$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa File: 4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa (raw, json) Hash identifier: GpDLJBEutD9R9ARl+860PTVYQbqxNYWMLzrgvmfhbMI= Subject key identifier: E8:28:24:68:02:62:FD:F9:B1:8A:45:29:8E:FB:04:FA:71:62:32:0E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CF587B1A3BD0337DCE51A6C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 30036 IP address blocks: 72.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:b1:a3:bd:03:37:dc:e5:1a:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=794c1b0c-4802-42b1-bb17-90b7b09bd096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:89:49:40:1d:58:07:a5:2a:b3:eb:02:65: bc:40:02:83:b3:92:b0:b6:da:cd:b7:5e:36:ba:8d: ef:7e:71:10:38:dd:eb:c2:a8:28:ab:e8:76:ee:5e: 2d:da:03:b3:9f:3d:5c:5d:47:02:50:69:c6:93:50: ef:c4:d0:cc:95:c7:8d:63:13:09:c3:2d:d2:09:c6: 14:ab:8d:ec:87:1f:ea:a8:48:5f:bb:46:27:97:1f: d5:e6:ba:09:cd:b3:ca:94:82:1c:25:a5:28:6d:4a: 89:0d:58:73:c6:09:8e:7c:f9:e0:81:87:ef:27:32: bf:20:db:79:b6:7d:95:cc:19:fb:0a:47:72:13:17: e4:6d:ea:27:95:03:81:b2:f2:3b:61:5c:9a:34:f3: 74:23:27:71:ce:34:50:c2:29:2c:fa:53:b3:72:32: 08:d5:a8:b7:13:13:c1:7e:8e:85:63:75:e2:e7:a2: 76:ad:e5:a9:ba:28:7a:9d:b4:97:8d:8c:32:88:25: b5:6a:6a:b7:d9:91:df:e5:60:3c:dc:e9:4a:7e:c1: a6:5e:dc:36:08:86:be:5b:9d:57:18:6d:6b:f7:b3: 0d:a0:1c:70:14:b6:09:43:fb:37:00:eb:83:77:77: 2e:7d:b6:36:33:ab:e0:53:81:51:40:23:bc:18:80: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:28:24:68:02:62:FD:F9:B1:8A:45:29:8E:FB:04:FA:71:62:32:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:90:38:c7:96:a2:f2:86:72:7f:c2:2a:36:75:f5:13:65:96: 48:d9:a8:2d:ec:f7:a6:32:5a:b5:c3:7f:15:53:87:8c:16:71: cc:c1:87:36:7a:1a:35:39:2b:fa:df:04:0b:2a:b7:03:83:88: 68:0c:73:40:61:f5:5a:c4:f3:d1:dc:6f:dc:12:18:4d:b1:ff: 1a:57:ce:6e:a0:73:73:a5:d9:cd:18:42:31:20:26:95:33:65: 6d:eb:a6:68:0e:00:89:27:48:84:13:8a:5c:3f:ef:87:ab:74: 6e:fa:0d:a1:35:20:c2:f0:43:01:3a:ba:40:df:d2:e6:43:88: 6f:d0:1b:b9:27:cc:dd:7f:ee:ea:78:a1:39:53:4b:ad:19:d7: ef:a2:67:32:4a:53:16:a7:a0:72:d9:04:ab:02:f9:39:51:2c: 21:e8:79:fb:77:4f:d8:64:ce:9c:cf:65:c7:c3:69:8f:56:2e: 28:dd:79:21:13:a9:4b:78:16:59:79:67:9a:51:a2:bc:a6:8c: 18:9a:8c:55:5c:9c:8a:b4:60:49:99:b7:d5:5f:7d:f2:df:e9: 37:1c:b1:ef:7e:58:50:98:a4:9f:1b:7e:be:58:d1:2f:1e:f2: c3:30:17:21:6a:19:67:d2:49:0e:b4:41:8a:0c:3f:03:01:78: 37:6c:79:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h7GjvQM33OUabAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk Nzk0YzFiMGMtNDgwMi00MmIxLWJiMTctOTBiN2IwOWJkMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKyJSUAdWAelKrPrAmW8QAKDs5KwttrNt142 uo3vfnEQON3rwqgoq+h27l4t2gOznz1cXUcCUGnGk1DvxNDMlceNYxMJwy3SCcYU q43shx/qqEhfu0Ynlx/V5roJzbPKlIIcJaUobUqJDVhzxgmOfPnggYfvJzK/INt5 tn2VzBn7CkdyExfkbeonlQOBsvI7YVyaNPN0IydxzjRQwiks+lOzcjII1ai3ExPB fo6FY3Xi56J2reWpuih6nbSXjYwyiCW1amq32ZHf5WA83OlKfsGmXtw2CIa+W51X GG1r97MNoBxwFLYJQ/s3AOuDd3cufbY2M6vgU4FRQCO8GID1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgoJGgCYv35sYpFKY77BPpxYjIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGRmNzUxZTQtYWE0Zi0z ZThjLTgwYjUtOWFiYThlYmUwZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaQOMeWovKGcn/CKjZ19RNllkjZqC3s96YyWrXDfxVTh4wWcczBhzZ6 GjU5K/rfBAsqtwODiGgMc0Bh9VrE89Hcb9wSGE2x/xpXzm6gc3Ol2c0YQjEgJpUz ZW3rpmgOAIknSIQTilw/74erdG76DaE1IMLwQwE6ukDf0uZDiG/QG7knzN1/7up4 oTlTS60Z1++iZzJKUxanoHLZBKsC+TlRLCHoeft3T9hkzpzPZcfDaY9WLijdeSET qUt4Fll5Z5pRorymjBiajFVcnIq0YEmZt9VfffLf6Tccse9+WFCYpJ8bfr5Y0S8e 8sMwFyFqGWfSSQ60QYoMPwMBeDdseQs= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:37 2026 by rpki-client