$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6395f127-d7a2-3350-9978-da936c2c7e5b.roa File: 6395f127-d7a2-3350-9978-da936c2c7e5b.roa (raw, json) Hash identifier: DW24m5eooaEnoT+pnBnTuLgYnBM0Rn9ClF7yvfMmZg0= Subject key identifier: 46:F4:33:D7:0D:9D:B6:02:CC:A2:49:82:C9:32:78:70:4A:0C:3B:E8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A86A627912963D32D3440 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6395f127-d7a2-3350-9978-da936c2c7e5b.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 72.255.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:86:a6:27:91:29:63:d3:2d:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=73068f5b-1933-4c0b-a124-37d5e698545c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c9:46:d9:3b:db:df:9b:08:b5:07:a1:49:cf: 87:d2:f0:5b:43:c1:51:52:44:c7:9c:94:11:11:90: 31:7c:3d:66:48:bf:e0:c3:c8:50:0c:b0:5e:f9:14: 22:42:85:0e:6c:fe:ad:69:50:9d:81:42:a3:34:4e: 0c:66:b8:63:a2:07:69:d2:77:c2:9d:56:c4:3c:a5: b2:9f:31:c9:32:32:ce:c2:97:46:c8:6d:b4:c8:b4: 17:74:55:d7:cf:b6:66:29:77:61:a8:6e:86:02:2d: 5b:17:5c:75:24:f1:d2:32:42:f1:21:9d:16:3f:2a: d7:f3:0b:d8:68:4d:9c:c5:97:29:77:ac:16:b6:00: 1f:e4:83:1b:e7:47:db:a5:db:2c:79:d6:05:1d:69: bd:50:ce:ba:39:5a:22:15:56:e0:13:73:ea:53:e8: cc:dc:3a:79:ae:70:77:cd:c1:45:7a:b9:e1:9f:0a: 40:b2:5c:d7:e0:1b:1e:f0:bd:33:35:68:67:2f:e3: 15:4e:a7:ba:f5:13:9b:50:e9:e7:af:59:20:0e:a0: 87:da:2f:9b:20:3d:59:19:10:ae:22:6f:39:40:23: 71:f2:ce:65:03:93:7b:27:7e:48:3c:5a:1f:18:f5: 35:44:e6:25:ea:82:4c:44:0e:6e:79:45:4f:7a:98: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:33:D7:0D:9D:B6:02:CC:A2:49:82:C9:32:78:70:4A:0C:3B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6395f127-d7a2-3350-9978-da936c2c7e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:66:66:f5:0d:c5:6c:8a:c4:c3:30:84:e8:dc:41:68:98:1b: 18:8a:e6:c7:4f:34:af:bd:8b:2e:0b:62:79:d8:a7:8a:2e:cd: 15:df:5a:08:f2:2e:43:26:69:31:ca:52:63:da:a9:02:2c:6b: 25:ab:cd:16:d6:ee:a8:15:f1:6c:76:29:c6:c3:64:2f:9f:e0: b7:2c:da:dc:97:78:a9:a6:35:58:d4:09:9c:14:56:89:1d:3f: 11:e1:ea:65:99:d6:5c:3f:4a:8c:60:ea:e0:34:d4:14:43:5a: 3c:7c:2d:59:99:0c:2f:65:1d:4b:02:3f:32:27:57:be:4f:51: 1f:a2:d7:84:06:d2:bd:d1:74:b0:0e:47:e4:1a:df:d7:df:d7: 4c:36:89:b3:fe:86:79:e2:af:e2:53:80:6f:98:06:eb:89:47: 17:2d:6c:63:f7:ef:0c:9c:87:5b:c4:65:81:b7:87:43:82:83: cc:95:5b:d1:1b:18:53:97:2a:4e:60:df:40:6b:b4:68:50:a7: 0f:5e:a4:ed:cf:64:4c:be:08:bc:16:0e:b2:65:23:6a:a7:a2: 04:b7:d3:de:87:db:60:a4:64:45:66:c4:18:79:ad:a3:e3:b0: f0:23:9f:2b:44:d9:52:52:07:36:33:9f:14:e5:20:e0:c8:18: 42:1f:2c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoamJ5EpY9MtNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzMwNjhmNWItMTkzMy00YzBiLWExMjQtMzdkNWU2OTg1NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMlG2Tvb35sItQehSc+H0vBbQ8FRUkTHnJQR EZAxfD1mSL/gw8hQDLBe+RQiQoUObP6taVCdgUKjNE4MZrhjogdp0nfCnVbEPKWy nzHJMjLOwpdGyG20yLQXdFXXz7ZmKXdhqG6GAi1bF1x1JPHSMkLxIZ0WPyrX8wvY aE2cxZcpd6wWtgAf5IMb50fbpdssedYFHWm9UM66OVoiFVbgE3PqU+jM3Dp5rnB3 zcFFernhnwpAslzX4Bse8L0zNWhnL+MVTqe69RObUOnnr1kgDqCH2i+bID1ZGRCu Im85QCNx8s5lA5N7J35IPFofGPU1ROYl6oJMRA5ueUVPepjRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb0M9cNnbYCzKJJgskyeHBKDDvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjM5NWYxMjctZDdhMi0z MzUwLTk5NzgtZGE5MzZjMmM3ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRmZvUNxWyKxMMwhOjcQWiYGxiK5sdPNK+9iy4LYnnYp4ouzRXfWgjy LkMmaTHKUmPaqQIsayWrzRbW7qgV8Wx2KcbDZC+f4Lcs2tyXeKmmNVjUCZwUVokd PxHh6mWZ1lw/Soxg6uA01BRDWjx8LVmZDC9lHUsCPzInV75PUR+i14QG0r3RdLAO R+Qa39ff10w2ibP+hnnir+JTgG+YBuuJRxctbGP37wych1vEZYG3h0OCg8yVW9Eb GFOXKk5g30BrtGhQpw9epO3PZEy+CLwWDrJlI2qnogS3096H22CkZEVmxBh5raPj sPAjnytE2VJSBzYznxTlIODIGEIfLFw= -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:55 2026 by rpki-client