$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c49ddfe-9345-376a-a1f0-3807ee9d5ce5.roa File: 6c49ddfe-9345-376a-a1f0-3807ee9d5ce5.roa (raw, json) Hash identifier: 3mWgiy+UZBPA8OO3Zlor6kh8jbcUYZ6QZFio0IIGk2o= Subject key identifier: 50:D2:90:DD:F7:07:76:B5:00:92:70:C8:4E:E9:8F:40:B6:03:71:5D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B821CB96288677858D1C47140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c49ddfe-9345-376a-a1f0-3807ee9d5ce5.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 30036 IP address blocks: 104.201.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:b9:62:88:67:78:58:d1:c4:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=cb0312db-4055-41dd-a0eb-60126e8da25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:91:a3:c4:49:9e:df:f5:2d:3c:95:1d:2b: 5c:f1:15:8e:f3:2a:f9:49:dc:fc:a3:71:7f:3d:c0: 63:25:de:98:43:3a:54:1f:33:64:f8:b5:0f:08:7a: 39:29:5d:8a:61:6e:d5:21:cf:a2:37:08:d7:0a:1d: 49:49:f4:46:94:a3:31:9e:30:9f:3c:17:c5:0c:b3: 24:32:21:f3:5b:3c:01:96:52:d7:2b:29:38:36:69: eb:70:ad:11:b7:0a:1f:9f:a7:fe:4b:8c:61:16:10: 5c:49:01:6c:2a:ee:5a:d9:37:be:89:2f:7d:37:32: 76:5a:20:e9:77:a2:ea:20:b6:17:18:e5:5d:d8:9d: f2:63:87:0a:28:f9:ac:c2:1d:a3:47:97:db:53:db: 60:cf:6b:8a:be:2b:e6:ee:7c:bc:af:e4:35:bd:0d: 0d:52:bf:0f:ee:df:e5:22:b4:c7:cb:ad:7c:74:9c: ae:11:12:c8:ee:96:c8:98:d3:36:88:85:87:3e:85: bb:38:ff:79:56:8c:00:5f:ac:f4:b6:e5:a2:c4:34: 3b:d8:f4:81:c0:f4:a8:75:82:e7:df:79:95:f4:3a: c7:13:e1:86:ba:de:33:53:ee:df:cd:3b:6c:64:a7: b6:db:76:c4:69:74:19:7d:3d:74:f9:ed:b7:ce:b8: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D2:90:DD:F7:07:76:B5:00:92:70:C8:4E:E9:8F:40:B6:03:71:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c49ddfe-9345-376a-a1f0-3807ee9d5ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:48:98:37:4b:3e:e4:6d:fa:4c:3b:25:07:33:27:37:66:85: a5:28:08:cd:98:3b:24:74:86:57:0a:89:8c:3b:a3:08:2c:8a: cb:29:05:71:d9:6f:ab:f8:d9:ca:a0:bc:b5:b8:26:37:33:3d: bb:e7:a4:d7:56:3c:86:fd:e0:74:77:28:5c:55:e2:d5:79:e2: 10:ce:1c:32:96:a5:02:7c:ce:12:f2:4e:b2:d3:c7:a7:7a:a8: db:b8:71:ca:51:41:e3:d9:54:3a:16:89:2b:c5:89:28:58:7b: d9:11:8f:8d:73:1b:02:db:11:6b:f7:d9:8c:e6:db:68:17:b6: c9:6b:43:6f:97:86:1e:67:18:71:44:04:e8:39:a2:6f:b6:04: 10:ec:80:b2:79:24:32:8c:f5:9d:16:65:e2:20:45:93:fc:b9: 66:6a:7a:35:f4:48:21:5f:3a:7f:29:2a:66:a8:84:47:ec:c5: b9:73:47:2c:e6:54:5e:f8:5b:fe:03:5c:1f:22:b7:8a:1a:fa: fa:44:1c:3e:5e:50:67:f4:76:7e:78:d1:07:00:7e:45:43:61: e5:f9:e6:65:54:19:43:b5:8b:4b:7d:e2:6d:d3:af:0f:8b:9e: 81:26:cb:7a:12:36:66:f3:55:e3:98:46:96:86:7f:c3:40:a1: 38:23:44:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHLliiGd4WNHEcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Y2IwMzEyZGItNDA1NS00MWRkLWEwZWItNjAxMjZlOGRhMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzSRo8RJnt/1LTyVHStc8RWO8yr5Sdz8o3F/ PcBjJd6YQzpUHzNk+LUPCHo5KV2KYW7VIc+iNwjXCh1JSfRGlKMxnjCfPBfFDLMk MiHzWzwBllLXKyk4NmnrcK0Rtwofn6f+S4xhFhBcSQFsKu5a2Te+iS99NzJ2WiDp d6LqILYXGOVd2J3yY4cKKPmswh2jR5fbU9tgz2uKvivm7ny8r+Q1vQ0NUr8P7t/l IrTHy618dJyuERLI7pbImNM2iIWHPoW7OP95VowAX6z0tuWixDQ72PSBwPSodYLn 33mV9DrHE+GGut4zU+7fzTtsZKe223bEaXQZfT10+e23zrjhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDSkN33B3a1AJJwyE7pj0C2A3FdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmM0OWRkZmUtOTM0NS0z NzZhLWExZjAtMzgwN2VlOWQ1Y2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxImDdLPuRt+kw7JQczJzdmhaUoCM2YOyR0hlcKiYw7owgsisspBXHZ b6v42cqgvLW4JjczPbvnpNdWPIb94HR3KFxV4tV54hDOHDKWpQJ8zhLyTrLTx6d6 qNu4ccpRQePZVDoWiSvFiShYe9kRj41zGwLbEWv32Yzm22gXtslrQ2+Xhh5nGHFE BOg5om+2BBDsgLJ5JDKM9Z0WZeIgRZP8uWZqejX0SCFfOn8pKmaohEfsxblzRyzm VF74W/4DXB8it4oa+vpEHD5eUGf0dn540QcAfkVDYeX55mVUGUO1i0t94m3Trw+L noEmy3oSNmbzVeOYRpaGf8NAoTgjRBY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:56:46 2025 by rpki-client