$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/914de1dd-393d-32e1-9c7f-8e2047b42105.roa File: 914de1dd-393d-32e1-9c7f-8e2047b42105.roa (raw, json) Hash identifier: 85YOt7PwuK2ZAJH9S9W7qlo5V9RbjzK4QaRAxcWvoNI= Subject key identifier: A7:34:E5:BC:10:31:9E:BD:FF:82:CC:39:B8:8B:B9:8B:58:A6:A9:05 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C766F4215CA83A2891E40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/914de1dd-393d-32e1-9c7f-8e2047b42105.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:76:6f:42:15:ca:83:a2:89:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=0cb8e79f-fa31-40a9-8375-b6602c5b6eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:9f:1b:7b:e7:ad:d8:7e:82:1a:76:aa:dd: dc:af:47:0a:de:22:ac:79:9f:5a:e9:84:8b:e6:90: bb:c0:bb:eb:36:72:dd:52:b5:c9:2e:49:e5:2f:86: 77:1f:a6:73:c7:08:bd:e0:31:a2:21:4d:ac:92:28: df:91:65:7d:c6:05:ad:9e:9d:a0:ca:08:9d:63:13: 60:e0:10:1c:7a:bc:e8:1b:08:60:76:9d:64:25:77: 15:4b:bf:6e:c8:7c:ee:03:d1:4f:e5:5e:cc:44:bd: 61:cd:26:83:c8:c4:04:4c:21:96:48:63:3d:1d:90: d4:83:77:e9:ec:a1:2a:75:c1:73:dd:32:23:64:14: 67:b5:0c:6b:eb:e8:01:7e:bd:5b:eb:83:d9:81:2b: 29:5d:65:a8:1a:5f:72:17:bc:cd:f9:e2:30:7d:26: b5:88:21:88:18:ae:f0:35:a2:0f:33:02:22:55:9e: e7:8e:70:80:15:39:93:53:7d:bf:0c:98:55:e9:d6: e3:52:0c:df:85:ff:81:d5:6e:b2:2c:40:ca:df:71: c7:ac:21:f0:35:69:44:b4:d1:f9:06:2f:c1:5e:91: 39:98:b3:b5:a4:27:03:f7:ee:29:21:6c:6a:4b:d3: 37:78:aa:27:87:0c:2a:c3:76:ed:b6:6e:e0:41:66: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:34:E5:BC:10:31:9E:BD:FF:82:CC:39:B8:8B:B9:8B:58:A6:A9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/914de1dd-393d-32e1-9c7f-8e2047b42105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:83:5f:27:13:69:fd:8a:ad:71:53:23:7c:1f:76:08:7b:e3: 30:db:4a:4b:3e:e8:e8:3a:19:50:d2:44:38:4f:e8:29:70:02: a1:aa:20:f7:a3:e4:51:b4:b6:36:53:95:d5:72:f3:08:53:c4: cd:2f:25:aa:34:37:3a:c4:e7:bf:2e:8a:e1:36:dc:1b:fc:be: 76:bb:3f:df:6d:97:01:d4:41:c7:38:b7:a3:b9:a1:42:ee:71: 27:a0:08:c5:58:c9:74:be:b4:f6:7e:07:df:da:34:90:c6:3f: 94:93:ec:7b:d3:2a:1f:08:1d:52:bf:d7:9b:f2:d6:2c:a4:62: b9:d9:d9:d8:9b:17:ac:7d:9b:e7:d8:22:f4:bb:62:d9:f9:2d: 42:ed:28:e6:4b:ed:40:10:23:63:89:c5:e6:8b:47:10:6c:2d: 38:38:46:c4:a7:68:1f:dd:42:e4:1e:cf:5e:71:6c:90:e7:d5: 9a:8c:7d:cd:33:ec:b4:74:fb:9e:3c:a7:16:30:4f:ac:0b:ca: 08:63:70:09:12:ad:8f:4c:64:85:83:b6:23:2c:65:5b:df:27: 99:8d:58:d6:13:40:59:a0:74:1b:1c:02:2c:31:1b:20:50:50: 72:9d:6c:ea:74:cf:0d:ce:1c:02:b3:f7:27:29:6b:ff:fe:77: 85:13:19:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fHZvQhXKg6KJHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MGNiOGU3OWYtZmEzMS00MGE5LTgzNzUtYjY2MDJjNWI2ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA542fG3vnrdh+ghp2qt3cr0cK3iKseZ9a6YSL 5pC7wLvrNnLdUrXJLknlL4Z3H6Zzxwi94DGiIU2skijfkWV9xgWtnp2gygidYxNg 4BAcerzoGwhgdp1kJXcVS79uyHzuA9FP5V7MRL1hzSaDyMQETCGWSGM9HZDUg3fp 7KEqdcFz3TIjZBRntQxr6+gBfr1b64PZgSspXWWoGl9yF7zN+eIwfSa1iCGIGK7w NaIPMwIiVZ7njnCAFTmTU32/DJhV6dbjUgzfhf+B1W6yLEDK33HHrCHwNWlEtNH5 Bi/BXpE5mLO1pCcD9+4pIWxqS9M3eKonhwwqw3bttm7gQWbJsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc05bwQMZ69/4LMObiLuYtYpqkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTE0ZGUxZGQtMzkzZC0z MmUxLTljN2YtOGUyMDQ3YjQyMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeDXycTaf2KrXFTI3wfdgh74zDbSks+6Og6GVDSRDhP6ClwAqGqIPej 5FG0tjZTldVy8whTxM0vJao0NzrE578uiuE23Bv8vna7P99tlwHUQcc4t6O5oULu cSegCMVYyXS+tPZ+B9/aNJDGP5ST7HvTKh8IHVK/15vy1iykYrnZ2dibF6x9m+fY IvS7Ytn5LULtKOZL7UAQI2OJxeaLRxBsLTg4RsSnaB/dQuQez15xbJDn1ZqMfc0z 7LR0+548pxYwT6wLyghjcAkSrY9MZIWDtiMsZVvfJ5mNWNYTQFmgdBscAiwxGyBQ UHKdbOp0zw3OHAKz9ycpa//+d4UTGck= -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:11 2026 by rpki-client