$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/91153d83-9541-3171-99e2-acf70245ed8c.roa File: 91153d83-9541-3171-99e2-acf70245ed8c.roa (raw, json) Hash identifier: 4uaur4Z8y6oZ/lf95HmQDhK8P0PhsF5TpPsCyzS3Dyk= Subject key identifier: 14:2B:74:E2:A9:4E:EF:33:83:B6:55:45:55:4A:F8:8B:B6:54:15:D0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C7271F1D970F4BBB1FE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/91153d83-9541-3171-99e2-acf70245ed8c.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:72:71:f1:d9:70:f4:bb:b1:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=c1ac46f8-fbf0-452d-baea-74c97b1dfda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:a7:d1:cb:33:b7:5e:71:36:bc:df:43:b2: 6c:9d:fc:21:72:b3:e2:4c:a9:9c:35:97:e0:53:0c: f8:d3:02:84:67:0c:8b:8d:d0:ce:fd:4a:75:15:5b: 36:04:93:ec:79:f8:8d:eb:84:83:03:f0:1b:72:40: 98:69:43:da:d8:14:16:16:17:8a:c1:cd:6b:40:f2: 97:8c:23:c7:31:49:14:e8:38:27:e9:dc:7d:5d:3e: 99:aa:dc:48:93:1b:5f:26:94:c3:c2:0b:0b:75:a9: 8c:73:ad:93:bf:04:09:85:9a:8b:fd:96:e5:b2:57: 76:ca:ca:d1:1d:7b:74:0b:8e:05:cf:36:fe:40:ea: 81:16:63:69:dd:fc:9b:df:b1:cb:97:b0:21:95:1d: 09:fb:11:d6:56:f1:d3:31:f6:cb:cb:6d:7b:5f:70: 2a:0c:2f:8f:0a:3f:f0:b1:80:c7:97:84:de:20:11: 26:8a:98:82:67:b2:ab:ae:16:52:2c:b3:49:6b:6b: f4:ef:95:06:d2:a0:79:0e:22:c0:ab:4f:6b:d9:bf: 6c:c9:8a:0f:27:de:72:33:ca:72:c5:24:d0:da:60: 8e:22:68:20:a6:ac:e6:01:f8:38:eb:56:77:f7:44: 4c:c0:77:5b:64:b9:33:8a:6e:d5:01:7e:04:84:60: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2B:74:E2:A9:4E:EF:33:83:B6:55:45:55:4A:F8:8B:B6:54:15:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/91153d83-9541-3171-99e2-acf70245ed8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d6:51:37:ed:98:3f:b3:37:2c:bd:19:12:3d:26:55:8d:23: 1f:51:84:7b:21:54:82:63:5d:66:0d:3e:86:bd:7e:04:90:4d: c2:d3:61:4d:38:a2:6d:95:42:cf:a0:78:53:d8:16:f8:22:fd: 6d:64:61:d4:04:17:d0:8e:0d:50:f2:35:9a:82:24:14:87:f5: a7:8b:a2:da:15:75:d2:17:42:ec:79:f1:76:aa:37:6e:19:32: 99:bd:47:8e:03:a4:25:f1:09:dd:58:9d:f6:5e:ef:e4:81:16: 70:50:41:65:65:d1:18:5a:a8:7e:01:8c:87:cd:d1:35:57:d2: 78:76:3d:58:01:37:71:41:55:08:d0:7f:0d:00:89:1c:47:2f: f9:37:ed:09:a9:8a:75:02:78:13:da:2d:75:2b:97:83:3b:9c: 15:70:45:b3:1f:82:30:c0:a7:d0:9e:36:47:3d:30:a7:46:a4: 7a:59:ec:36:d4:cf:7d:94:fa:98:e6:14:9e:17:41:24:b2:96: fe:e9:91:eb:4f:5b:8e:9c:b2:15:68:e3:a0:c0:7d:7c:6b:19: 28:1d:6e:8c:6b:67:fc:f7:c6:a0:ea:38:e0:45:76:e2:10:15: 4a:2f:5a:31:4a:97:28:a3:ee:e6:b9:ca:2b:d8:f8:88:ce:ff: d8:03:07:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fHJx8dlw9Lux/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YzFhYzQ2ZjgtZmJmMC00NTJkLWJhZWEtNzRjOTdiMWRmZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUmn0cszt15xNrzfQ7JsnfwhcrPiTKmcNZfg Uwz40wKEZwyLjdDO/Up1FVs2BJPsefiN64SDA/AbckCYaUPa2BQWFheKwc1rQPKX jCPHMUkU6Dgn6dx9XT6ZqtxIkxtfJpTDwgsLdamMc62TvwQJhZqL/Zblsld2ysrR HXt0C44Fzzb+QOqBFmNp3fyb37HLl7AhlR0J+xHWVvHTMfbLy217X3AqDC+PCj/w sYDHl4TeIBEmipiCZ7KrrhZSLLNJa2v075UG0qB5DiLAq09r2b9syYoPJ95yM8py xSTQ2mCOImggpqzmAfg461Z390RMwHdbZLkzim7VAX4EhGBNIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQrdOKpTu8zg7ZVRVVK+Iu2VBXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTExNTNkODMtOTU0MS0z MTcxLTk5ZTItYWNmNzAyNDVlZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPWUTftmD+zNyy9GRI9JlWNIx9RhHshVIJjXWYNPoa9fgSQTcLTYU04 om2VQs+geFPYFvgi/W1kYdQEF9CODVDyNZqCJBSH9aeLotoVddIXQux58XaqN24Z Mpm9R44DpCXxCd1YnfZe7+SBFnBQQWVl0RhaqH4BjIfN0TVX0nh2PVgBN3FBVQjQ fw0AiRxHL/k37QmpinUCeBPaLXUrl4M7nBVwRbMfgjDAp9CeNkc9MKdGpHpZ7DbU z32U+pjmFJ4XQSSylv7pketPW46cshVo46DAfXxrGSgdboxrZ/z3xqDqOOBFduIQ FUovWjFKlyij7ua5yivY+IjO/9gDB38= -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:19 2026 by rpki-client