$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa File: 5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa (raw, json) Hash identifier: dTh52bcCJUNpCd3Y+o01f5u5fgeflV9xGTAr70hm4TE= Subject key identifier: 48:3E:01:74:C7:B4:85:E4:79:BF:A7:B7:B0:6D:41:AC:67:6A:B9:5D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C538B0B8F0D232FBEE420 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:53:8b:0b:8f:0d:23:2f:be:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=e024c748-ac5d-4d39-a2d6-5dd8593ba549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:46:e8:09:74:ae:cc:24:cf:80:e5:3d:25: c6:4e:1d:49:ad:6b:9b:27:e7:c5:f9:61:a7:68:2c: 2f:b1:ac:93:56:7e:aa:1c:ea:4b:e8:d3:e6:11:b2: a3:0d:51:82:f1:06:d2:9c:76:34:f0:18:84:09:49: a2:0c:81:a4:9b:58:c8:54:a2:2f:da:35:f2:c9:3a: d8:fb:05:7c:1a:8d:a9:ae:24:c9:31:a7:8c:b1:05: 86:f9:ea:85:6d:19:e5:92:64:ad:89:57:d6:77:a8: c0:0c:ad:48:2e:4c:64:bc:a4:20:38:00:6e:b0:3b: b5:30:40:e0:26:e9:30:3b:fd:9c:a0:51:b0:24:27: 38:24:61:d9:10:cd:ed:dc:5a:53:22:52:d9:74:54: 09:da:9e:92:c6:ad:fa:db:21:f5:27:a0:e2:b7:55: f4:3c:55:b3:cc:30:48:25:8d:8f:e6:0c:8a:70:f1: 83:17:3a:2a:2f:99:b6:82:a7:af:f4:96:8c:76:a4: 81:9e:67:6c:c2:4f:9d:14:8e:2f:04:dd:ac:00:05: 0f:40:b1:1b:ee:cb:64:48:4d:e5:46:e2:80:60:58: 63:4b:16:dc:66:fb:4d:85:67:b8:cf:34:e4:b1:5d: 12:44:4c:c5:fb:09:19:71:ca:75:25:b5:e7:c7:8f: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3E:01:74:C7:B4:85:E4:79:BF:A7:B7:B0:6D:41:AC:67:6A:B9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ca:08:f1:d4:e5:06:e8:ba:81:ec:1a:46:0d:d2:ec:86:4e: 54:eb:3f:cc:97:97:35:07:10:13:b4:98:6b:42:7c:64:80:48: c5:18:5e:4d:51:3e:48:8d:b8:32:2b:90:35:8d:95:76:06:ce: 47:0b:0f:8a:7b:ff:ba:3e:80:20:b3:b0:c5:da:9a:0d:65:38: 13:a8:ad:72:b4:c3:22:f5:e4:a1:d6:20:5c:6e:97:0e:7b:93: 8d:9e:90:d6:c4:84:a7:c4:d4:ac:e9:e4:97:17:01:2b:60:78: 3b:03:a0:33:3d:72:2a:c9:2e:12:af:52:38:66:83:e6:b9:f0: ee:a8:00:39:dc:79:c2:51:47:25:79:2d:9b:7a:18:2e:20:ca: 8c:4c:c7:86:e0:f3:52:62:14:e2:82:f8:12:9a:06:96:37:e9: eb:a7:74:04:02:8f:65:a2:77:88:d2:a6:69:ab:dc:2b:42:ef: 12:1f:84:3b:c0:2d:07:ae:c2:13:b2:62:31:1b:78:43:ed:9c: 37:6a:ab:01:38:a2:a0:2f:c2:09:2e:1e:83:77:0f:d4:32:8a: 90:fb:d3:47:78:69:84:79:6b:b1:23:ec:06:8c:c4:1d:b0:1c: 24:14:21:30:87:f1:a2:d3:c2:31:ae:3a:f7:e2:6c:d9:89:b8: a2:2b:ec:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fFOLC48NIy++5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZTAyNGM3NDgtYWM1ZC00ZDM5LWEyZDYtNWRkODU5M2JhNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GZG6Al0rswkz4DlPSXGTh1JrWubJ+fF+WGn aCwvsayTVn6qHOpL6NPmEbKjDVGC8QbSnHY08BiECUmiDIGkm1jIVKIv2jXyyTrY +wV8Go2priTJMaeMsQWG+eqFbRnlkmStiVfWd6jADK1ILkxkvKQgOABusDu1MEDg JukwO/2coFGwJCc4JGHZEM3t3FpTIlLZdFQJ2p6Sxq362yH1J6Dit1X0PFWzzDBI JY2P5gyKcPGDFzoqL5m2gqev9JaMdqSBnmdswk+dFI4vBN2sAAUPQLEb7stkSE3l RuKAYFhjSxbcZvtNhWe4zzTksV0SREzF+wkZccp1JbXnx4836QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg+AXTHtIXkeb+nt7BtQaxnarldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWYyMDIzMmMtZjhlNy0z MmY5LTk3MGEtZDZiOTNiYWYwNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfKCPHU5QbouoHsGkYN0uyGTlTrP8yXlzUHEBO0mGtCfGSASMUYXk1R PkiNuDIrkDWNlXYGzkcLD4p7/7o+gCCzsMXamg1lOBOorXK0wyL15KHWIFxulw57 k42ekNbEhKfE1Kzp5JcXAStgeDsDoDM9cirJLhKvUjhmg+a58O6oADncecJRRyV5 LZt6GC4gyoxMx4bg81JiFOKC+BKaBpY36eundAQCj2Wid4jSpmmr3CtC7xIfhDvA LQeuwhOyYjEbeEPtnDdqqwE4oqAvwgkuHoN3D9QyipD700d4aYR5a7Ej7AaMxB2w HCQUITCH8aLTwjGuOvfibNmJuKIr7Og= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:17 2026 by rpki-client