$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa File: 3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa (raw, json) Hash identifier: nfmfRaRS2xxPU4T9mRLsRe8oCHMFyFFOFzTE+fbwnto= Subject key identifier: 36:3C:CD:56:B1:F1:B4:66:08:76:9F:4A:45:8F:BD:26:3D:9E:1F:7D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C788908E9E18DC01D0780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:78:89:08:e9:e1:8d:c0:1d:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=3e7db324-d323-45f5-80c2-537a186a9a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:96:a5:fe:0a:9d:c0:4e:da:b6:f4:a6:b8: 79:ed:90:30:9c:03:16:fc:91:21:c3:36:99:02:c6: cb:ab:f4:40:9d:1a:7c:25:5c:68:41:b1:47:58:49: 14:1d:09:27:82:5f:08:4c:3f:61:11:3c:df:24:a5: 78:a8:c8:58:94:bc:d1:6e:73:b3:49:af:19:78:9b: 71:bc:e1:6e:6a:e6:23:f7:f8:6c:6a:46:83:95:4f: a3:c2:8e:ae:db:bb:e0:2c:8d:21:d3:aa:b7:a7:2b: 67:d5:cc:0c:43:2d:1e:e4:ea:d0:13:42:ca:8b:3f: f0:20:21:d6:12:d2:2c:a4:37:7b:6e:60:1b:3d:3b: 22:91:e8:b3:80:bb:b3:14:22:ab:68:33:08:2b:00: e8:df:5b:2e:3a:8d:39:b7:29:21:ec:d5:5d:4a:e8: 94:74:1a:30:b8:e5:dd:a9:9b:f6:eb:2a:fb:76:29: b0:ac:fa:59:57:f8:d7:8c:34:9f:2f:31:45:df:3b: 54:25:01:6e:36:06:e3:82:35:3b:c6:98:66:ae:3b: 0e:7d:06:51:92:69:af:03:dd:59:f4:cd:ba:00:ce: ad:23:9d:05:1a:02:d6:08:c5:ee:05:f9:cb:70:ad: 9f:ff:ae:40:b2:29:f8:34:19:f5:c1:5c:15:d4:e0: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:CD:56:B1:F1:B4:66:08:76:9F:4A:45:8F:BD:26:3D:9E:1F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a0:b1:48:eb:b9:71:3f:cc:69:ff:d2:c7:14:fe:91:92:60: 92:d4:e4:ff:b1:97:04:6b:cd:87:97:49:5c:7a:bf:ad:d3:2b: 51:cc:af:05:81:b1:35:3b:5c:ff:5f:62:47:8b:7b:76:04:ad: d9:b2:a5:ee:70:7a:ed:eb:5a:a2:67:42:b7:34:be:1e:10:dc: 81:77:a0:a8:24:a5:8f:d3:22:c9:75:f0:3c:a4:93:75:60:68: 1b:52:32:2b:2b:e9:57:17:84:02:e7:0f:fc:91:e0:31:dc:1a: 57:c1:4e:30:c5:b7:ae:4e:81:20:46:0b:60:a5:21:b6:d4:78: 02:75:57:7d:4d:e4:3d:48:a6:27:0b:c8:e0:b6:f1:7a:49:1f: 51:c4:aa:12:e1:0c:07:56:a4:85:d6:63:03:25:f7:ff:ae:d4: 3a:06:cf:47:5f:14:14:92:cf:d6:17:4e:be:9f:0f:64:1e:5f: 95:aa:65:7a:72:9c:e8:cb:5c:cd:fb:e4:09:30:96:b2:b9:a2: 0c:b5:01:7c:93:94:1e:15:6c:f5:7c:6e:a4:34:e1:97:88:d4: c4:b0:27:51:ef:8e:18:f5:23:c0:d8:1f:7b:7b:f1:a3:eb:d9: 68:8f:fc:5c:14:ef:65:70:2e:e0:91:3d:0c:73:2e:6b:37:96: d3:58:c7:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fHiJCOnhjcAdB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk M2U3ZGIzMjQtZDMyMy00NWY1LTgwYzItNTM3YTE4NmE5YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrCWpf4KncBO2rb0prh57ZAwnAMW/JEhwzaZ AsbLq/RAnRp8JVxoQbFHWEkUHQkngl8ITD9hETzfJKV4qMhYlLzRbnOzSa8ZeJtx vOFuauYj9/hsakaDlU+jwo6u27vgLI0h06q3pytn1cwMQy0e5OrQE0LKiz/wICHW EtIspDd7bmAbPTsikeizgLuzFCKraDMIKwDo31suOo05tykh7NVdSuiUdBowuOXd qZv26yr7dimwrPpZV/jXjDSfLzFF3ztUJQFuNgbjgjU7xphmrjsOfQZRkmmvA91Z 9M26AM6tI50FGgLWCMXuBfnLcK2f/65Asin4NBn1wVwV1OC6PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY8zVax8bRmCHafSkWPvSY9nh99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y0ZGMxZjMtNmMyMS0z MjVmLTkyNDUtZGQ1NWIzMjFiZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqgsUjruXE/zGn/0scU/pGSYJLU5P+xlwRrzYeXSVx6v63TK1HMrwWB sTU7XP9fYkeLe3YErdmype5weu3rWqJnQrc0vh4Q3IF3oKgkpY/TIsl18Dykk3Vg aBtSMisr6VcXhALnD/yR4DHcGlfBTjDFt65OgSBGC2ClIbbUeAJ1V31N5D1IpicL yOC28XpJH1HEqhLhDAdWpIXWYwMl9/+u1DoGz0dfFBSSz9YXTr6fD2QeX5WqZXpy nOjLXM375AkwlrK5ogy1AXyTlB4VbPV8bqQ04ZeI1MSwJ1Hvjhj1I8DYH3t78aPr 2WiP/FwU72VwLuCRPQxzLms3ltNYx0Q= -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:25 2026 by rpki-client