$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/569e3eee-ca01-3f17-baae-c7af2b80b0ea.roa File: 569e3eee-ca01-3f17-baae-c7af2b80b0ea.roa (raw, json) Hash identifier: ywDlrR53iERcb2IhE5Il3X4loAMVoo4NTpN4QHDdZQE= Subject key identifier: 91:69:68:B5:2B:50:B6:38:69:AB:5C:B8:92:DA:12:AB:AC:04:4B:C1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A5BD224E8B7060AA78590 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/569e3eee-ca01-3f17-baae-c7af2b80b0ea.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 72.255.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5b:d2:24:e8:b7:06:0a:a7:85:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=b3f0fa09-7a15-4c4a-a2b4-31224f30acae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:44:3e:93:ba:ab:97:43:1f:f8:e9:b2:35: 28:fc:16:50:e0:58:1e:7c:cf:3b:6e:64:9c:af:f7: 41:b9:d2:ad:85:dd:5e:56:05:80:43:9b:9b:55:45: 31:59:a6:f0:a4:eb:b0:25:25:ff:11:3c:cf:ec:69: 15:67:ba:ec:e8:45:e5:bc:b3:71:6a:ec:cc:77:08: 53:11:f3:92:f4:7e:12:63:24:f1:d2:c1:8f:d5:0c: ab:27:5e:8a:bb:19:c3:13:3d:a2:ea:6e:13:d0:e6: 19:3d:42:0e:c7:ba:18:ff:30:47:c9:cb:f3:22:51: 9b:75:01:70:a9:55:41:c8:b1:16:70:e8:2a:9b:44: 65:a0:00:69:ce:43:cd:2f:77:fc:f6:41:fe:c9:2f: f7:e9:9e:7a:14:0e:68:87:57:f6:74:9c:81:c7:95: 7c:a4:f4:3c:c3:ce:3b:ad:77:3f:0f:fa:74:1b:f9: 66:70:c8:4e:f9:1d:c0:6d:1b:97:14:c1:0f:e0:3a: 46:76:18:e2:46:bf:b2:69:68:c0:d1:c8:c5:61:d3: 1b:fe:e5:a7:60:95:32:c6:13:8f:a5:7d:86:32:1b: 9c:d7:a3:af:a8:22:27:44:d5:a9:9f:e8:07:b5:01: 51:f8:a0:6a:bc:61:fc:d7:84:f2:70:57:d7:f0:c5: ec:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:68:B5:2B:50:B6:38:69:AB:5C:B8:92:DA:12:AB:AC:04:4B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/569e3eee-ca01-3f17-baae-c7af2b80b0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:13:3e:4b:c6:49:d8:a0:5d:0d:5c:4b:35:76:64:86:46:66: 51:50:9f:b8:97:e1:fb:ba:c7:58:ef:10:a0:cb:8c:7e:6b:03: 6c:ef:22:45:c5:f8:0f:c0:c5:1f:02:64:e1:15:82:8b:72:11: cb:32:30:82:56:bb:7e:c1:df:8a:88:44:32:de:6f:a4:d6:89: 6c:6b:4c:5f:13:f0:1b:47:1c:63:4a:a9:03:fb:56:ba:73:64: d9:39:6b:a6:f8:b6:86:c5:71:4f:86:7f:19:65:3b:87:fc:a5: 41:f8:85:3f:0b:51:a0:45:36:1c:02:bb:91:96:dd:f0:78:09: 7a:d1:a0:8a:19:5d:4e:8b:9e:63:5f:07:35:ad:be:0b:ca:db: ba:f1:d0:b9:42:ce:48:ef:19:30:88:ec:ef:f9:42:27:76:1a: 2b:81:98:67:eb:09:e2:2f:5c:d2:47:8c:aa:c8:62:a2:cb:43: 81:d3:1e:01:2a:a8:aa:90:8b:8a:61:07:6b:bc:82:dd:4f:b7: 85:59:38:84:fd:eb:09:d0:a5:3b:89:2b:a9:29:f4:bb:ca:c4: 0e:5e:38:0a:44:4e:af:ea:7f:3e:5f:de:11:3b:84:9d:1f:6f: 35:2d:6e:c0:ef:51:29:9a:51:e9:c0:fd:eb:4a:d4:90:54:98: ae:36:3d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlvSJOi3BgqnhZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YjNmMGZhMDktN2ExNS00YzRhLWEyYjQtMzEyMjRmMzBhY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn9EPpO6q5dDH/jpsjUo/BZQ4FgefM87bmSc r/dBudKthd1eVgWAQ5ubVUUxWabwpOuwJSX/ETzP7GkVZ7rs6EXlvLNxauzMdwhT EfOS9H4SYyTx0sGP1QyrJ16KuxnDEz2i6m4T0OYZPUIOx7oY/zBHycvzIlGbdQFw qVVByLEWcOgqm0RloABpzkPNL3f89kH+yS/36Z56FA5oh1f2dJyBx5V8pPQ8w847 rXc/D/p0G/lmcMhO+R3AbRuXFMEP4DpGdhjiRr+yaWjA0cjFYdMb/uWnYJUyxhOP pX2GMhuc16OvqCInRNWpn+gHtQFR+KBqvGH814TycFfX8MXsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFpaLUrULY4aatcuJLaEqusBEvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTY5ZTNlZWUtY2EwMS0z ZjE3LWJhYWUtYzdhZjJiODBiMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4TPkvGSdigXQ1cSzV2ZIZGZlFQn7iX4fu6x1jvEKDLjH5rA2zvIkXF +A/AxR8CZOEVgotyEcsyMIJWu37B34qIRDLeb6TWiWxrTF8T8BtHHGNKqQP7Vrpz ZNk5a6b4tobFcU+GfxllO4f8pUH4hT8LUaBFNhwCu5GW3fB4CXrRoIoZXU6LnmNf BzWtvgvK27rx0LlCzkjvGTCI7O/5Qid2GiuBmGfrCeIvXNJHjKrIYqLLQ4HTHgEq qKqQi4phB2u8gt1Pt4VZOIT96wnQpTuJK6kp9LvKxA5eOApETq/qfz5f3hE7hJ0f bzUtbsDvUSmaUenA/etK1JBUmK42PaA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:33:53 2026 by rpki-client