$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa File: 23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa (raw, json) Hash identifier: TCuS0HMBShcPwB8Zl6MQeWqjirPa0GaP+mWXVe2fjnU= Subject key identifier: 03:E7:7F:13:A5:4A:C3:DA:7A:B6:99:46:70:DE:FB:92:52:C6:C7:65 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C3B565365AB39C6616E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:3b:56:53:65:ab:39:c6:61:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=babdbac1-fb89-4a4f-ae0f-ad0114b3063b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:7d:e2:97:87:87:fb:e0:89:8d:29:cf:5c: ac:75:55:8f:14:3f:0e:98:37:c7:13:51:fd:97:b8: b5:f2:f5:44:aa:2a:09:a3:f8:e5:33:d5:22:2d:ec: 0d:6f:59:71:c7:53:fc:bb:a6:6c:8a:e4:76:4c:44: 91:34:fc:56:7c:26:58:ff:32:2c:c1:2d:8a:54:28: 81:f6:84:3f:94:db:45:47:c3:4f:9b:b2:07:87:a2: b7:5c:4b:9e:76:b1:db:4a:bf:78:f6:cc:fa:56:18: c6:3d:1d:ee:69:f9:ac:43:f4:8c:5c:27:12:86:b9: 52:eb:8b:ae:6c:ff:53:3e:a6:25:5c:d6:03:03:23: 28:7f:e5:97:4a:3a:a4:2f:2f:2e:dd:81:28:33:69: c1:78:58:1c:02:46:55:41:55:0e:30:6c:f5:3b:e7: 4e:44:33:d4:0e:28:71:59:ef:9b:2f:94:49:0c:ec: 5c:e4:00:8c:83:52:e9:8a:9b:ea:ee:98:82:70:fd: 69:cf:52:38:d5:ca:83:5e:9a:37:e6:1c:73:ac:71: 7d:00:ed:e3:d6:3f:65:a9:b6:34:49:0c:65:72:b5: d0:17:2e:7b:52:89:31:42:6f:e3:81:bb:4c:e5:f4: 63:11:ec:7f:8a:e4:3b:f6:70:d0:30:cc:1a:cb:3f: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E7:7F:13:A5:4A:C3:DA:7A:B6:99:46:70:DE:FB:92:52:C6:C7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23f1247f-647e-3177-a4f5-fea91d5f8ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ac:09:60:1a:11:78:c1:c8:5e:0b:19:ce:59:be:62:31:56: 21:ca:ed:6e:44:53:4d:ab:24:c4:cb:a0:27:9d:74:9f:6b:7b: cb:81:e4:f0:0a:d3:23:31:aa:e1:02:75:70:c5:51:9b:93:30: c8:66:2f:62:3e:a8:7c:2e:ef:f1:3c:e3:f0:33:c7:68:06:ff: 93:20:4b:ef:73:77:66:61:72:41:6c:ae:9e:d7:d3:41:fd:51: 49:54:51:43:97:e5:67:9a:bd:61:cc:72:37:dd:af:b7:7a:b2: 1b:d7:37:7a:70:a9:d6:7b:f5:e0:64:ca:95:95:d7:f0:f5:6d: cd:9a:3a:4c:f2:d4:67:8b:ba:16:f0:89:74:c6:4f:e2:27:e1: 7a:85:7c:9c:73:3e:f6:e6:20:9f:3f:6c:c1:9c:d3:8e:36:2d: 63:4f:c1:84:83:b4:f5:fe:7a:bc:1d:18:6d:96:06:71:ea:3a: e3:30:0b:8f:9a:dd:4c:83:69:a5:4f:11:07:01:85:07:fa:89: 17:13:97:3c:61:ef:29:b6:e5:c8:35:86:a8:59:78:e9:8b:bc: 87:73:2d:b0:98:d3:0f:d1:53:01:1a:ab:46:e4:94:ff:42:51: fc:78:20:41:3a:b9:08:82:72:7f:88:f8:41:2e:61:15:0d:ce: 58:d3:3a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fDtWU2WrOcZhbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YmFiZGJhYzEtZmI4OS00YTRmLWFlMGYtYWQwMTE0YjMwNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EZ94peHh/vgiY0pz1ysdVWPFD8OmDfHE1H9 l7i18vVEqioJo/jlM9UiLewNb1lxx1P8u6ZsiuR2TESRNPxWfCZY/zIswS2KVCiB 9oQ/lNtFR8NPm7IHh6K3XEuedrHbSr949sz6VhjGPR3uafmsQ/SMXCcShrlS64uu bP9TPqYlXNYDAyMof+WXSjqkLy8u3YEoM2nBeFgcAkZVQVUOMGz1O+dORDPUDihx We+bL5RJDOxc5ACMg1Lpipvq7piCcP1pz1I41cqDXpo35hxzrHF9AO3j1j9lqbY0 SQxlcrXQFy57UokxQm/jgbtM5fRjEex/iuQ79nDQMMwayz+wXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPnfxOlSsPaeraZRnDe+5JSxsdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjNmMTI0N2YtNjQ3ZS0z MTc3LWE0ZjUtZmVhOTFkNWY4YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGsCWAaEXjByF4LGc5ZvmIxViHK7W5EU02rJMTLoCeddJ9re8uB5PAK 0yMxquECdXDFUZuTMMhmL2I+qHwu7/E84/Azx2gG/5MgS+9zd2ZhckFsrp7X00H9 UUlUUUOX5WeavWHMcjfdr7d6shvXN3pwqdZ79eBkypWV1/D1bc2aOkzy1GeLuhbw iXTGT+In4XqFfJxzPvbmIJ8/bMGc0442LWNPwYSDtPX+erwdGG2WBnHqOuMwC4+a 3UyDaaVPEQcBhQf6iRcTlzxh7ym25cg1hqhZeOmLvIdzLbCY0w/RUwEaq0bklP9C Ufx4IEE6uQiCcn+I+EEuYRUNzljTOv0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:31 2026 by rpki-client