$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391a8c14-019d-33ea-ac62-c75672c9dfa6.roa File: 391a8c14-019d-33ea-ac62-c75672c9dfa6.roa (raw, json) Hash identifier: VbWEhNPnQSFGGmH8nWDFoo6YvRLcLG0Obv/K1FleWtY= Subject key identifier: 78:30:5D:2C:BD:F5:44:52:A4:97:94:E0:15:AE:52:E8:DC:31:F3:51 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E4559E57B539A3F7E7E60BF40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391a8c14-019d-33ea-ac62-c75672c9dfa6.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 30036 IP address blocks: 104.201.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e5:7b:53:9a:3f:7e:7e:60:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=1fbec727-7f62-4c5b-a2b5-0468aed07d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:1c:e2:c7:34:39:2f:b2:8c:54:a1:03:ae: bb:f7:64:56:a1:95:84:db:e9:af:f9:40:02:37:bc: e9:39:1a:e5:6e:b9:ea:db:07:8e:2e:a3:ed:99:c9: b6:e0:ff:5e:d8:76:d3:07:57:f8:1c:ef:1f:21:ab: eb:da:bd:44:71:77:03:b4:34:d3:76:34:da:e3:6f: b8:43:19:e8:12:9b:17:fa:20:99:82:ec:55:2e:bc: b4:9a:7b:0b:25:ba:fb:41:e8:52:25:e1:95:e4:19: 48:90:7c:a6:45:46:18:5a:ca:2e:dd:3c:41:8a:0e: a6:0c:d5:a8:5f:37:95:b0:b7:72:bb:a4:f2:31:23: 12:96:e5:90:bf:40:c2:cb:1e:a2:cc:0f:ed:e0:64: ab:6f:89:2e:54:e9:27:53:c7:89:35:23:18:2a:18: 72:3a:9a:9a:a9:7d:f3:77:44:49:4e:78:85:f3:e8: 7a:39:86:0b:8f:5d:2f:90:ac:8b:bc:f7:fb:28:c3: 54:3d:b1:e7:7f:21:3b:63:81:48:c1:b5:ec:42:0c: 4c:6f:d7:43:60:d0:9b:29:2d:6b:da:68:51:c2:7e: 13:03:a6:8e:b5:a1:ca:b5:b6:fb:dd:f6:0c:6c:3f: b2:20:37:f8:15:79:c9:d6:dd:3f:a9:0a:96:c3:62: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:30:5D:2C:BD:F5:44:52:A4:97:94:E0:15:AE:52:E8:DC:31:F3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391a8c14-019d-33ea-ac62-c75672c9dfa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:4b:ae:7d:38:73:6a:49:42:c4:e6:05:8e:be:b8:4a:98:b8: ec:aa:8d:91:c7:be:b2:8d:cc:16:da:58:bb:13:26:08:23:2a: c5:4a:5d:5e:68:17:ce:95:9b:9b:ec:4e:1d:ab:4f:b3:8d:e9: 6c:f7:6b:da:a6:3d:3b:88:ff:6d:5c:64:54:65:2e:79:8b:f9: 61:1c:79:22:8b:da:6c:8b:35:9c:7f:9c:ba:d9:8e:50:5b:15: b4:6c:c9:32:6c:0f:b1:e6:a6:ff:0d:a8:b9:16:34:cf:1e:7c: bd:8b:3a:7d:bb:56:fe:cc:49:b6:32:7a:c7:b7:8a:c8:c0:b5: 14:2f:af:12:72:b1:61:45:32:af:c5:d6:e9:89:3f:b9:46:ac: 01:36:35:29:43:dc:43:73:d4:77:2e:6b:41:ac:02:9b:18:81: 07:e1:32:4c:aa:1b:42:0f:06:b5:7b:4c:1b:e0:20:fb:dc:ab: ac:47:db:dd:6a:7c:df:f4:3c:cd:6f:51:d3:1c:d7:71:5b:db: b1:6e:1c:48:ba:32:f2:bc:f7:2c:9a:12:46:bd:96:f7:b3:36: ed:21:41:10:53:72:cf:fc:bc:9d:53:b6:fe:dc:5c:10:0e:9b: a1:96:f4:98:f0:e1:36:aa:df:54:52:78:56:f9:19:a1:6e:e6: b0:fd:bb:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWeV7U5o/fn5gv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk MWZiZWM3MjctN2Y2Mi00YzViLWEyYjUtMDQ2OGFlZDA3ZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA284c4sc0OS+yjFShA66792RWoZWE2+mv+UAC N7zpORrlbrnq2weOLqPtmcm24P9e2HbTB1f4HO8fIavr2r1EcXcDtDTTdjTa42+4 QxnoEpsX+iCZguxVLry0mnsLJbr7QehSJeGV5BlIkHymRUYYWsou3TxBig6mDNWo XzeVsLdyu6TyMSMSluWQv0DCyx6izA/t4GSrb4kuVOknU8eJNSMYKhhyOpqaqX3z d0RJTniF8+h6OYYLj10vkKyLvPf7KMNUPbHnfyE7Y4FIwbXsQgxMb9dDYNCbKS1r 2mhRwn4TA6aOtaHKtbb73fYMbD+yIDf4FXnJ1t0/qQqWw2IrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgwXSy99URSpJeU4BWuUujcMfNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzkxYThjMTQtMDE5ZC0z M2VhLWFjNjItYzc1NjcyYzlkZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlLrn04c2pJQsTmBY6+uEqYuOyqjZHHvrKNzBbaWLsTJggjKsVKXV5o F86Vm5vsTh2rT7ON6Wz3a9qmPTuI/21cZFRlLnmL+WEceSKL2myLNZx/nLrZjlBb FbRsyTJsD7Hmpv8NqLkWNM8efL2LOn27Vv7MSbYyese3isjAtRQvrxJysWFFMq/F 1umJP7lGrAE2NSlD3ENz1Hcua0GsApsYgQfhMkyqG0IPBrV7TBvgIPvcq6xH291q fN/0PM1vUdMc13Fb27FuHEi6MvK89yyaEka9lvezNu0hQRBTcs/8vJ1Ttv7cXBAO m6GW9Jjw4Taq31RSeFb5GaFu5rD9uxc= -----END CERTIFICATE-----Generated at Wed Jun 24 03:20:55 2026 by rpki-client