$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be5b980-e454-3465-8956-83315ca1251d.roa File: 9be5b980-e454-3465-8956-83315ca1251d.roa (raw, json) Hash identifier: 2Gbjpnwuqa2QT8pE09s1U0tryjPvSaGcMuOGiln3nDA= Subject key identifier: 17:F0:42:44:A3:4D:F9:26:FD:77:71:1E:80:BA:CE:15:57:A9:CB:C7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07A76280ED39388AE9E278 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be5b980-e454-3465-8956-83315ca1251d.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a7:62:80:ed:39:38:8a:e9:e2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=de25ef1f-3eb2-4727-b336-2e8b9877bc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:0d:95:f0:f3:5f:6c:f7:ae:ef:c3:b3:16: 05:f5:f5:ad:73:aa:00:3e:c8:3c:c1:0e:d3:af:be: 9f:30:fe:8d:06:2b:fc:65:b8:ff:02:bd:33:95:49: 73:7a:c8:17:22:fc:8f:0d:94:a3:6b:cf:e8:8d:9e: 62:5d:11:e9:24:b4:63:7d:31:c8:84:51:1d:76:1a: 7f:91:3b:50:aa:db:49:35:5f:a4:bb:6d:10:2d:41: bf:1c:3b:ae:da:c1:ca:b7:a9:13:ae:a4:7f:f8:e3: a8:a4:c3:5b:cd:16:83:b7:05:d0:d7:e7:cd:ad:dd: 59:56:38:47:f4:33:a7:47:32:98:0a:a3:d2:85:bc: 2f:d5:e5:b1:32:7f:26:54:29:92:9a:c0:81:dd:d0: 3e:f0:55:de:9c:89:cb:5c:a2:1e:e7:2a:30:29:dd: 11:7e:35:2e:2b:d9:9b:47:34:85:96:61:2b:11:81: 65:dd:9e:39:0e:aa:58:68:fc:a9:85:ef:48:30:c6: 70:23:30:dd:fb:64:5f:02:92:ba:44:31:ea:4c:55: 38:e6:a8:cc:42:e3:fb:08:ef:c5:69:fe:60:5a:0c: ca:e6:c1:b9:da:da:b1:98:16:13:ff:ea:c1:1b:90: 9f:80:22:34:15:ca:55:3c:0e:b5:2a:6f:4f:8a:f1: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F0:42:44:A3:4D:F9:26:FD:77:71:1E:80:BA:CE:15:57:A9:CB:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be5b980-e454-3465-8956-83315ca1251d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3a:f7:49:a4:74:7c:ff:b0:d9:3c:da:d8:ee:c9:f1:c5:98: be:12:d3:4a:d3:c6:26:71:d1:05:b0:47:fd:4d:b7:67:4d:3b: 9d:18:05:e0:6f:01:de:6e:05:7e:8f:09:92:fa:1f:98:f4:92: b8:5e:bf:1e:81:77:08:c5:da:a8:03:4e:29:51:d7:04:dd:d2: a0:89:f6:8e:55:41:75:29:55:e0:d4:f2:5d:a3:ed:13:1b:35: 7c:bd:68:53:14:11:d5:f5:0d:79:08:0c:22:4d:b5:f4:f6:28: ec:33:56:f0:7f:b8:ff:88:aa:5a:14:a6:e7:52:df:9d:6e:e7: 26:df:a7:ef:e3:22:6b:f3:b5:b9:57:19:87:0f:cc:fb:71:00: c8:ab:28:fe:77:b2:1b:07:28:3f:a9:c4:eb:29:a8:fa:c8:0b: 56:84:59:28:e7:31:1b:f7:2a:25:3d:a1:0f:da:7e:e7:e0:70: d5:da:2a:b6:f3:d7:bc:5b:0c:63:67:4d:a8:04:f0:1f:4b:18: 85:49:30:58:b9:b4:fc:02:65:f2:0c:8c:be:46:dd:4f:49:76: f1:da:5d:f8:5a:a0:8b:4e:c0:15:2b:02:8d:4f:3e:05:ba:6c: 94:71:ca:c3:36:dc:f6:2d:db:1e:90:67:f4:44:79:1b:e4:5e: a6:09:64:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6digO05OIrp4ngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGUyNWVmMWYtM2ViMi00NzI3LWIzMzYtMmU4Yjk4NzdiYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyMNlfDzX2z3ru/DsxYF9fWtc6oAPsg8wQ7T r76fMP6NBiv8Zbj/Ar0zlUlzesgXIvyPDZSja8/ojZ5iXRHpJLRjfTHIhFEddhp/ kTtQqttJNV+ku20QLUG/HDuu2sHKt6kTrqR/+OOopMNbzRaDtwXQ1+fNrd1ZVjhH 9DOnRzKYCqPShbwv1eWxMn8mVCmSmsCB3dA+8FXenInLXKIe5yowKd0RfjUuK9mb RzSFlmErEYFl3Z45DqpYaPyphe9IMMZwIzDd+2RfApK6RDHqTFU45qjMQuP7CO/F af5gWgzK5sG52tqxmBYT/+rBG5CfgCI0FcpVPA61Km9PivFMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfwQkSjTfkm/XdxHoC6zhVXqcvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWJlNWI5ODAtZTQ1NC0z NDY1LTg5NTYtODMzMTVjYTEyNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo690mkdHz/sNk82tjuyfHFmL4S00rTxiZx0QWwR/1Nt2dNO50YBeBv Ad5uBX6PCZL6H5j0krhevx6BdwjF2qgDTilR1wTd0qCJ9o5VQXUpVeDU8l2j7RMb NXy9aFMUEdX1DXkIDCJNtfT2KOwzVvB/uP+IqloUpudS351u5ybfp+/jImvztblX GYcPzPtxAMirKP53shsHKD+pxOspqPrIC1aEWSjnMRv3KiU9oQ/afufgcNXaKrbz 17xbDGNnTagE8B9LGIVJMFi5tPwCZfIMjL5G3U9JdvHaXfhaoItOwBUrAo1PPgW6 bJRxysM23PYt2x6QZ/REeRvkXqYJZCc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:48 2025 by rpki-client