$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3cbb570f-6582-3ee9-a7d6-440c798822f3.roa File: 3cbb570f-6582-3ee9-a7d6-440c798822f3.roa (raw, json) Hash identifier: CMZ4tQOlThUfiJ1dCjZOZmpOgJ9x4LJxmjIN5nSM7dc= Subject key identifier: F8:B4:06:8D:97:E4:4F:B3:2D:AA:00:BA:82:74:41:10:14:A6:0B:7B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07CD0E85A57DDD3AEA8680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3cbb570f-6582-3ee9-a7d6-440c798822f3.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cd:0e:85:a5:7d:dd:3a:ea:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b848085e-47f8-4b13-bda6-aad9b1e5f759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:20:08:31:73:20:3b:7f:ad:c3:22:74:08:9f: ed:14:61:3c:e3:3d:81:a7:90:91:09:3a:6e:5b:30: 55:95:ba:7d:8b:99:f6:2b:f8:df:fe:31:3f:65:e4: af:ae:7c:b0:49:98:17:be:12:be:e6:5a:04:e1:cd: d4:92:64:5b:45:05:c4:ff:54:2c:70:50:37:72:8c: 86:7b:66:b9:a4:80:0e:37:49:51:5b:2e:61:15:2a: 3e:dc:14:d1:90:44:b1:cb:35:41:41:8f:6c:6d:dc: 73:89:51:b9:28:57:6e:1c:30:ed:00:8b:b6:ee:ee: 7e:04:8e:a6:58:62:bb:0c:dc:c1:df:81:3f:89:24: 3a:48:3c:00:c1:2c:eb:5c:b1:74:af:1c:1f:cd:d9: b6:37:a6:b2:4a:2c:c2:c0:8d:d1:b2:13:df:f8:c1: 9c:fb:bc:14:ef:dc:5b:08:83:e8:ba:6f:cd:0d:d7: 90:e3:ff:58:0c:e6:7a:78:8c:31:22:ce:e8:a8:9c: fb:7a:d8:35:18:65:a1:f1:8b:d5:c0:5e:35:4c:11: 56:94:b3:db:b8:9a:6d:b1:a8:5f:39:24:3b:28:56: b8:96:ab:c1:d1:62:3c:5e:f0:dc:44:4c:50:c0:d3: 24:1f:08:1d:b7:f4:5a:b1:9c:7f:e7:24:fb:b8:2a: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:06:8D:97:E4:4F:B3:2D:AA:00:BA:82:74:41:10:14:A6:0B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3cbb570f-6582-3ee9-a7d6-440c798822f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fb:81:bb:2d:6f:27:5f:80:0f:2f:ae:69:d7:4f:83:6f:e1: 5d:79:ab:94:e3:bb:67:39:c5:ec:53:e1:75:87:9b:0f:6b:eb: 9e:2b:99:55:8b:2f:d0:12:91:32:b8:62:c9:c7:be:35:89:e7: 6d:bb:93:a9:26:ed:b8:02:ec:b7:0d:3b:25:e3:73:27:42:ae: fd:4f:0f:5e:c6:b3:8d:58:b2:0d:04:60:49:41:7f:0d:ac:e6: 36:f8:d8:90:53:7b:db:27:2e:1f:f1:f1:3d:bd:9d:00:52:2a: 8a:5c:3b:ab:29:ad:e3:aa:08:f3:56:bf:94:a9:07:5c:8b:32: 08:8f:f7:33:cc:73:c1:8d:91:0f:2a:25:97:e4:a8:fe:d1:e9: 7e:5d:9b:3a:6f:50:12:9c:2c:ea:88:e8:47:5e:b4:60:01:5e: 31:42:bf:59:9c:ad:af:2e:87:71:73:2f:eb:a8:88:47:4f:0c: db:65:a1:df:e0:3e:bd:a6:ca:b0:2b:17:db:86:83:9d:b0:eb: 73:e5:6b:24:e8:a1:e0:15:19:2e:8c:28:30:9c:6b:6d:1b:b6: c5:94:ff:e3:11:e1:d8:55:9d:7f:ea:04:72:05:84:94:96:be: 2c:9b:7f:2c:4c:16:cd:1b:ad:24:fe:56:14:94:83:cc:32:c3: a8:93:af:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB80OhaV93TrqhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Yjg0ODA4NWUtNDdmOC00YjEzLWJkYTYtYWFkOWIxZTVmNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SAIMXMgO3+twyJ0CJ/tFGE84z2Bp5CRCTpu WzBVlbp9i5n2K/jf/jE/ZeSvrnywSZgXvhK+5loE4c3UkmRbRQXE/1QscFA3coyG e2a5pIAON0lRWy5hFSo+3BTRkESxyzVBQY9sbdxziVG5KFduHDDtAIu27u5+BI6m WGK7DNzB34E/iSQ6SDwAwSzrXLF0rxwfzdm2N6aySizCwI3RshPf+MGc+7wU79xb CIPoum/NDdeQ4/9YDOZ6eIwxIs7oqJz7etg1GGWh8YvVwF41TBFWlLPbuJptsahf OSQ7KFa4lqvB0WI8XvDcRExQwNMkHwgdt/RasZx/5yT7uCr8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPi0Bo2X5E+zLaoAuoJ0QRAUpgt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2NiYjU3MGYtNjU4Mi0z ZWU5LWE3ZDYtNDQwYzc5ODgyMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL7gbstbydfgA8vrmnXT4Nv4V15q5Tju2c5xexT4XWHmw9r654rmVWL L9ASkTK4YsnHvjWJ5227k6km7bgC7LcNOyXjcydCrv1PD17Gs41Ysg0EYElBfw2s 5jb42JBTe9snLh/x8T29nQBSKopcO6spreOqCPNWv5SpB1yLMgiP9zPMc8GNkQ8q JZfkqP7R6X5dmzpvUBKcLOqI6EdetGABXjFCv1mcra8uh3FzL+uoiEdPDNtlod/g Pr2myrArF9uGg52w63PlayTooeAVGS6MKDCca20btsWU/+MR4dhVnX/qBHIFhJSW viybfyxMFs0brST+VhSUg8wyw6iTrz8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:52 2025 by rpki-client