$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa File: 293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa (raw, json) Hash identifier: HtLFlXNxTex4V/mWpbK6Puo+IUQ7CL060kJtrEoGhuQ= Subject key identifier: 42:A8:06:37:36:FB:22:3D:B4:E2:62:F6:80:4F:45:20:AC:37:BE:15 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E0793E72CE67A51E75F735C Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:93:e7:2c:e6:7a:51:e7:5f:73:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=54e2950c-095e-4158-82e2-c1560f146e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:26:98:93:3c:b6:2b:1b:b2:54:3a:e7:45:ca: b9:c0:e4:a5:df:5e:9f:81:7b:db:a0:7b:82:3b:61: 98:ab:53:22:b7:18:ec:de:7b:a1:a2:d9:39:ae:ae: 18:e3:68:ce:33:c6:df:ef:d1:4a:b7:31:b2:ee:49: ae:98:8c:cc:a5:8d:38:2c:4a:38:4e:f8:12:98:23: e4:01:86:d7:63:a6:24:de:25:23:12:01:74:fe:ad: 60:f8:70:42:e1:dc:c5:23:fb:9a:77:53:36:6a:e2: 9b:27:4e:0b:e4:cb:bd:df:7d:83:eb:9e:45:47:82: 5a:c1:9f:3c:d8:55:85:2c:fe:86:27:0a:cc:d2:7b: 01:aa:c0:ef:3c:fc:c0:09:86:d9:e8:a4:99:f5:46: 41:96:a5:80:f5:fd:c2:28:65:97:7d:b5:ef:7c:9e: 95:af:48:87:f7:79:34:68:ab:93:76:3c:74:e8:ff: 70:e9:ca:30:a9:0c:16:6a:30:77:fb:a8:a0:e3:6b: 28:0e:9f:09:01:6c:71:e3:6f:0a:b6:ef:49:ce:95: da:c9:90:d4:16:26:b0:99:ea:a4:25:08:a0:ea:90: aa:d9:91:da:a9:90:b0:61:84:69:67:f4:1f:c6:86: d8:93:b2:c1:6a:72:1e:2e:0e:a3:b7:b3:36:a8:a5: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:06:37:36:FB:22:3D:B4:E2:62:F6:80:4F:45:20:AC:37:BE:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/293fdc28-b7bd-328e-b1e2-3a1b9c3defde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6a:9e:39:c1:92:ab:c4:6c:23:40:88:0b:f1:eb:bb:ec:c4: fb:c4:26:4a:ca:09:49:3f:b9:84:b1:52:ba:7b:82:b4:e7:51: 4d:1d:8c:93:c3:03:11:68:71:f6:cb:b7:31:ff:be:8e:df:03: 69:7c:98:38:11:ff:db:b0:bd:36:38:16:35:17:de:53:f5:9e: c0:fe:7c:fd:14:74:06:eb:11:2a:c4:95:a8:bd:a4:ab:9b:86: d0:55:9b:94:1c:65:80:8e:cc:8a:55:3e:80:b5:5a:4b:d7:31: 1e:f1:a4:70:71:7a:4f:e7:81:6e:f9:26:d3:78:d3:ac:b9:48: ef:2d:0c:f6:42:ae:fc:6f:07:f2:a3:7e:85:9e:25:3b:5c:1c: 86:28:86:e4:bc:52:33:30:fa:b2:54:3a:4e:3d:11:31:a6:bf: 89:b9:63:64:f1:39:ee:bf:62:a6:5b:8b:14:03:7f:a0:ab:be: 02:66:52:b9:d8:77:32:41:be:41:31:ff:58:f7:36:58:6e:79: 5d:92:a9:56:df:a7:d8:04:62:c9:d4:71:32:d2:08:7f:50:ef: d6:e1:e7:1f:74:0e:ba:a6:e9:21:2e:7a:e5:62:ce:9a:07:7f: 74:51:84:eb:d7:37:3a:b8:e9:7b:c6:48:6f:2d:b5:41:2c:c9: 52:5f:c9:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5PnLOZ6Uedfc1wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTRlMjk1MGMtMDk1ZS00MTU4LTgyZTItYzE1NjBmMTQ2ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyaYkzy2KxuyVDrnRcq5wOSl316fgXvboHuC O2GYq1Mitxjs3nuhotk5rq4Y42jOM8bf79FKtzGy7kmumIzMpY04LEo4TvgSmCPk AYbXY6Yk3iUjEgF0/q1g+HBC4dzFI/uad1M2auKbJ04L5Mu9332D655FR4JawZ88 2FWFLP6GJwrM0nsBqsDvPPzACYbZ6KSZ9UZBlqWA9f3CKGWXfbXvfJ6Vr0iH93k0 aKuTdjx06P9w6cowqQwWajB3+6ig42soDp8JAWxx428Ktu9JzpXayZDUFiawmeqk JQig6pCq2ZHaqZCwYYRpZ/QfxobYk7LBanIeLg6jt7M2qKXmsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKoBjc2+yI9tOJi9oBPRSCsN74VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjkzZmRjMjgtYjdiZC0z MjhlLWIxZTItM2ExYjljM2RlZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBqnjnBkqvEbCNAiAvx67vsxPvEJkrKCUk/uYSxUrp7grTnUU0djJPD AxFocfbLtzH/vo7fA2l8mDgR/9uwvTY4FjUX3lP1nsD+fP0UdAbrESrElai9pKub htBVm5QcZYCOzIpVPoC1WkvXMR7xpHBxek/ngW75JtN406y5SO8tDPZCrvxvB/Kj foWeJTtcHIYohuS8UjMw+rJUOk49ETGmv4m5Y2TxOe6/YqZbixQDf6CrvgJmUrnY dzJBvkEx/1j3NlhueV2SqVbfp9gEYsnUcTLSCH9Q79bh5x90Drqm6SEueuVizpoH f3RRhOvXNzq46XvGSG8ttUEsyVJfyTU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:25 2025 by rpki-client