$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa File: 3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa (raw, json) Hash identifier: UJxFTL427l8X8erHjiU6BksDR4ETPU36mPimayxrT9k= Subject key identifier: C5:7C:6F:32:21:DC:7A:43:95:CC:3D:A4:74:7C:40:A9:80:7E:43:48 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49895D8732DF44C2B3CDB380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 104.201.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:5d:87:32:df:44:c2:b3:cd:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd77f3fe-4e03-426b-a3ce-c03237459615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e5:87:55:ca:cb:bc:7c:37:59:d5:bb:da:49: 01:24:14:0d:a8:97:62:80:d2:2f:fc:7f:00:f9:4d: 29:a1:b8:5f:f0:05:90:2f:6f:fb:b8:e1:53:27:6e: 59:2c:dc:c2:67:48:56:57:62:6f:44:49:07:76:66: de:9f:ec:d5:6f:57:e6:53:a7:f9:55:48:77:30:cc: bd:6c:43:d1:2f:37:a5:2c:ac:f6:3a:38:8b:d2:77: a5:d6:c8:a2:ea:ad:84:c2:88:76:56:e5:51:38:c1: cd:ab:ab:f6:10:d0:6a:63:aa:5b:bd:db:ce:ea:31: 3c:45:24:f8:50:cf:26:e9:41:d0:92:c5:a6:7f:f2: 5a:44:27:a0:1a:84:77:6c:37:33:24:e0:d6:66:04: 21:f5:c8:0f:03:40:94:bd:8a:6b:00:a6:9d:7e:f3: 46:d6:54:c1:9b:5f:90:ca:53:76:d1:4c:dc:0d:60: c4:61:d0:88:9a:1e:2d:69:02:2d:4a:b4:f9:ca:32: f6:88:14:ea:a5:84:24:46:aa:e6:4e:56:e3:a2:e2: 73:2a:7f:77:74:7b:78:7a:4e:72:7f:6c:d7:24:d6: 0a:b1:d7:65:c8:f5:e9:50:a7:ce:55:48:22:59:5a: 7c:46:61:12:9b:86:dc:e1:5b:b7:35:60:58:b8:5b: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7C:6F:32:21:DC:7A:43:95:CC:3D:A4:74:7C:40:A9:80:7E:43:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ee1fb41-5754-35b9-bc75-ac0a951e7128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:78:b5:7d:51:41:c9:47:b9:a0:83:15:89:55:f0:fe:f6:a9: ef:a0:52:c9:8f:1a:52:f5:b4:0c:62:d2:e1:43:15:3a:13:c7: d0:15:fa:a2:1f:d5:b7:8f:60:76:dd:f0:a4:68:62:48:57:2f: 98:60:c9:71:92:e1:0a:49:1a:1f:8e:9c:0d:e4:c8:19:48:b8: c7:84:48:36:4a:4d:83:da:50:04:f2:c2:cd:95:67:bd:9a:96: 83:79:02:ce:09:98:f5:9f:59:f8:03:21:cf:8f:0b:cd:a3:36: 41:fa:58:8d:da:b5:14:b3:79:2d:90:a8:9d:1e:bc:2f:65:3d: 95:5d:93:5d:16:bf:71:93:d2:88:00:46:48:dd:71:32:82:cd: af:e4:36:6a:f4:85:ff:1e:6f:ac:d4:6e:b2:1a:39:4f:b2:cd: 51:43:48:1d:d3:5f:e2:3d:a8:a3:01:d2:50:a0:5a:ba:e1:df: 61:ff:ac:90:82:b0:59:5a:ea:98:ba:f7:00:3d:87:63:fd:24: 03:c4:e4:21:c3:3d:ac:19:87:10:50:4e:86:af:6c:6b:e1:bc: 55:67:5c:a2:3e:d6:0e:fd:1e:f0:92:61:0e:a1:26:bc:58:48: 5f:e6:de:f9:ca:56:c8:7e:54:94:0d:74:de:62:04:16:94:70: 31:16:40:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiV2HMt9EwrPNs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ3N2YzZmUtNGUwMy00MjZiLWEzY2UtYzAzMjM3NDU5NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguWHVcrLvHw3WdW72kkBJBQNqJdigNIv/H8A +U0pobhf8AWQL2/7uOFTJ25ZLNzCZ0hWV2JvREkHdmben+zVb1fmU6f5VUh3MMy9 bEPRLzelLKz2OjiL0nel1sii6q2Ewoh2VuVROMHNq6v2ENBqY6pbvdvO6jE8RST4 UM8m6UHQksWmf/JaRCegGoR3bDczJODWZgQh9cgPA0CUvYprAKadfvNG1lTBm1+Q ylN20UzcDWDEYdCImh4taQItSrT5yjL2iBTqpYQkRqrmTlbjouJzKn93dHt4ek5y f2zXJNYKsddlyPXpUKfOVUgiWVp8RmESm4bc4Vu3NWBYuFvtOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV8bzIh3HpDlcw9pHR8QKmAfkNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2VlMWZiNDEtNTc1NC0z NWI5LWJjNzUtYWMwYTk1MWU3MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB4tX1RQclHuaCDFYlV8P72qe+gUsmPGlL1tAxi0uFDFToTx9AV+qIf 1bePYHbd8KRoYkhXL5hgyXGS4QpJGh+OnA3kyBlIuMeESDZKTYPaUATyws2VZ72a loN5As4JmPWfWfgDIc+PC82jNkH6WI3atRSzeS2QqJ0evC9lPZVdk10Wv3GT0ogA RkjdcTKCza/kNmr0hf8eb6zUbrIaOU+yzVFDSB3TX+I9qKMB0lCgWrrh32H/rJCC sFla6pi69wA9h2P9JAPE5CHDPawZhxBQToavbGvhvFVnXKI+1g79HvCSYQ6hJrxY SF/m3vnKVsh+VJQNdN5iBBaUcDEWQMY= -----END CERTIFICATE-----Generated at Sat Sep 26 04:07:57 2026 by rpki-client