$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa File: 3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa (raw, json) Hash identifier: kXGjR4t8QFQevPaU30KseVxEH4BRvkq9YJt7CCXkuyw= Subject key identifier: E9:D7:2A:D0:D7:D4:17:CC:8C:70:5C:F4:70:70:1C:7A:F7:92:53:3A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A84CD7094AE92D7065400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 72.255.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:84:cd:70:94:ae:92:d7:06:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=afff5e68-1467-4d5a-9924-ef503d6480ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:80:ec:16:9d:fc:50:9c:21:a2:1f:5e:25: 1c:5d:db:10:05:e9:dc:2b:df:0f:c1:1a:74:c4:b6: 89:17:9d:3d:46:26:7f:77:72:58:e8:63:c4:21:68: 7e:f0:a0:b0:3e:b4:f1:a9:93:ec:cd:83:da:cf:ae: c1:09:d0:11:94:b9:c1:df:e6:e7:f2:1c:b4:08:d2: a6:80:4c:90:35:cc:cc:f5:68:4e:c2:d2:0f:fe:d0: fd:3f:b6:4b:cb:ca:7c:1b:b7:69:b2:c1:92:d5:b9: a1:90:c2:a7:d4:f3:fc:cd:16:94:47:9c:ce:d5:7c: fe:38:37:54:da:fa:88:0e:88:43:62:a2:79:70:60: 3c:12:a8:1a:d2:3d:3b:36:70:60:1d:dd:33:2d:4a: 45:87:ae:36:a5:f9:19:8f:74:9c:19:5d:22:84:7f: 59:b1:2c:8e:67:82:c5:b4:33:09:04:f7:fd:98:5d: 2e:72:1a:e8:82:ed:3b:0d:be:06:3e:e5:dd:b4:4f: 2f:64:47:28:ab:7b:4f:a9:6d:76:47:73:de:d2:f2: f9:83:d0:22:bb:7a:de:5e:71:a6:03:b6:ef:36:24: 79:88:4f:0a:6b:8f:f7:25:11:22:df:b4:c8:0b:17: cd:8d:49:fd:8b:24:ed:6f:37:bb:d1:9a:4b:8e:5b: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D7:2A:D0:D7:D4:17:CC:8C:70:5C:F4:70:70:1C:7A:F7:92:53:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f4dc1f3-6c21-325f-9245-dd55b321bd62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6b:61:6e:37:37:38:7a:1a:20:7a:ef:39:13:55:0d:2e:ef: 40:b3:db:f4:d8:7d:d4:4c:3e:52:ac:63:35:0d:40:e2:86:06: ac:e1:d8:44:f1:e5:0a:36:1c:fd:01:cb:8d:3d:13:50:18:0f: a7:b6:c0:65:6d:a9:90:9f:39:ae:94:99:f1:0e:6d:1c:e2:87: 49:28:b3:23:bf:82:3e:51:4a:7f:f4:37:4e:e8:0b:2e:be:51: 42:d6:7a:23:df:30:d8:df:24:1a:5f:ee:b8:4f:63:f8:fc:7f: 2f:c2:47:66:ad:b2:0b:15:96:5a:2d:78:1d:a4:7d:30:f1:c7: b1:a1:87:01:cf:6b:6e:1f:f8:b1:02:57:2f:fa:a6:28:f3:f3: 04:cc:7d:a0:d3:70:07:d3:2a:0c:3c:a9:4a:56:3a:a9:5f:71: 0c:da:07:5e:7d:e7:25:33:6b:bd:4e:b3:7c:4f:a9:ec:9a:dd: d7:1d:2c:51:a1:79:b3:dd:0d:2c:a9:08:f6:a1:c0:9f:20:55: 60:e8:21:32:a6:91:bc:91:f5:17:4a:e5:1a:75:63:6a:37:a0: f5:a2:21:d3:72:a5:0a:64:5d:b2:8a:70:d0:a5:c2:44:7b:02: 11:ce:53:af:50:dc:ce:70:6a:17:c3:09:3d:8b:eb:f5:17:c2: e1:40:78:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoTNcJSuktcGVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YWZmZjVlNjgtMTQ2Ny00ZDVhLTk5MjQtZWY1MDNkNjQ4MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKWA7Bad/FCcIaIfXiUcXdsQBencK98PwRp0 xLaJF509RiZ/d3JY6GPEIWh+8KCwPrTxqZPszYPaz67BCdARlLnB3+bn8hy0CNKm gEyQNczM9WhOwtIP/tD9P7ZLy8p8G7dpssGS1bmhkMKn1PP8zRaUR5zO1Xz+ODdU 2vqIDohDYqJ5cGA8Eqga0j07NnBgHd0zLUpFh642pfkZj3ScGV0ihH9ZsSyOZ4LF tDMJBPf9mF0uchrogu07Db4GPuXdtE8vZEcoq3tPqW12R3Pe0vL5g9Aiu3reXnGm A7bvNiR5iE8Ka4/3JREi37TICxfNjUn9iyTtbze70ZpLjlt0HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnXKtDX1BfMjHBc9HBwHHr3klM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y0ZGMxZjMtNmMyMS0z MjVmLTkyNDUtZGQ1NWIzMjFiZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFprYW43Nzh6GiB67zkTVQ0u70Cz2/TYfdRMPlKsYzUNQOKGBqzh2ETx 5Qo2HP0By409E1AYD6e2wGVtqZCfOa6UmfEObRzih0kosyO/gj5RSn/0N07oCy6+ UULWeiPfMNjfJBpf7rhPY/j8fy/CR2atsgsVlloteB2kfTDxx7GhhwHPa24f+LEC Vy/6pijz8wTMfaDTcAfTKgw8qUpWOqlfcQzaB1595yUza71Os3xPqeya3dcdLFGh ebPdDSypCPahwJ8gVWDoITKmkbyR9RdK5Rp1Y2o3oPWiIdNypQpkXbKKcNClwkR7 AhHOU69Q3M5wahfDCT2L6/UXwuFAeGo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:56 2026 by rpki-client