$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa File: 3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa (raw, json) Hash identifier: UqTlXbN3hd448OlvW9Yc5MFbNDge+h5bg+kQlMQac+Y= Subject key identifier: 04:96:C8:42:AA:4E:1F:A4:CC:F8:39:69:70:34:14:12:E8:9C:59:BB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07CD52D4392F5A4873F100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cd:52:d4:39:2f:5a:48:73:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=38d06de0-e1fe-4e33-9e57-a89d4ba3fff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:8f:3e:9d:5f:f2:da:60:58:96:5d:d9:8c: f4:bd:62:19:ce:66:67:33:db:0c:c8:2a:de:17:e0: 3d:4e:28:72:7f:ce:74:88:4d:e3:5c:c0:a7:da:cd: f2:40:13:01:ac:c1:5e:cb:13:a4:3f:ef:3c:1a:e1: 7b:64:e6:9e:02:44:81:9e:9d:d3:1d:aa:4e:0e:aa: fb:08:d6:30:ba:27:b9:c8:09:33:19:a2:92:f6:1d: b9:3b:59:2d:7d:d2:7a:c3:20:3c:d2:66:33:44:7e: 08:4e:91:0c:7b:d7:15:22:c3:6d:e4:53:d2:53:a6: 77:cf:14:e8:5e:bd:4a:00:33:29:6e:d4:19:cb:02: fb:3f:68:c8:eb:19:2f:95:a6:1e:fb:b9:f8:45:5c: 21:77:b4:ab:ca:01:77:97:de:1a:24:c6:1d:c3:d2: b2:c6:63:cd:97:34:5b:47:46:99:9e:c4:cf:f2:4e: e3:6b:f8:53:03:fd:8f:69:b4:06:9e:34:e1:f5:28: 2c:90:d9:21:fe:07:c1:2e:7b:40:f1:6c:ce:e1:7d: 02:6a:3a:56:de:44:6d:76:36:34:e1:7d:2e:ed:e3: eb:e5:a8:89:3c:1a:bc:a9:eb:ac:e9:26:98:eb:f0: c5:78:8d:8b:61:8a:da:ae:0b:66:1d:f3:5b:f3:28: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:96:C8:42:AA:4E:1F:A4:CC:F8:39:69:70:34:14:12:E8:9C:59:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:48:eb:8d:5c:df:8c:73:92:35:f8:11:88:92:e6:99:32:57: 2b:ec:f6:2a:26:c5:7f:9d:6b:5d:38:35:22:ad:2a:6d:23:4a: 76:fd:d5:7f:9c:1b:95:fe:a0:2e:03:40:7c:ee:e5:78:7b:c9: af:71:de:be:16:7a:dc:de:21:e4:17:c1:78:76:09:8a:c1:ae: c9:3c:93:5d:b9:24:94:19:c3:4a:db:81:27:4c:e1:39:f9:e2: dc:90:f1:f1:33:61:b1:5d:42:92:d8:1d:e4:28:22:c5:89:f5: 03:d8:54:c5:46:a9:38:6d:4e:46:e8:88:19:72:3c:09:fb:e3: 2a:34:b8:24:6f:4a:16:71:bc:9a:53:97:c0:93:60:80:7c:a1: cf:43:18:84:46:36:14:df:c3:38:47:32:a5:d5:be:71:50:46: f5:35:70:04:6c:86:bb:3e:40:1f:3b:44:bd:98:95:26:e1:d0: 39:ed:17:cb:e5:c0:97:5c:40:37:3e:70:60:8b:c5:c1:0f:f2: 00:bb:0e:86:ce:8b:f4:06:ac:09:2b:a1:17:17:8f:43:34:14: 0f:4f:e2:67:aa:07:15:f5:fb:5e:65:d5:50:86:3c:6a:d2:17: 72:fe:d4:09:a7:84:b0:0c:d9:dd:c1:89:a5:fb:e8:3c:43:59: e1:81:8c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB81S1DkvWkhz8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzhkMDZkZTAtZTFmZS00ZTMzLTllNTctYTg5ZDRiYTNmZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPWPPp1f8tpgWJZd2Yz0vWIZzmZnM9sMyCre F+A9Tihyf850iE3jXMCn2s3yQBMBrMFeyxOkP+88GuF7ZOaeAkSBnp3THapODqr7 CNYwuie5yAkzGaKS9h25O1ktfdJ6wyA80mYzRH4ITpEMe9cVIsNt5FPSU6Z3zxTo Xr1KADMpbtQZywL7P2jI6xkvlaYe+7n4RVwhd7SrygF3l94aJMYdw9KyxmPNlzRb R0aZnsTP8k7ja/hTA/2PabQGnjTh9SgskNkh/gfBLntA8WzO4X0CajpW3kRtdjY0 4X0u7ePr5aiJPBq8qeus6SaY6/DFeI2LYYrargtmHfNb8yg3hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASWyEKqTh+kzPg5aXA0FBLonFm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y0ZGMxZjMtNmMyMS0z MjVmLTkyNDUtZGQ1NWIzMjFiZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJI641c34xzkjX4EYiS5pkyVyvs9iomxX+da104NSKtKm0jSnb91X+c G5X+oC4DQHzu5Xh7ya9x3r4WetzeIeQXwXh2CYrBrsk8k125JJQZw0rbgSdM4Tn5 4tyQ8fEzYbFdQpLYHeQoIsWJ9QPYVMVGqThtTkboiBlyPAn74yo0uCRvShZxvJpT l8CTYIB8oc9DGIRGNhTfwzhHMqXVvnFQRvU1cARshrs+QB87RL2YlSbh0DntF8vl wJdcQDc+cGCLxcEP8gC7DobOi/QGrAkroRcXj0M0FA9P4meqBxX1+15l1VCGPGrS F3L+1AmnhLAM2d3BiaX76DxDWeGBjFQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:43:24 2025 by rpki-client