:01:ef:58:39:9f:75:b7:56:f9:02:7d:ff:a0:ce: 69:f4:8a:03:13:ee:2c:0f:44:97:d0:2f:df:c4:bf: e7:24:5a:19:23:9e:f0:5d:31:32:c5:4b:92:7f:6e: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:19:4F:46:FB:98:58:C4:34:46:05:C2:45:AC:AF:1D:71:40:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d45f596d-8d81-3c27-89f3-4ea066d089f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5e:85:13:8e:a6:d4:20:72:8b:3c:0a:79:cb:41:b5:21:4c: d0:42:cf:03:ce:02:93:14:1f:dc:ba:1c:fd:d6:2f:53:50:68: e1:1a:a2:19:85:3e:57:1e:f0:06:39:9f:0d:b6:28:92:2d:ac: a2:0f:bf:b0:ac:dd:da:91:a0:f6:5e:3c:30:7a:aa:5c:97:ff: 0f:ba:01:1d:64:ad:0e:a2:c4:01:c9:b2:92:09:15:1c:1a:ec: e1:04:2f:06:f0:7a:a3:ec:f8:06:d7:5e:e6:83:c3:9c:10:5d: ce:0f:b4:73:7c:58:2c:67:83:5f:d2:29:90:f9:6f:45:c5:1c: 8b:cb:ef:d1:83:35:46:4c:e4:b5:26:cf:17:10:c1:c1:5a:eb: b3:f7:65:73:b9:55:41:09:ec:ab:09:9e:4c:fd:de:9d:94:34: 17:97:bd:54:dc:f8:a2:ef:d3:a3:01:48:3c:91:7a:06:dd:84: d1:52:d8:e1:3f:49:d7:f9:bc:86:d6:bf:dc:f2:ce:73:24:54: 8c:70:53:60:3a:75:00:d6:c2:83:b8:4e:a1:ad:71:3a:2f:5f: d0:57:87:0d:67:da:46:41:49:53:8f:ec:19:7b:36:86:42:f7: 76:fc:26:39:af:43:2c:d8:af:ed:c9:d0:b5:0b:64:66:a4:39: f4:81:ed:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTh0/7xNdkaokIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OWM2YTdjYTUtNWU2Yi00NTkwLTlmYzEtYjg5YWY3MDYwNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHEKH8YvLFMCwvm7XHulWevWmvGQnLK8XzEV bc2WRMoto1znsgqkjSQfSVzlV3GqWD1pzrTgPAPod/OoKFS6h/u2WtRe9GarFY+a ea9gBYjcD0CqjZyYWhBjYwhHT2SXoJ7KIVyaZOBRk4pH0IDfqjbXmSQN0vw/EHT1 pVtF4S6dXcpardM68X78v3p1jSM9CZDFm3EjhkhybuLOfaxl/FHwKBdVqAEJuXDF 79TQ6gftASQ0h5/7D5h2qO/4L93lxHOvMGldFb4MVT3n957Qt8NIAe9YOZ91t1b5 An3/oM5p9IoDE+4sD0SX0C/fxL/nJFoZI57wXTEyxUuSf25L1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgHGU9G+5hYxDRGBcJFrK8dcUAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDQ1ZjU5NmQtOGQ4MS0z YzI3LTg5ZjMtNGVhMDY2ZDA4OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpehROOptQgcos8CnnLQbUhTNBCzwPOApMUH9y6HP3WL1NQaOEaohmF Plce8AY5nw22KJItrKIPv7Cs3dqRoPZePDB6qlyX/w+6AR1krQ6ixAHJspIJFRwa 7OEELwbweqPs+AbXXuaDw5wQXc4PtHN8WCxng1/SKZD5b0XFHIvL79GDNUZM5LUm zxcQwcFa67P3ZXO5VUEJ7KsJnkz93p2UNBeXvVTc+KLv06MBSDyRegbdhNFS2OE/ Sdf5vIbWv9zyznMkVIxwU2A6dQDWwoO4TqGtcTovX9BXhw1n2kZBSVOP7Bl7NoZC 93b8JjmvQyzYr+3J0LULZGakOfSB7c8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:45 2025 by rpki-client