$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b4f5dfc-098c-350c-a7df-364576cad557.roa File: 8b4f5dfc-098c-350c-a7df-364576cad557.roa (raw, json) Hash identifier: 0XU9gOc5/1p83TmOaU4bsQSVXnDdxNj0KpuwgMKsFLQ= Subject key identifier: C8:94:83:00:A3:AE:C5:45:2E:14:82:0A:0D:CF:57:DE:0F:DB:3F:D3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C7425CF1FFFE5550B4D80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b4f5dfc-098c-350c-a7df-364576cad557.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:74:25:cf:1f:ff:e5:55:0b:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=a3ccf885-946d-4e00-84bf-55d45add49e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:8c:88:8f:fa:62:40:0c:54:fc:ed:6d:cb: 42:4c:95:10:f2:60:bc:a9:37:f9:65:b2:c1:e6:3b: 1e:ae:50:db:f8:29:44:28:4c:3e:da:d4:4b:21:cd: 17:94:b5:62:73:f8:10:9a:72:80:13:bc:76:43:94: 35:31:04:6f:d7:84:73:9a:dc:3c:54:fe:ba:4b:62: 0c:84:ee:d7:da:00:20:26:35:f0:1b:87:ed:65:6e: 80:22:75:76:37:0c:a2:d2:d1:01:fc:35:ef:87:df: 63:17:c0:59:a2:9f:33:d6:5c:ea:e2:f1:2c:a7:bd: 9b:21:c9:53:c8:25:44:27:f2:7e:19:59:35:48:ca: ee:d3:1c:bb:b0:65:74:3d:66:a7:37:5b:fb:71:80: 34:2f:6e:a7:8e:3d:0b:94:c3:ad:42:0b:50:d2:41: d8:f2:d4:39:40:4e:3b:c5:c0:9a:a7:39:8d:aa:08: 90:8b:64:77:e5:40:1e:92:c2:45:08:ba:7f:9a:e6: 4c:ae:be:94:ad:24:f0:15:7e:4e:dc:a8:48:62:bf: 9b:1e:b5:7f:dc:3f:e9:81:3b:61:db:a4:01:12:27: 7b:04:c4:91:3d:14:6b:da:2c:85:3b:d2:17:dc:41: 69:03:a0:e9:d0:17:ab:12:8c:fb:a1:51:0e:bf:da: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:94:83:00:A3:AE:C5:45:2E:14:82:0A:0D:CF:57:DE:0F:DB:3F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b4f5dfc-098c-350c-a7df-364576cad557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a0:32:a9:20:3a:95:05:c4:c1:7e:0c:72:bd:aa:e5:84:be: e6:1f:03:a2:b8:cf:46:be:95:23:df:56:57:92:a1:7d:8e:43: c2:cc:29:29:3d:46:ee:31:dd:47:8c:56:dc:63:8f:96:9a:c4: a6:6c:1d:bc:73:70:54:ca:aa:83:86:d3:be:a7:3d:4e:43:c1: 8b:76:13:47:9c:97:43:94:97:3d:51:da:00:4b:10:ee:b8:5b: 84:18:31:d0:8e:04:64:20:9f:73:70:fd:6e:14:ad:22:f4:f7: 8a:ae:0d:05:49:84:fb:dd:d7:60:78:65:c0:a8:63:09:9b:27: 44:45:9b:7b:fb:5f:3e:c1:28:20:91:92:27:b5:a6:48:d2:6e: d1:ef:55:3f:eb:c3:32:c0:bf:3e:35:6f:6b:9f:74:9f:d5:36: 7a:b3:40:32:2e:e6:87:32:ef:9e:38:5d:ef:3e:36:b2:21:80: f4:bc:93:e2:b8:8f:76:c9:7d:fe:3c:fe:72:87:03:54:31:0a: d1:79:0c:16:9f:b2:b3:d7:1e:43:2f:64:ca:f1:42:0a:df:23: 53:c4:46:c5:a9:5e:dd:f1:8c:a9:bb:8a:6d:1b:04:ec:16:55: 95:a6:04:09:a9:30:4f:5a:d6:33:4c:5b:4b:f1:15:46:98:91: 47:ac:0f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fHQlzx//5VULTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YTNjY2Y4ODUtOTQ2ZC00ZTAwLTg0YmYtNTVkNDVhZGQ0OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD2MiI/6YkAMVPztbctCTJUQ8mC8qTf5ZbLB 5jserlDb+ClEKEw+2tRLIc0XlLVic/gQmnKAE7x2Q5Q1MQRv14Rzmtw8VP66S2IM hO7X2gAgJjXwG4ftZW6AInV2Nwyi0tEB/DXvh99jF8BZop8z1lzq4vEsp72bIclT yCVEJ/J+GVk1SMru0xy7sGV0PWanN1v7cYA0L26njj0LlMOtQgtQ0kHY8tQ5QE47 xcCapzmNqgiQi2R35UAeksJFCLp/muZMrr6UrSTwFX5O3KhIYr+bHrV/3D/pgTth 26QBEid7BMSRPRRr2iyFO9IX3EFpA6Dp0BerEoz7oVEOv9pRqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiUgwCjrsVFLhSCCg3PV94P2z/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGI0ZjVkZmMtMDk4Yy0z NTBjLWE3ZGYtMzY0NTc2Y2FkNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2gMqkgOpUFxMF+DHK9quWEvuYfA6K4z0a+lSPfVleSoX2OQ8LMKSk9 Ru4x3UeMVtxjj5aaxKZsHbxzcFTKqoOG076nPU5DwYt2E0ecl0OUlz1R2gBLEO64 W4QYMdCOBGQgn3Nw/W4UrSL094quDQVJhPvd12B4ZcCoYwmbJ0RFm3v7Xz7BKCCR kie1pkjSbtHvVT/rwzLAvz41b2ufdJ/VNnqzQDIu5ocy7544Xe8+NrIhgPS8k+K4 j3bJff48/nKHA1QxCtF5DBafsrPXHkMvZMrxQgrfI1PERsWpXt3xjKm7im0bBOwW VZWmBAmpME9a1jNMW0vxFUaYkUesD8s= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:03 2026 by rpki-client