$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbfb13a2-556e-3c00-bccb-1e25c69e901f.roa File: dbfb13a2-556e-3c00-bccb-1e25c69e901f.roa (raw, json) Hash identifier: yc4FJRLp6LkXDAlQqOUl7wzve8I3J7sl1BWsl55ldfY= Subject key identifier: 03:46:47:3F:BD:F6:81:D8:EF:25:25:0A:EE:49:9F:E7:82:F3:E8:30 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D17216EDA10618AA30580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbfb13a2-556e-3c00-bccb-1e25c69e901f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:17:21:6e:da:10:61:8a:a3:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=139ab455-6ba0-42b6-9839-3999e1f1d746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:15:6f:8b:22:ed:8f:e6:e3:31:41:fd:9c: 10:eb:df:bb:f2:4f:e0:e8:51:e3:f2:74:df:dc:e8: c3:07:7a:69:24:76:20:0f:d8:0e:26:24:b5:40:46: 8e:29:fe:ac:8b:53:8b:ac:da:dd:25:98:f1:1e:c5: 5f:03:93:b4:77:62:dc:8d:86:b7:02:ce:48:62:49: 52:0b:bd:33:dd:07:d3:40:bd:fa:4a:e8:e8:67:1c: b3:fe:95:f2:51:58:1c:ef:33:90:a1:57:c5:29:01: e9:39:0e:ae:d2:c1:8a:cb:c9:82:52:0f:da:33:0c: 34:63:b5:69:de:1b:08:94:65:e4:c9:22:a9:d8:91: 99:2b:18:7b:57:6d:d4:57:0e:f4:21:f2:10:92:ca: d6:5c:06:94:6a:cf:e1:1d:11:ef:dd:5c:96:50:43: 27:46:88:27:d4:71:84:6c:fc:fc:03:d0:99:0d:fa: f8:6b:94:34:d9:21:3e:82:7d:ef:9f:2d:e0:f3:6f: db:2b:2c:05:3b:99:b7:02:cc:5c:bb:4d:16:be:c9: d5:5f:07:30:85:ad:e3:54:f1:34:08:1c:3d:1b:a3: 82:a4:47:fd:41:dc:43:d2:ba:6d:aa:f9:a0:6d:33: 37:a0:22:de:ee:c9:56:3e:f6:c6:f3:1e:b4:41:e3: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:46:47:3F:BD:F6:81:D8:EF:25:25:0A:EE:49:9F:E7:82:F3:E8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbfb13a2-556e-3c00-bccb-1e25c69e901f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5a:9b:5e:6e:fd:30:f1:25:7f:23:f1:a3:0a:e8:47:6a:7e: e8:a5:4b:ee:a9:17:f1:60:50:5e:4b:19:11:2a:5f:7e:9d:c3: 6a:4d:82:7a:2c:bb:69:d1:89:8e:b1:85:c1:df:10:e0:ec:b7: d0:ad:fe:30:bf:3e:16:4c:1d:6b:13:2b:8c:ad:f6:0a:97:ff: 79:d6:4f:1b:02:f4:b0:ef:69:30:44:b9:30:87:bb:19:01:15: c7:4d:c3:c6:04:8f:6b:1d:63:eb:6f:8a:1a:5d:04:94:c9:7c: 2d:e5:79:b6:df:95:fa:1a:06:c3:89:e8:98:a1:a2:de:5b:bf: 1f:10:d4:00:d6:b0:44:01:05:2f:1e:8d:a0:c6:1c:a3:b1:91: 8e:29:a8:70:42:ec:20:56:a5:5a:21:b2:ad:05:41:f7:2e:e2: ae:b5:b5:1a:c2:33:0e:fa:2d:ba:75:8c:c2:d8:7c:db:f3:4a: f8:7d:7a:6d:92:3c:c7:9c:eb:53:58:09:ee:f1:0d:4b:8d:60: 5b:1c:c4:ad:8e:b7:22:9c:f3:24:7a:1a:be:8a:48:58:dc:7c: a9:63:77:65:36:4a:67:14:7a:3f:e5:7d:37:93:82:35:2e:4f: 8c:ca:70:99:c2:33:a6:ea:65:35:77:dd:a7:36:4a:fd:bc:e0: 49:e0:37:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRchbtoQYYqjBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTM5YWI0NTUtNmJhMC00MmI2LTk4MzktMzk5OWUxZjFkNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mEVb4si7Y/m4zFB/ZwQ69+78k/g6FHj8nTf 3OjDB3ppJHYgD9gOJiS1QEaOKf6si1OLrNrdJZjxHsVfA5O0d2LcjYa3As5IYklS C70z3QfTQL36SujoZxyz/pXyUVgc7zOQoVfFKQHpOQ6u0sGKy8mCUg/aMww0Y7Vp 3hsIlGXkySKp2JGZKxh7V23UVw70IfIQksrWXAaUas/hHRHv3VyWUEMnRogn1HGE bPz8A9CZDfr4a5Q02SE+gn3vny3g82/bKywFO5m3Asxcu00WvsnVXwcwha3jVPE0 CBw9G6OCpEf9QdxD0rptqvmgbTM3oCLe7slWPvbG8x60QeMMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANGRz+99oHY7yUlCu5Jn+eC8+gwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGJmYjEzYTItNTU2ZS0z YzAwLWJjY2ItMWUyNWM2OWU5MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVam15u/TDxJX8j8aMK6EdqfuilS+6pF/FgUF5LGREqX36dw2pNgnos u2nRiY6xhcHfEODst9Ct/jC/PhZMHWsTK4yt9gqX/3nWTxsC9LDvaTBEuTCHuxkB FcdNw8YEj2sdY+tvihpdBJTJfC3lebbflfoaBsOJ6Jihot5bvx8Q1ADWsEQBBS8e jaDGHKOxkY4pqHBC7CBWpVohsq0FQfcu4q61tRrCMw76Lbp1jMLYfNvzSvh9em2S PMec61NYCe7xDUuNYFscxK2OtyKc8yR6Gr6KSFjcfKljd2U2SmcUej/lfTeTgjUu T4zKcJnCM6bqZTV33ac2Sv284EngN6g= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:55 2025 by rpki-client