$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa File: 3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa (raw, json) Hash identifier: XJQGTA3e3BUct2JZs2aji+w45KAn5oDogFMJYUDfUwQ= Subject key identifier: 38:CF:18:A0:CF:77:94:77:E0:A2:D2:C2:33:8E:0C:45:82:B8:0A:30 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B3557055351E4DDAE5D137D00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 104.201.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:05:53:51:e4:dd:ae:5d:13:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=7424561b-7893-41ef-aae7-dce87a809577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:63:12:65:0b:0e:df:d6:0b:e4:fe:a4:ab: 9c:e8:5f:53:f3:f1:97:bf:be:39:c3:db:b7:40:96: 54:e1:8e:2c:44:ac:88:f0:f5:7e:a4:5e:df:7c:de: 96:3b:06:35:7d:db:d5:57:c1:ee:ae:a1:3f:e9:7f: 33:3e:a9:59:8b:69:99:54:fa:7c:1c:84:be:f9:9a: a7:21:f9:cf:08:f2:1e:b7:ac:31:a4:28:78:e2:ec: 94:1c:58:de:2f:62:1e:1f:b1:41:18:02:5c:33:c5: 08:00:36:eb:7e:7c:01:3a:ba:f9:07:93:e4:f2:e9: 3f:2d:bf:10:2b:74:ef:39:49:31:c9:51:3e:87:79: 23:4c:89:3c:ce:35:94:06:33:85:f0:01:f2:ca:b9: e4:5f:d5:ac:0f:c9:81:27:6c:ae:f2:c6:af:8f:a5: c3:8a:76:02:cf:87:16:78:70:b6:ba:b8:8c:06:e7: eb:67:d3:b8:02:d0:db:3e:10:bb:3d:16:6a:a7:83: 78:d9:99:e8:c8:c1:a5:f2:b8:58:ad:e8:9e:f9:6e: 83:b0:6a:37:c1:ae:00:33:3d:eb:57:1f:12:7e:fd: 39:ea:ad:20:53:73:12:87:c8:81:d9:e4:c1:5a:0a: 1d:70:1d:d5:46:49:5e:e9:67:a9:a3:75:fc:82:1d: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:18:A0:CF:77:94:77:E0:A2:D2:C2:33:8E:0C:45:82:B8:0A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0e:8f:50:cd:40:74:5f:40:92:f2:bf:21:e4:0a:4c:05:7d: 14:fc:e2:2f:f6:83:10:b6:e0:88:58:5b:9f:f5:c9:1a:a8:bf: fe:bd:ea:18:0b:f0:ad:20:86:a5:57:09:20:7b:f3:e3:c6:6f: 56:05:a4:f5:99:54:7e:d3:03:9e:99:e5:a5:55:72:73:3e:c6: 49:f6:c2:c1:3e:3b:f4:45:8f:f1:4c:be:1b:60:25:68:56:ed: 14:60:c9:fa:c3:b0:d8:ed:1d:31:2b:5c:52:85:fe:07:9a:f4: be:f7:72:7d:76:3d:38:b7:12:9b:b7:db:40:8f:e4:f5:e5:f4: 7d:92:70:d0:8b:9d:32:1e:95:4c:d2:6e:c3:9a:f5:48:24:03: e3:02:7f:47:2c:ce:c2:f9:42:8e:b8:13:05:b0:c7:ce:a1:83: 39:d5:53:b7:3c:fd:ff:c1:76:71:be:ad:c4:db:53:1d:6d:77: 11:23:64:08:38:36:1f:40:c1:92:9a:6b:19:a2:e8:14:28:52: 9e:83:4a:0a:0c:d1:20:0f:b0:66:fd:46:26:e9:7f:ce:e0:ff: 9e:34:cb:af:cc:dd:c0:4c:94:b4:5d:66:da:91:31:1a:be:c1: ed:5c:e0:13:f0:46:fc:46:8e:95:9e:be:79:1a:20:1d:ed:a1: 50:a7:b3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VwVTUeTdrl0TfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NzQyNDU2MWItNzg5My00MWVmLWFhZTctZGNlODdhODA5NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wJjEmULDt/WC+T+pKuc6F9T8/GXv745w9u3 QJZU4Y4sRKyI8PV+pF7ffN6WOwY1fdvVV8HurqE/6X8zPqlZi2mZVPp8HIS++Zqn IfnPCPIet6wxpCh44uyUHFjeL2IeH7FBGAJcM8UIADbrfnwBOrr5B5Pk8uk/Lb8Q K3TvOUkxyVE+h3kjTIk8zjWUBjOF8AHyyrnkX9WsD8mBJ2yu8savj6XDinYCz4cW eHC2uriMBufrZ9O4AtDbPhC7PRZqp4N42ZnoyMGl8rhYreie+W6DsGo3wa4AMz3r Vx8Sfv056q0gU3MSh8iB2eTBWgodcB3VRkle6Wepo3X8gh0FIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjPGKDPd5R34KLSwjOODEWCuAowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2VlMWZiNDEtNTc1NC0z NWI5LWJjNzUtYWMwYTk1MWU3MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAOj1DNQHRfQJLyvyHkCkwFfRT84i/2gxC24IhYW5/1yRqov/696hgL 8K0ghqVXCSB78+PGb1YFpPWZVH7TA56Z5aVVcnM+xkn2wsE+O/RFj/FMvhtgJWhW 7RRgyfrDsNjtHTErXFKF/gea9L73cn12PTi3Epu320CP5PXl9H2ScNCLnTIelUzS bsOa9UgkA+MCf0cszsL5Qo64EwWwx86hgznVU7c8/f/BdnG+rcTbUx1tdxEjZAg4 Nh9AwZKaaxmi6BQoUp6DSgoM0SAPsGb9Ribpf87g/540y6/M3cBMlLRdZtqRMRq+ we1c4BPwRvxGjpWevnkaIB3toVCns8A= -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:36 2025 by rpki-client