$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa File: 23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa (raw, json) Hash identifier: ESs8mRIEqKWrar3YTcO8aH7my5e1JVFLlD1P125R86E= Subject key identifier: B2:95:8A:E4:52:FD:87:C8:D6:F7:EA:38:7F:59:78:33:03:F9:D0:AC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A3FD39044535D259C1D12 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 72.255.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:3f:d3:90:44:53:5d:25:9c:1d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=18d66d20-ea72-42a4-9de7-0944091be47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:ba:bc:a5:54:f8:75:6f:fc:93:e8:a3:bf: 01:52:0a:d5:28:2a:b9:c3:f9:f1:b4:3f:7d:23:3e: 18:0c:7a:34:14:53:d0:ab:68:01:1f:ef:61:00:68: fc:0f:3e:59:3f:c8:59:0c:1d:92:c0:93:f8:d0:f5: 93:ad:95:f5:35:b6:47:5f:83:92:10:7d:5e:bc:f6: 36:86:3c:b9:4a:08:96:93:fb:fe:e7:9b:b1:40:e9: bc:e3:27:7f:da:ca:4b:15:54:32:99:15:1d:79:24: e7:50:be:e5:7f:22:b6:3c:ea:27:8e:9b:4e:a2:ec: cd:06:0e:a0:8b:c5:da:75:de:42:ef:d8:a9:9d:fb: c2:4c:d1:fe:dd:a0:ca:a9:1c:24:c5:21:b4:19:18: c0:d2:12:b0:9a:2b:b4:31:05:71:bf:19:57:cf:1d: 14:88:88:b9:22:06:c8:e5:44:91:8e:96:57:a0:6d: 98:ec:58:29:39:36:1f:8e:1d:b8:89:06:99:fa:d1: c8:06:2a:7f:7f:d8:c7:75:e9:ec:4e:01:d2:43:e1: 98:4d:e5:6b:dc:1a:93:38:b1:da:dd:e5:85:60:3c: 86:2a:69:8a:0e:3b:75:33:1c:d1:0a:34:10:54:31: 83:6e:bb:81:00:a2:e9:1a:c9:6b:f2:7c:7e:d6:1f: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:95:8A:E4:52:FD:87:C8:D6:F7:EA:38:7F:59:78:33:03:F9:D0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:99:12:cf:e1:aa:42:91:19:6b:68:f2:c2:d8:27:ec:51:80: b5:24:e0:13:4e:15:15:3a:b6:26:ca:0f:b7:58:6d:16:80:4d: 05:bf:f9:c4:e3:3d:9f:21:3a:ed:e0:68:d8:70:36:11:8a:e2: 8d:da:88:03:71:d6:95:11:80:72:a5:b9:1e:c8:da:3e:4c:52: f4:86:d8:b0:e3:07:f6:45:a7:22:d1:3d:d1:1d:21:a7:ed:4d: 45:5a:0d:e5:95:61:e9:f9:b3:32:7e:21:42:60:50:6e:33:53: a5:54:b4:47:b7:96:30:b0:1d:02:29:e9:1c:84:e4:3b:7e:3c: b6:5c:80:c4:7d:d7:dc:5d:0e:aa:bd:d9:9c:26:40:40:43:89: f9:37:bd:ad:3d:51:39:9c:99:72:e0:e8:85:52:6b:18:11:04: 54:54:88:8a:93:51:88:7b:43:db:62:a8:94:b7:71:fb:2f:d5: 90:00:1f:2c:bc:17:5b:2f:aa:15:f5:64:67:6b:2d:c5:01:4f: 36:78:12:6a:1e:59:32:63:37:5d:0e:7a:85:ae:03:eb:b0:8f: ef:fa:f4:47:00:9d:eb:eb:02:c4:c5:21:46:81:94:07:d2:7c: fc:48:fa:b3:b6:50:97:4a:d4:16:8d:fa:1a:83:76:b5:20:73: 57:85:63:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGj/TkERTXSWcHRIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MThkNjZkMjAtZWE3Mi00MmE0LTlkZTctMDk0NDA5MWJlNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlu6vKVU+HVv/JPoo78BUgrVKCq5w/nxtD99 Iz4YDHo0FFPQq2gBH+9hAGj8Dz5ZP8hZDB2SwJP40PWTrZX1NbZHX4OSEH1evPY2 hjy5SgiWk/v+55uxQOm84yd/2spLFVQymRUdeSTnUL7lfyK2POonjptOouzNBg6g i8Xadd5C79ipnfvCTNH+3aDKqRwkxSG0GRjA0hKwmiu0MQVxvxlXzx0UiIi5IgbI 5USRjpZXoG2Y7FgpOTYfjh24iQaZ+tHIBip/f9jHdensTgHSQ+GYTeVr3BqTOLHa 3eWFYDyGKmmKDjt1MxzRCjQQVDGDbruBAKLpGslr8nx+1h8HFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKViuRS/YfI1vfqOH9ZeDMD+dCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjNmMTI0N2YtNjQ3ZS0z MTc3LWE0ZjUtZmVhOTFkNWY4YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCZEs/hqkKRGWto8sLYJ+xRgLUk4BNOFRU6tibKD7dYbRaATQW/+cTj PZ8hOu3gaNhwNhGK4o3aiANx1pURgHKluR7I2j5MUvSG2LDjB/ZFpyLRPdEdIaft TUVaDeWVYen5szJ+IUJgUG4zU6VUtEe3ljCwHQIp6RyE5Dt+PLZcgMR919xdDqq9 2ZwmQEBDifk3va09UTmcmXLg6IVSaxgRBFRUiIqTUYh7Q9tiqJS3cfsv1ZAAHyy8 F1svqhX1ZGdrLcUBTzZ4EmoeWTJjN10OeoWuA+uwj+/69EcAnevrAsTFIUaBlAfS fPxI+rO2UJdK1BaN+hqDdrUgc1eFY9w= -----END CERTIFICATE-----Generated at Fri Apr 17 14:43:54 2026 by rpki-client