$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa File: 5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa (raw, json) Hash identifier: OZ/aV7kESv0+CBh0rpBuMlBhvG5B3HbNDQE2TtKb18Q= Subject key identifier: 05:74:A5:1E:3C:4F:16:A4:78:AB:C0:3B:21:E9:F2:0D:87:04:98:40 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07AAB48971A9D015C0A280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:aa:b4:89:71:a9:d0:15:c0:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a25b78c2-b767-484f-87c8-0719b4e01816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:75:3d:8f:c6:81:a4:db:51:9d:81:0f:4d: ff:6f:71:d5:9b:f9:05:da:d3:28:45:80:48:ad:03: 91:a8:be:92:53:dd:1c:a3:ce:d7:98:bd:4a:b5:3d: cd:ff:7e:2d:b6:59:19:38:69:10:ab:ba:36:a3:5a: 1e:11:66:f5:b8:20:81:20:17:bf:3e:96:87:91:da: c0:c6:53:e5:09:18:89:04:b3:54:78:6d:ef:78:7e: ba:5a:85:83:47:ef:e4:49:a1:59:95:9e:cf:bd:07: 45:04:84:6a:1d:85:d0:0d:fe:a4:cb:ee:6d:58:22: b9:cc:2e:ea:67:d4:23:48:64:f2:f6:a5:98:b8:d7: e3:ff:18:f1:89:06:32:10:2b:0f:c9:87:4d:67:2b: ae:ab:4b:a1:65:d3:01:46:7d:88:8a:e9:ff:c9:a1: 3d:ae:3e:f1:25:bf:2f:e5:12:1b:43:dc:53:69:9a: 59:7c:08:7b:aa:aa:21:f5:3c:27:16:dd:19:ff:1f: 92:de:00:2c:79:34:79:08:ab:da:46:24:a4:2e:4b: 21:33:52:5d:f3:09:2c:02:1d:1e:56:9d:57:c0:1f: e1:c5:d2:5a:08:89:50:9b:f6:d4:6f:dd:6e:fc:32: e8:f1:f6:40:32:23:c2:e1:c3:93:e5:b5:68:73:2d: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:A5:1E:3C:4F:16:A4:78:AB:C0:3B:21:E9:F2:0D:87:04:98:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:70:42:8a:07:d5:07:ce:41:60:c5:f9:33:4c:35:da:29:bc: cb:72:ae:94:5e:d0:9d:f0:a1:6d:03:98:1c:53:3f:76:69:92: 7d:a8:a6:dd:56:fd:4a:dc:3b:a2:22:83:37:34:ad:da:cf:f1: ff:06:2c:a2:0a:90:2a:61:15:88:f0:b5:84:3b:82:44:9e:6a: f3:45:54:8c:41:0f:b6:de:f2:d1:7f:bb:28:f5:1d:ae:fa:8b: df:4f:b1:ae:c6:7b:cb:1c:5c:db:42:a6:13:b7:09:80:2c:01: 74:64:82:0a:52:e9:3f:2b:3b:05:d7:21:16:91:23:7b:9f:e9: 5e:6d:f7:ca:95:40:3c:ae:dc:0b:6f:69:ae:16:5a:c2:90:37: fc:11:74:e4:3c:d8:e6:dd:1e:e4:92:56:b0:6e:6d:1f:2d:51: 43:03:4a:08:44:6a:33:69:69:1c:17:9e:89:a6:22:5d:a8:7f: a6:af:2c:94:de:43:b9:61:d7:bb:1c:37:c7:ee:92:7c:c1:94: f1:27:8e:65:e6:74:aa:85:15:12:d1:5e:39:07:a1:d8:22:d5: 43:35:3b:fd:5a:36:46:33:5b:bd:da:b3:60:67:2d:43:14:1a: 96:8a:bb:a3:f5:e1:f2:3b:1a:f1:ba:92:f1:e7:b4:7c:1b:59: d1:3b:f6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6q0iXGp0BXAooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTI1Yjc4YzItYjc2Ny00ODRmLTg3YzgtMDcxOWI0ZTAxODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzt1PY/GgaTbUZ2BD03/b3HVm/kF2tMoRYBI rQORqL6SU90co87XmL1KtT3N/34ttlkZOGkQq7o2o1oeEWb1uCCBIBe/PpaHkdrA xlPlCRiJBLNUeG3veH66WoWDR+/kSaFZlZ7PvQdFBIRqHYXQDf6ky+5tWCK5zC7q Z9QjSGTy9qWYuNfj/xjxiQYyECsPyYdNZyuuq0uhZdMBRn2Iiun/yaE9rj7xJb8v 5RIbQ9xTaZpZfAh7qqoh9TwnFt0Z/x+S3gAseTR5CKvaRiSkLkshM1Jd8wksAh0e Vp1XwB/hxdJaCIlQm/bUb91u/DLo8fZAMiPC4cOT5bVocy37SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV0pR48TxakeKvAOyHp8g2HBJhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWYyMDIzMmMtZjhlNy0z MmY5LTk3MGEtZDZiOTNiYWYwNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhwQooH1QfOQWDF+TNMNdopvMtyrpRe0J3woW0DmBxTP3Zpkn2opt1W /UrcO6Iigzc0rdrP8f8GLKIKkCphFYjwtYQ7gkSeavNFVIxBD7be8tF/uyj1Ha76 i99Psa7Ge8scXNtCphO3CYAsAXRkggpS6T8rOwXXIRaRI3uf6V5t98qVQDyu3Atv aa4WWsKQN/wRdOQ82ObdHuSSVrBubR8tUUMDSghEajNpaRwXnommIl2of6avLJTe Q7lh17scN8fuknzBlPEnjmXmdKqFFRLRXjkHodgi1UM1O/1aNkYzW73as2BnLUMU GpaKu6P14fI7GvG6kvHntHwbWdE79n8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:24 2025 by rpki-client