$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa File: f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa (raw, json) Hash identifier: qFqrMp8j/jtjDv+NfS9P6R4lyPJuXnSpaU5v9cYQzGo= Subject key identifier: 47:4F:34:F1:80:E9:09:2E:80:3A:88:73:8A:0D:D6:8F:A6:26:0C:5D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA39D17A5AA3EF36660F267C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 104.201.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:17:a5:aa:3e:f3:66:60:f2:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=c21df198-eecc-404b-b9d1-867d5816f34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:93:4a:af:28:cd:58:a7:26:18:74:2b:c5: ae:3e:26:f9:39:ea:5c:44:4f:e5:04:cd:89:52:de: 06:17:af:f5:02:83:9f:8f:7a:3c:51:43:97:66:b6: 86:9e:89:32:f5:19:be:f6:96:ec:8b:b4:65:81:0f: ec:12:c0:77:49:0d:93:fa:82:11:b9:73:30:fa:ea: 92:35:72:2f:4f:37:b0:5b:56:2e:18:2f:67:9c:80: 17:43:fb:a0:9d:b3:49:b4:0d:8d:93:62:14:4b:c9: d5:9d:43:89:b8:2f:e1:4f:46:32:01:a2:7a:37:d7: 56:e6:d0:9e:ae:92:b0:ee:3e:f8:3a:02:c1:af:8f: 38:52:ea:12:5e:d8:3e:7e:80:91:c9:69:b0:6b:2b: 33:d7:48:54:7a:32:b4:37:d3:77:2e:b4:af:48:ae: 06:42:d6:a9:e3:91:ad:b0:08:ae:ec:ea:f9:ac:b3: 68:6e:cf:a7:0a:9e:6b:2d:ed:fc:c4:d5:ea:1e:fb: 47:4f:14:94:be:1f:5a:d2:bb:3b:6f:aa:00:70:3a: da:03:c5:35:7e:71:50:5a:10:8b:56:2f:14:40:39: 9e:c3:91:ca:d7:98:2b:c8:e6:0a:a6:ca:7b:03:dc: 23:32:ce:1e:d2:01:ac:50:cb:5d:69:7b:c8:38:fc: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:34:F1:80:E9:09:2E:80:3A:88:73:8A:0D:D6:8F:A6:26:0C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:49:61:5c:31:ef:14:a2:05:96:ff:72:4f:54:cc:3e:28:cc: 02:ef:3f:93:24:f2:28:c7:3b:a2:fe:08:aa:18:97:cc:ac:f9: 30:60:11:b9:83:7e:b6:f8:4b:8d:f7:ab:9d:82:69:1a:04:37: d3:77:ba:e9:a0:42:ca:63:f7:0a:0b:4d:62:a3:d6:dc:ad:2b: 42:33:2b:6b:fd:0c:87:a5:9a:4e:4f:0e:04:ba:0d:74:e4:6b: ba:02:6d:6f:a0:84:64:18:24:69:da:53:c2:7c:5c:a3:50:dc: b0:b2:78:c4:16:38:53:73:9f:60:90:ea:2b:d5:d5:dd:66:b0: 4a:ff:62:f0:6f:c7:52:03:9d:01:fe:79:1a:e0:38:62:01:4d: 0b:1a:f9:9a:2c:96:ed:b8:8f:07:9b:e7:42:c1:b1:f6:91:f5: 76:4e:46:93:a4:0a:82:a8:1c:ba:d6:c1:77:d6:b2:a1:4b:6f: 8b:a6:ba:0f:5d:c8:ec:36:0b:fe:79:07:23:f9:9e:03:29:f0: 02:b7:de:c5:59:f7:2f:51:93:2a:65:4f:3c:3b:12:ab:c5:4a: c9:57:08:cc:2c:a5:1d:e4:01:81:32:b9:5b:3a:6c:14:f4:5f: 07:42:a4:50:b8:29:68:ce:a7:69:88:d7:47:ee:ef:d9:9d:51: bb:8f:fa:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRelqj7zZmDyZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YzIxZGYxOTgtZWVjYy00MDRiLWI5ZDEtODY3ZDU4MTZmMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GqTSq8ozVinJhh0K8WuPib5OepcRE/lBM2J Ut4GF6/1AoOfj3o8UUOXZraGnoky9Rm+9pbsi7RlgQ/sEsB3SQ2T+oIRuXMw+uqS NXIvTzewW1YuGC9nnIAXQ/ugnbNJtA2Nk2IUS8nVnUOJuC/hT0YyAaJ6N9dW5tCe rpKw7j74OgLBr484UuoSXtg+foCRyWmwaysz10hUejK0N9N3LrSvSK4GQtap45Gt sAiu7Or5rLNobs+nCp5rLe38xNXqHvtHTxSUvh9a0rs7b6oAcDraA8U1fnFQWhCL Vi8UQDmew5HK15gryOYKpsp7A9wjMs4e0gGsUMtdaXvIOPzCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdPNPGA6QkugDqIc4oN1o+mJgxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjE5YmM2MmMtYmVhMi0z ZWJmLWE2Y2MtMzViMTNlNDVlMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJJYVwx7xSiBZb/ck9UzD4ozALvP5Mk8ijHO6L+CKoYl8ys+TBgEbmD frb4S433q52CaRoEN9N3uumgQspj9woLTWKj1tytK0IzK2v9DIelmk5PDgS6DXTk a7oCbW+ghGQYJGnaU8J8XKNQ3LCyeMQWOFNzn2CQ6ivV1d1msEr/YvBvx1IDnQH+ eRrgOGIBTQsa+Zoslu24jweb50LBsfaR9XZORpOkCoKoHLrWwXfWsqFLb4umug9d yOw2C/55ByP5ngMp8AK33sVZ9y9RkyplTzw7EqvFSslXCMwspR3kAYEyuVs6bBT0 XwdCpFC4KWjOp2mI10fu79mdUbuP+nU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:53 2025 by rpki-client