$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94d8e030-462b-39bf-93c1-e46a4e94ebf1.roa File: 94d8e030-462b-39bf-93c1-e46a4e94ebf1.roa (raw, json) Hash identifier: IapaRuo4Pxf82hbLZc3gTsNWq+pCbaZJzbI6QP+oQC8= Subject key identifier: F7:BC:74:90:62:2D:AB:C7:93:F6:C3:DB:ED:9D:19:58:B8:5C:5C:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07CC3525471D2140131880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94d8e030-462b-39bf-93c1-e46a4e94ebf1.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cc:35:25:47:1d:21:40:13:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=cb010e1a-2f8b-487a-8832-b70035742a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:81:29:da:c0:49:4e:b4:9f:3e:ae:92:9c: ae:c6:0a:3a:4d:b7:fa:8d:d2:22:48:05:52:49:b4: 3c:a1:28:a2:fd:5d:d3:a1:f6:48:76:56:84:e2:3f: 55:e1:c5:ec:d4:c2:a2:54:87:da:05:fb:09:76:61: 5c:72:23:12:8a:4f:9d:e9:1f:94:a2:fe:c9:c6:ef: 3a:bb:80:0c:e0:6f:89:04:74:0d:ce:91:1a:f2:f8: fc:2e:58:d5:ee:70:b7:bb:cc:f2:31:36:b6:6e:67: 6a:eb:4c:76:28:cf:2a:62:d0:1e:db:76:f1:01:c9: a7:10:8b:1d:f1:d4:eb:9f:2d:45:fa:43:ac:03:92: 75:db:b9:70:d7:5b:7c:e9:dc:33:10:64:c6:5b:01: 62:e4:77:ee:13:72:b9:12:cc:1d:9f:20:8e:15:ea: 2a:81:b5:d2:58:65:32:06:f4:4e:2b:25:fb:03:c2: af:15:ca:6d:e9:93:65:3a:e1:7b:7e:a7:a6:c0:42: 25:e0:cc:60:86:61:9f:10:fd:80:c1:15:c7:df:0f: 15:56:53:d1:4d:56:7b:79:36:cd:59:42:ca:a8:d8: 6e:d8:aa:a1:32:7b:8e:fe:68:b7:fc:97:39:39:8e: 89:f5:2c:e2:d9:a5:bd:ab:ef:2a:19:32:27:e3:8d: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BC:74:90:62:2D:AB:C7:93:F6:C3:DB:ED:9D:19:58:B8:5C:5C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94d8e030-462b-39bf-93c1-e46a4e94ebf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6d:ee:a9:62:dd:6a:74:0c:bf:e2:d3:41:a4:7b:eb:6d:6d: b8:2a:6a:c2:3a:64:02:b9:07:22:9d:07:86:1d:64:6b:b2:ef: a3:26:c1:f3:68:65:58:e6:8d:db:c5:fe:c2:0d:2f:f9:8b:7f: c6:a8:de:1d:44:79:3c:cc:e1:ea:26:b3:a6:f0:26:f9:f6:bb: ac:6f:99:df:fd:1d:c4:35:4b:c5:8b:73:75:2b:e1:45:95:2f: ac:2e:50:0e:03:6d:f6:80:7a:86:f0:ce:82:cc:61:be:7d:50: e1:c3:ee:44:b3:7b:be:9f:8f:ff:ae:8d:61:42:ab:3d:65:f0: c2:37:b9:48:f2:84:d4:cf:1c:62:1f:ff:f1:ed:d6:e6:3a:59: e6:a6:88:69:69:1c:61:bc:72:cd:f0:76:db:00:61:40:c2:6e: be:0b:db:1c:dd:85:62:12:00:3d:12:2b:d8:32:40:72:df:50: 71:2a:06:e5:8d:9a:bc:1c:3d:30:01:fc:a4:00:3b:5d:e6:69: 9b:2f:9b:87:f4:f0:7c:66:8e:49:28:41:50:50:a1:a8:ab:57: 98:8d:bf:dc:33:76:f5:b8:24:9b:0e:f5:a3:f8:32:e3:d0:6e: c2:af:e5:0c:c0:01:fb:e6:1b:8a:93:48:4b:2d:b1:ed:29:81: 2d:b4:c3:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8w1JUcdIUATGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2IwMTBlMWEtMmY4Yi00ODdhLTg4MzItYjcwMDM1NzQyYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgWBKdrASU60nz6ukpyuxgo6Tbf6jdIiSAVS SbQ8oSii/V3TofZIdlaE4j9V4cXs1MKiVIfaBfsJdmFcciMSik+d6R+Uov7Jxu86 u4AM4G+JBHQNzpEa8vj8LljV7nC3u8zyMTa2bmdq60x2KM8qYtAe23bxAcmnEIsd 8dTrny1F+kOsA5J127lw11t86dwzEGTGWwFi5HfuE3K5EswdnyCOFeoqgbXSWGUy BvROKyX7A8KvFcpt6ZNlOuF7fqemwEIl4MxghmGfEP2AwRXH3w8VVlPRTVZ7eTbN WULKqNhu2KqhMnuO/mi3/Jc5OY6J9Szi2aW9q+8qGTIn443ivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe8dJBiLavHk/bD2+2dGVi4XFxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTRkOGUwMzAtNDYyYi0z OWJmLTkzYzEtZTQ2YTRlOTRlYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP99MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBt7qli3Wp0DL/i00Gke+ttbbgqasI6ZAK5ByKdB4YdZGuy76MmwfNo ZVjmjdvF/sINL/mLf8ao3h1EeTzM4eoms6bwJvn2u6xvmd/9HcQ1S8WLc3Ur4UWV L6wuUA4DbfaAeobwzoLMYb59UOHD7kSze76fj/+ujWFCqz1l8MI3uUjyhNTPHGIf //Ht1uY6WeamiGlpHGG8cs3wdtsAYUDCbr4L2xzdhWISAD0SK9gyQHLfUHEqBuWN mrwcPTAB/KQAO13maZsvm4f08HxmjkkoQVBQoairV5iNv9wzdvW4JJsO9aP4MuPQ bsKv5QzAAfvmG4qTSEstse0pgS20w2c= -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:45 2025 by rpki-client