$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa File: 920faa16-167f-3f76-aea3-3d03a027c5c3.roa (raw, json) Hash identifier: XvOtfKFW4/P7BxiDvgLbRIDiqgtv8Wx09fHMDSe2UqI= Subject key identifier: D1:1A:8C:45:A0:6D:C0:70:F9:29:36:5D:10:A7:04:73:B5:7F:E0:22 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A7C57C25E4B11C3CAE700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 72.255.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7c:57:c2:5e:4b:11:c3:ca:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=43e8d554-ca46-4ecc-81da-3df2688369ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:71:52:a9:0b:04:c9:56:b4:d3:50:1d:2b: 86:a4:32:77:0f:0d:ac:11:17:c0:d0:7c:83:6f:46: 3a:ee:df:46:09:fe:bc:df:73:4b:02:66:31:8c:77: 51:72:e4:dd:cd:00:c7:72:72:3c:9d:86:57:72:0c: f3:bc:2d:31:9a:8d:3e:87:63:02:9a:2f:93:b1:91: 6a:96:09:20:f6:95:26:04:91:94:85:f4:c0:7c:b8: 66:d7:ea:f2:50:b8:6d:52:c5:07:1e:1f:35:f4:b6: e0:72:a9:37:a8:17:5e:94:bf:58:0a:00:3e:46:23: 15:2d:6d:39:45:33:ab:01:d1:f1:1d:2a:53:82:1a: fb:6e:fa:06:3d:7b:fb:2f:ea:5d:50:02:13:5d:09: 10:73:98:d9:86:23:31:c4:a9:be:08:3c:55:38:60: b9:f1:9a:58:b7:eb:f7:8f:ce:65:ff:de:be:fe:90: fb:bc:ad:3a:61:38:3c:d7:ca:c4:b2:f6:98:47:75: 53:f8:18:15:d1:71:7b:1d:fb:06:3d:64:a6:33:8a: 51:f8:01:bf:06:83:81:62:55:02:d3:bf:89:16:3e: 23:1c:09:46:ed:28:77:f3:1d:e4:5f:46:d5:78:f4: 51:9a:40:76:3f:12:42:58:fc:34:f7:cd:e2:d9:6d: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1A:8C:45:A0:6D:C0:70:F9:29:36:5D:10:A7:04:73:B5:7F:E0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e3:fd:63:24:6e:16:02:5d:da:3f:ac:00:af:e6:0f:a9:4f: 3e:1f:04:86:de:ce:5e:f6:da:76:bd:2e:ab:9e:6b:5c:ba:d3: 6e:9f:1b:a3:59:ea:ae:a5:b0:5e:e2:a6:94:fe:0a:4c:7e:64: 82:11:9e:37:aa:25:ef:63:cc:47:9f:7f:da:b1:27:9b:03:9f: 20:ce:f4:3a:b4:75:ea:9f:fc:58:96:6d:85:06:e9:50:f0:fb: 62:49:7c:39:ee:41:6d:1a:db:cf:22:4f:07:fc:56:7a:fe:e5: d9:51:24:5d:fd:a5:6f:ab:14:1b:24:9b:72:cb:b0:90:96:c8: 49:ba:d2:1d:f2:69:28:ab:4e:1b:88:ab:00:bb:a8:c4:16:9a: 9f:15:42:d0:79:b7:7c:d5:3c:9b:a9:c0:0e:c5:dd:64:26:25: 39:ae:89:02:84:57:cc:c4:7d:bd:0e:c3:86:c0:67:92:f1:f0: fe:f9:65:27:51:32:47:c9:66:d1:79:85:08:b2:b0:99:d8:d1: 73:08:02:e9:db:6e:cb:eb:11:6b:c5:35:7d:96:10:17:6f:e3: 14:24:e8:cd:d7:28:dc:2c:3a:c1:7a:5c:f6:25:2f:fd:b0:5f: a0:a2:a4:1f:41:b5:86:f6:09:cc:83:22:ce:68:de:b7:22:22: 2b:ee:54:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnxXwl5LEcPK5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NDNlOGQ1NTQtY2E0Ni00ZWNjLTgxZGEtM2RmMjY4ODM2OWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bhxUqkLBMlWtNNQHSuGpDJ3Dw2sERfA0HyD b0Y67t9GCf6833NLAmYxjHdRcuTdzQDHcnI8nYZXcgzzvC0xmo0+h2MCmi+TsZFq lgkg9pUmBJGUhfTAfLhm1+ryULhtUsUHHh819Lbgcqk3qBdelL9YCgA+RiMVLW05 RTOrAdHxHSpTghr7bvoGPXv7L+pdUAITXQkQc5jZhiMxxKm+CDxVOGC58ZpYt+v3 j85l/96+/pD7vK06YTg818rEsvaYR3VT+BgV0XF7HfsGPWSmM4pR+AG/BoOBYlUC 07+JFj4jHAlG7Sh38x3kX0bVePRRmkB2PxJCWPw0983i2W0pYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEajEWgbcBw+Sk2XRCnBHO1f+AiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTIwZmFhMTYtMTY3Zi0z Zjc2LWFlYTMtM2QwM2EwMjdjNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbj/WMkbhYCXdo/rACv5g+pTz4fBIbezl722na9Lquea1y6026fG6NZ 6q6lsF7ippT+Ckx+ZIIRnjeqJe9jzEeff9qxJ5sDnyDO9Dq0deqf/FiWbYUG6VDw +2JJfDnuQW0a288iTwf8Vnr+5dlRJF39pW+rFBskm3LLsJCWyEm60h3yaSirThuI qwC7qMQWmp8VQtB5t3zVPJupwA7F3WQmJTmuiQKEV8zEfb0Ow4bAZ5Lx8P75ZSdR MkfJZtF5hQiysJnY0XMIAunbbsvrEWvFNX2WEBdv4xQk6M3XKNwsOsF6XPYlL/2w X6CipB9BtYb2CcyDIs5o3rciIivuVEY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:06:39 2026 by rpki-client