$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3cbb570f-6582-3ee9-a7d6-440c798822f3.roa File: 3cbb570f-6582-3ee9-a7d6-440c798822f3.roa (raw, json) Hash identifier: gBqpwQWLtxKjeUXQTzSXywQ29ORTjWgdXQaO4H2DDYw= Subject key identifier: C7:95:E2:18:6E:AB:29:74:70:91:27:B1:3B:89:5B:2D:BC:BF:63:B2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A84421D6CD8415D8BDF20 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3cbb570f-6582-3ee9-a7d6-440c798822f3.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 72.255.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:84:42:1d:6c:d8:41:5d:8b:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=78963a19-41be-4df7-ae7d-56b34705aedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:97:d6:df:49:46:f2:3a:cd:49:4e:42:d3: 68:9d:a5:2e:f6:72:6a:b8:c6:0e:93:d1:99:ee:57: 20:08:ee:5a:8d:86:56:86:1e:d7:c1:2a:17:4b:8d: 69:ef:7c:d3:76:43:c0:f5:50:48:70:4e:92:6b:8b: ac:48:8e:f9:40:b1:87:8b:0a:1b:31:7a:15:f9:8d: ae:5f:be:a2:ff:91:84:46:e3:e9:d7:90:73:ac:7c: b6:be:2f:0c:51:68:0f:12:3a:fd:9a:5d:33:11:38: ad:12:ed:fa:60:9e:f5:91:49:d7:f0:f6:21:68:22: 73:f1:c7:ab:d7:47:e7:c0:6f:98:19:d9:02:02:45: 52:7f:e2:f9:90:d2:89:13:bf:8d:6d:e7:8d:32:ac: 7a:11:25:71:7a:30:21:1f:06:d2:76:8d:aa:49:17: f0:4a:8f:90:dd:ea:b5:fa:a3:8d:7e:85:18:f0:81: e3:98:3c:69:8b:cd:cf:1d:f4:cc:0e:fe:39:2c:92: 72:50:c1:9b:98:58:97:fd:e2:fb:d0:30:29:6f:13: 3c:6a:5f:21:87:d6:4c:1f:8d:8a:10:02:80:01:d5: a2:57:55:7d:ef:ab:95:e1:d4:71:f6:3c:59:3b:ff: 52:9f:a4:9f:f8:c5:61:e8:e4:a1:a3:d5:7a:79:79: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:95:E2:18:6E:AB:29:74:70:91:27:B1:3B:89:5B:2D:BC:BF:63:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3cbb570f-6582-3ee9-a7d6-440c798822f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3d:29:50:a7:57:8c:75:a7:8b:32:f7:23:b2:ab:c1:e4:f8: 59:0d:26:e7:86:80:fa:26:5e:34:ae:98:32:fc:05:f5:c0:b8: e4:60:4e:d1:5d:bf:70:0a:b0:a1:a9:24:1a:4f:01:4b:83:fe: 5d:92:64:ee:17:64:60:f3:55:0c:83:62:f7:94:0a:51:0a:e0: 57:c9:3b:9f:d8:ff:35:62:41:1a:57:9b:d4:d4:9f:48:7f:62: 52:e2:30:1c:77:67:ba:a0:98:95:86:e7:78:be:b5:0f:fc:83: 38:62:11:76:23:d5:0b:77:fe:07:42:b0:83:8e:d2:83:dc:d7: 88:fc:ab:18:df:10:ab:8e:ad:63:56:0a:80:73:dd:f4:44:1e: f0:dd:6f:fb:c1:60:5e:87:11:57:bd:52:a0:3e:be:5e:33:9a: 33:09:5a:6b:dc:e1:2e:39:f7:aa:ca:2d:30:38:75:90:2b:19: ad:2e:c1:a8:99:40:35:af:74:bd:b5:a8:75:5d:bb:1c:b5:9f: 2d:12:60:ab:98:17:00:b0:62:03:bc:6b:49:f3:bb:1f:b5:17: 82:16:14:bf:57:39:9e:7a:b0:e4:7d:2d:0f:f2:20:fe:a7:ea: 67:5a:1a:3c:52:7f:f3:b6:cc:00:e8:dd:f5:a8:61:65:2f:ae: 3e:ae:74:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoRCHWzYQV2L3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk Nzg5NjNhMTktNDFiZS00ZGY3LWFlN2QtNTZiMzQ3MDVhZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK+X1t9JRvI6zUlOQtNonaUu9nJquMYOk9GZ 7lcgCO5ajYZWhh7XwSoXS41p73zTdkPA9VBIcE6Sa4usSI75QLGHiwobMXoV+Y2u X76i/5GERuPp15BzrHy2vi8MUWgPEjr9ml0zETitEu36YJ71kUnX8PYhaCJz8cer 10fnwG+YGdkCAkVSf+L5kNKJE7+NbeeNMqx6ESVxejAhHwbSdo2qSRfwSo+Q3eq1 +qONfoUY8IHjmDxpi83PHfTMDv45LJJyUMGbmFiX/eL70DApbxM8al8hh9ZMH42K EAKAAdWiV1V976uV4dRx9jxZO/9Sn6Sf+MVh6OSho9V6eXkqhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeV4hhuqyl0cJEnsTuJWy28v2OyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2NiYjU3MGYtNjU4Mi0z ZWU5LWE3ZDYtNDQwYzc5ODgyMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk9KVCnV4x1p4sy9yOyq8Hk+FkNJueGgPomXjSumDL8BfXAuORgTtFd v3AKsKGpJBpPAUuD/l2SZO4XZGDzVQyDYveUClEK4FfJO5/Y/zViQRpXm9TUn0h/ YlLiMBx3Z7qgmJWG53i+tQ/8gzhiEXYj1Qt3/gdCsIOO0oPc14j8qxjfEKuOrWNW CoBz3fREHvDdb/vBYF6HEVe9UqA+vl4zmjMJWmvc4S4596rKLTA4dZArGa0uwaiZ QDWvdL21qHVduxy1ny0SYKuYFwCwYgO8a0nzux+1F4IWFL9XOZ56sOR9LQ/yIP6n 6mdaGjxSf/O2zADo3fWoYWUvrj6udBI= -----END CERTIFICATE-----Generated at Fri Apr 17 15:43:10 2026 by rpki-client