$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa File: 8da70dce-44c2-365f-99fb-5fab845dc30b.roa (raw, json) Hash identifier: m1+ObPo823vcskk8Kkn3EVrr66/9pDkrj+8WAPCGydQ= Subject key identifier: 5B:A7:86:91:5C:6B:B6:22:55:CE:48:65:BC:C7:B2:60:98:8C:5E:86 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07CB4E2F23E049FEBD7B40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cb:4e:2f:23:e0:49:fe:bd:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8eaf3eae-b5d5-46bc-aa8e-dd2f2bb907c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:e4:0a:3f:44:6f:3b:6f:4f:cf:0f:5e:f9: 91:c7:0c:6a:c1:94:92:4d:35:a7:af:0c:28:09:c5: 42:df:ae:df:e6:fc:8d:2f:8c:cc:4a:65:e5:fb:f1: fd:b6:a3:1a:5c:3d:ff:f8:7d:35:9f:a4:b2:b3:44: 19:1d:5d:c2:6a:b4:1a:90:cb:0f:2b:47:61:e7:54: 75:68:0a:64:10:28:23:e3:4b:0f:91:02:a7:4e:af: b8:30:0c:78:d1:74:10:6a:cf:0c:c8:a3:4f:a4:af: 55:90:5e:24:5b:76:1d:1d:ce:d2:11:1e:42:93:05: b1:eb:ec:71:81:83:a3:4f:c2:35:4e:9d:5c:a1:97: 77:c0:b6:f9:4f:b8:77:37:44:0a:fa:53:15:ac:5b: 27:a7:c0:3a:7e:f0:03:c5:6c:a1:fa:ed:1b:cd:e7: 47:ce:13:a3:68:ba:2a:4b:5d:7e:d6:5a:f0:f7:b3: 3e:95:dc:26:c3:ed:f8:a4:0a:c5:85:f8:8d:08:80: 60:bb:02:a4:7a:8a:94:af:83:f0:b0:19:35:fd:ac: de:1f:aa:91:54:2b:1d:1d:fc:a1:21:d5:80:f9:73: 35:05:d7:53:d1:5e:8e:c4:aa:84:3c:6a:47:77:dc: 42:bd:6c:51:af:d6:43:49:63:86:37:26:aa:a8:b4: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A7:86:91:5C:6B:B6:22:55:CE:48:65:BC:C7:B2:60:98:8C:5E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:35:de:6a:ec:98:6e:0f:3e:6c:34:77:44:fa:b9:c1:6e:f5: 8d:e6:2c:7f:05:64:1a:d9:fc:b3:35:4f:d5:21:19:b0:a9:47: cd:c9:7e:c6:c1:85:40:56:45:d7:93:68:4c:df:a0:d3:a2:33: 1e:1c:5d:b5:06:5b:28:84:f6:ff:a7:eb:26:5b:68:99:eb:75: 03:83:87:d1:5d:59:8a:76:a8:fb:d2:bb:1e:10:1b:fe:ea:c0: c0:5b:f9:af:d4:ce:73:0a:0e:95:b5:6e:0d:c5:b8:e5:67:0b: 24:a1:2d:78:c9:6d:6b:57:9d:3d:4f:2a:18:8e:e2:40:e6:ff: df:9d:f9:d6:27:b4:3a:2a:bc:6e:30:26:9f:08:7f:92:38:4e: 8e:16:74:5f:85:cd:a6:62:cd:a2:93:09:96:05:75:17:6b:94: 96:10:23:cb:fa:20:6d:b7:40:8b:33:3a:26:21:0d:5a:5c:6b: 1b:c2:be:c3:5d:fe:3b:0f:04:60:8a:0c:37:f6:6e:fe:14:55: 0e:de:ad:5b:87:c6:01:c2:67:bc:bd:d5:4a:75:0b:7b:27:3a: dd:17:55:16:e6:5a:d6:df:ca:e6:47:0a:88:11:b4:07:da:d8: 0b:8c:c1:87:b8:b1:36:0e:4a:74:b4:db:3d:b0:df:80:24:93: a3:95:b3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8tOLyPgSf69e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGVhZjNlYWUtYjVkNS00NmJjLWFhOGUtZGQyZjJiYjkwN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6DkCj9EbztvT88PXvmRxwxqwZSSTTWnrwwo CcVC367f5vyNL4zMSmXl+/H9tqMaXD3/+H01n6Sys0QZHV3CarQakMsPK0dh51R1 aApkECgj40sPkQKnTq+4MAx40XQQas8MyKNPpK9VkF4kW3YdHc7SER5CkwWx6+xx gYOjT8I1Tp1coZd3wLb5T7h3N0QK+lMVrFsnp8A6fvADxWyh+u0bzedHzhOjaLoq S11+1lrw97M+ldwmw+34pArFhfiNCIBguwKkeoqUr4PwsBk1/azeH6qRVCsdHfyh IdWA+XM1BddT0V6OxKqEPGpHd9xCvWxRr9ZDSWOGNyaqqLSXhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFunhpFca7YiVc5IZbzHsmCYjF6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGRhNzBkY2UtNDRjMi0z NjVmLTk5ZmItNWZhYjg0NWRjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs13mrsmG4PPmw0d0T6ucFu9Y3mLH8FZBrZ/LM1T9UhGbCpR83JfsbB hUBWRdeTaEzfoNOiMx4cXbUGWyiE9v+n6yZbaJnrdQODh9FdWYp2qPvSux4QG/7q wMBb+a/UznMKDpW1bg3FuOVnCyShLXjJbWtXnT1PKhiO4kDm/9+d+dYntDoqvG4w Jp8If5I4To4WdF+FzaZizaKTCZYFdRdrlJYQI8v6IG23QIszOiYhDVpcaxvCvsNd /jsPBGCKDDf2bv4UVQ7erVuHxgHCZ7y91Up1C3snOt0XVRbmWtbfyuZHCogRtAfa 2AuMwYe4sTYOSnS02z2w34Akk6OVszI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:04 2025 by rpki-client