$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be5b980-e454-3465-8956-83315ca1251d.roa File: 9be5b980-e454-3465-8956-83315ca1251d.roa (raw, json) Hash identifier: zr5gdGb9qzT4/uwIOJzp1FArfwWWFwju3gzFh6emMQM= Subject key identifier: C9:45:8B:E1:20:72:51:70:65:62:8E:2B:F2:F2:28:BE:F6:56:29:A2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C4F01E924A65F75E5A980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be5b980-e454-3465-8956-83315ca1251d.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:4f:01:e9:24:a6:5f:75:e5:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=2d087e38-9ee0-4ac3-8025-96570191b9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:45:8f:7c:19:3a:fc:1c:ca:dc:d6:65:40: c3:fc:d2:8a:b4:a4:ac:65:4a:4e:f7:6e:5c:fa:94: 72:36:e9:fe:e2:92:58:e6:bf:ec:76:97:8b:5c:e0: ab:c4:84:21:46:03:fe:58:85:a1:97:1d:0f:5a:9a: b7:a5:b6:da:34:7e:10:0a:6a:25:d0:36:8f:5f:6f: 45:8c:77:80:9b:11:43:4d:82:b8:82:dc:ad:5c:32: 03:54:ac:66:fa:4a:6b:8c:f9:b2:db:29:7d:4d:34: c3:f4:21:23:00:37:ca:59:86:c8:cf:5b:ce:22:56: a5:35:1c:8f:c3:c1:2f:48:38:8f:82:87:1a:80:a5: 5d:83:8f:f0:15:8f:f1:85:d5:e7:ea:41:a6:0f:7a: 16:7f:0f:4c:3e:04:b3:53:66:8f:08:d2:a9:5f:a3: 92:7e:63:c8:5f:92:6f:da:9f:e4:4c:e0:53:83:07: 46:4d:48:f2:f6:01:65:43:f9:1c:f1:76:3c:e7:ee: c3:3e:e0:8d:61:6a:d7:40:43:a7:ae:a0:de:28:cd: 00:d1:a5:6b:89:0d:f5:7f:a9:34:4f:9b:45:36:fa: a6:74:a2:1a:91:e0:93:e0:08:7a:70:02:71:a0:0d: f1:e5:7c:25:28:56:ed:43:db:b0:e0:7e:05:9b:68: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:45:8B:E1:20:72:51:70:65:62:8E:2B:F2:F2:28:BE:F6:56:29:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be5b980-e454-3465-8956-83315ca1251d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b0:e4:7b:62:4f:92:07:52:6e:0b:78:85:2b:e9:e0:03:19: 1b:4d:fc:d3:55:cb:b8:01:34:9a:90:79:3a:37:84:34:c0:01: 80:26:fe:dd:0f:01:1b:77:44:13:df:bc:ec:a1:6a:ab:91:7b: d3:d2:a2:e1:11:13:49:a3:13:55:61:cb:ad:37:f5:1b:cf:99: f8:37:4d:07:15:09:3a:13:51:20:6d:89:7f:58:e1:a9:bc:15: 76:d1:59:81:b3:cb:bc:3e:2b:b3:b9:d1:0e:73:c3:bc:8a:4d: 72:86:93:00:26:9e:9f:36:8f:a2:71:a5:1e:69:25:d8:af:51: f6:30:48:81:b0:62:84:76:3a:f1:54:ba:35:ee:f4:77:af:fd: 98:94:a3:d3:7b:93:03:de:91:c6:5b:be:85:eb:e0:7f:c2:2b: 62:15:89:7a:db:db:ac:25:f3:2e:9b:a2:8b:1e:ff:ab:38:ec: f0:c3:53:6a:1a:98:be:80:2b:ee:9f:5b:da:12:7b:8f:2f:51: f9:cc:11:db:b3:cd:c5:9c:70:da:a5:c9:d3:09:ed:bb:f2:83: 6f:1e:e6:f5:75:b1:01:68:81:78:27:67:b4:a0:c2:1c:05:a7: 00:8d:83:fe:16:ab:d4:a9:7c:87:e4:71:28:32:bf:b4:cb:91: ba:fb:d7:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fE8B6SSmX3XlqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MmQwODdlMzgtOWVlMC00YWMzLTgwMjUtOTY1NzAxOTFiOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6xFj3wZOvwcytzWZUDD/NKKtKSsZUpO925c +pRyNun+4pJY5r/sdpeLXOCrxIQhRgP+WIWhlx0PWpq3pbbaNH4QCmol0DaPX29F jHeAmxFDTYK4gtytXDIDVKxm+kprjPmy2yl9TTTD9CEjADfKWYbIz1vOIlalNRyP w8EvSDiPgocagKVdg4/wFY/xhdXn6kGmD3oWfw9MPgSzU2aPCNKpX6OSfmPIX5Jv 2p/kTOBTgwdGTUjy9gFlQ/kc8XY85+7DPuCNYWrXQEOnrqDeKM0A0aVriQ31f6k0 T5tFNvqmdKIakeCT4Ah6cAJxoA3x5XwlKFbtQ9uw4H4Fm2hasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlFi+EgclFwZWKOK/LyKL72VimiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWJlNWI5ODAtZTQ1NC0z NDY1LTg5NTYtODMzMTVjYTEyNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyw5HtiT5IHUm4LeIUr6eADGRtN/NNVy7gBNJqQeTo3hDTAAYAm/t0P ARt3RBPfvOyhaquRe9PSouERE0mjE1Vhy6039RvPmfg3TQcVCToTUSBtiX9Y4am8 FXbRWYGzy7w+K7O50Q5zw7yKTXKGkwAmnp82j6JxpR5pJdivUfYwSIGwYoR2OvFU ujXu9Hev/ZiUo9N7kwPekcZbvoXr4H/CK2IViXrb26wl8y6boose/6s47PDDU2oa mL6AK+6fW9oSe48vUfnMEduzzcWccNqlydMJ7bvyg28e5vV1sQFogXgnZ7SgwhwF pwCNg/4Wq9SpfIfkcSgyv7TLkbr71wI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:36 2026 by rpki-client