$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa File: de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa (raw, json) Hash identifier: xI/73dxJiN+m2aKH+I2edWczvm951nck5c0QB3xLmYs= Subject key identifier: 42:D7:0B:8C:6D:3B:D8:5C:70:FC:EC:3B:10:78:31:D4:E1:89:E9:3C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39CF24D2FF64ECF5903AA40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f2:4d:2f:f6:4e:cf:59:03:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=67c8072e-be2b-4647-91e4-dcf65ba19aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:90:80:d9:05:72:ad:0a:b7:39:7c:78:1b: ff:c8:a7:a3:21:db:b0:10:54:d8:58:5d:e1:7c:34: 5a:cf:5d:b8:4d:e5:4c:d4:d5:a7:eb:b1:aa:e0:f3: 80:43:aa:7d:f9:0c:76:3c:c2:5e:9c:4b:be:06:cc: 6d:d4:de:9e:ec:e8:9f:35:06:ae:2c:ba:4f:7e:ab: 6d:f5:28:32:7c:8b:d5:9e:56:57:49:63:16:69:44: 3b:24:73:04:eb:02:3a:67:0e:5b:b0:6e:3c:0e:a4: f6:cb:8b:b7:b0:0d:9b:59:4b:55:aa:bf:39:46:63: 97:9c:1b:dc:c0:a5:52:82:13:18:c1:b7:3b:43:64: dc:a7:d7:02:f5:ca:5e:3b:95:fb:33:cc:38:48:5d: c6:b1:28:1b:a6:eb:ff:55:ae:b5:bd:81:7f:fc:ca: 2f:21:63:3d:1a:23:85:6b:c1:e6:62:4d:90:52:7d: c2:17:6a:fb:93:de:38:63:8b:59:4d:88:5f:cf:c5: 27:03:09:3d:d1:20:23:02:17:a3:b7:55:3d:a1:4d: 46:7e:bf:41:7c:50:a8:08:a3:e8:1c:cc:90:61:1b: f0:7d:17:b3:58:5b:ac:03:0b:c6:75:04:2f:a2:1d: a2:3f:27:02:ed:21:d0:ee:ed:bc:bc:36:ec:a7:f8: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:0B:8C:6D:3B:D8:5C:70:FC:EC:3B:10:78:31:D4:E1:89:E9:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:21:a0:fa:f5:c3:fc:90:c8:4c:a2:9c:44:d0:c4:45:af:5a: e7:18:e1:63:13:29:93:22:98:dc:d6:a2:5f:50:19:56:38:2b: d9:6c:b9:1e:87:e1:5b:bf:c7:2b:94:36:00:02:a2:5a:3b:cf: 46:d9:9c:3f:85:ce:51:05:a5:8a:c7:2c:f8:1b:41:aa:43:61: cd:17:8e:4a:22:85:35:cd:6c:23:d6:c8:55:5a:a3:49:49:9b: 0e:cf:14:8d:47:0e:dd:6b:53:fe:0f:ff:b6:30:97:1a:78:8e: 77:56:f8:8b:fb:81:22:7b:be:47:b6:8b:f4:d1:6d:29:28:5e: 2f:2e:60:55:c8:60:92:51:41:0b:b5:14:ee:d2:f1:28:2f:49: 61:0c:d1:e9:8e:e8:3f:ed:87:63:d0:69:cc:40:5b:60:95:ce: f8:b9:e5:67:72:0a:a2:24:a6:cf:d3:15:f5:37:33:4f:5b:5a: f2:86:1f:a9:6b:bf:53:34:aa:55:1b:a4:2f:33:06:be:2d:a9: 40:7a:75:09:0e:93:9f:40:43:60:01:d8:8a:d0:63:03:cc:dc: 81:a6:5a:86:a4:f7:39:cb:e4:98:0f:fe:55:99:9f:13:ae:55: f4:3e:38:1d:48:d5:aa:99:b1:7a:fb:12:74:4d:c9:ba:a6:e2: 20:e0:5b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPJNL/ZOz1kDqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjdjODA3MmUtYmUyYi00NjQ3LTkxZTQtZGNmNjViYTE5YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnCQgNkFcq0Ktzl8eBv/yKejIduwEFTYWF3h fDRaz124TeVM1NWn67Gq4POAQ6p9+Qx2PMJenEu+Bsxt1N6e7OifNQauLLpPfqtt 9SgyfIvVnlZXSWMWaUQ7JHME6wI6Zw5bsG48DqT2y4u3sA2bWUtVqr85RmOXnBvc wKVSghMYwbc7Q2Tcp9cC9cpeO5X7M8w4SF3GsSgbpuv/Va61vYF//MovIWM9GiOF a8HmYk2QUn3CF2r7k944Y4tZTYhfz8UnAwk90SAjAhejt1U9oU1Gfr9BfFCoCKPo HMyQYRvwfRezWFusAwvGdQQvoh2iPycC7SHQ7u28vDbsp/hA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELXC4xtO9hccPzsOxB4MdThiek8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGUxZmIxMmMtYmM4My0z ZjEyLThjODItNzI5OWY5MmMxZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMl/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEhoPr1w/yQyEyinETQxEWvWucY4WMTKZMimNzWol9QGVY4K9lsuR6H 4Vu/xyuUNgAColo7z0bZnD+FzlEFpYrHLPgbQapDYc0XjkoihTXNbCPWyFVao0lJ mw7PFI1HDt1rU/4P/7Ywlxp4jndW+Iv7gSJ7vke2i/TRbSkoXi8uYFXIYJJRQQu1 FO7S8SgvSWEM0emO6D/th2PQacxAW2CVzvi55WdyCqIkps/TFfU3M09bWvKGH6lr v1M0qlUbpC8zBr4tqUB6dQkOk59AQ2AB2IrQYwPM3IGmWoak9znL5JgP/lWZnxOu VfQ+OB1I1aqZsXr7EnRNybqm4iDgW4k= -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:04 2025 by rpki-client