$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa File: afb6a581-496d-3eeb-bbf1-132145bd6a49.roa (raw, json) Hash identifier: 2CZfbV3rLMHWUtu8cZGVwp37q61gLm7K8wX+a9MNDps= Subject key identifier: 35:32:0D:E4:51:07:C4:EF:C6:10:18:B1:66:02:BD:D4:E9:18:9F:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C72D15894D920DC357880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:72:d1:58:94:d9:20:dc:35:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=6b16aae7-7473-45c4-bad5-1467355fc1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:89:26:50:89:9c:f2:2d:bd:91:84:03:47: be:ed:40:1d:b5:26:11:e9:4b:e4:71:e7:c7:e9:3f: d4:06:1e:aa:d7:ad:41:42:98:30:45:97:ce:99:25: 04:b3:b1:3b:eb:4e:f3:ed:27:f9:02:55:00:97:fb: 91:21:07:51:1b:71:87:a0:5c:ee:bb:35:87:dd:f1: 90:e3:21:75:8f:31:4b:a7:f4:00:c3:bc:22:8c:27: ef:f2:1b:e9:8d:88:29:e7:6c:1f:ae:65:28:fd:b7: 86:a6:be:13:17:c8:98:72:1c:3e:63:a5:6e:57:31: 5f:61:ae:f8:cd:8d:7f:90:2d:46:5e:2a:79:75:a6: b4:27:6d:69:fe:bd:44:67:e1:0f:d0:d6:83:1b:40: f0:ee:e4:78:35:9a:0b:ad:2e:22:f2:4e:ae:44:a7: 82:59:3b:70:8c:77:a5:12:eb:81:d1:84:45:2b:e2: 02:aa:91:39:55:05:b2:13:4d:86:a9:91:fe:12:2e: ca:7e:a6:40:f5:92:c7:10:17:a3:fd:74:72:a0:ff: b2:f1:69:5e:5f:b2:d4:39:e5:56:da:bb:26:37:3f: ef:f4:67:2a:96:2c:54:63:d4:c8:66:4b:bf:dc:50: 81:b7:3e:d4:ea:26:22:a6:3b:2e:aa:b9:f9:fc:d1: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:32:0D:E4:51:07:C4:EF:C6:10:18:B1:66:02:BD:D4:E9:18:9F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c1:5f:bf:cd:78:51:59:85:55:fa:26:ae:5d:60:7c:25:84: bb:4a:0d:7d:c4:94:f2:8a:9c:12:b1:c0:4d:4f:3c:7c:02:7b: 8c:98:b7:62:b4:1a:6e:de:2c:49:71:36:a7:b7:89:02:59:42: 64:54:cf:1e:3c:56:cd:0b:39:55:b1:03:1c:51:ec:76:34:c5: 56:6f:37:29:57:75:d6:c0:fa:03:75:5e:db:89:fb:5f:c2:84: bc:2f:d2:9e:75:2e:f0:b1:b7:84:f1:7a:c7:7f:32:d5:69:50: 4a:25:6a:4e:99:2c:6b:33:ba:ab:1c:46:3a:f6:30:f6:68:cf: 1a:62:df:24:ae:37:d3:e5:27:93:65:30:f4:ad:18:1c:8c:7d: a5:24:df:4c:81:92:b0:7f:67:95:8e:4f:ab:2e:3d:7a:31:33: 7b:b7:69:22:a8:eb:52:cc:9d:f2:84:e5:79:aa:76:af:20:90: ae:d6:20:96:ab:ee:ac:29:f2:d5:6e:87:f4:49:6b:92:f4:49: 72:11:49:be:bf:09:de:c9:e2:67:f9:e4:f1:b8:0b:fc:1f:01: 4e:da:cf:34:70:04:5b:a3:7c:96:9e:c4:55:f1:2e:5b:ec:06: c7:26:a6:8f:83:a5:ad:ec:ba:f1:dd:f4:8d:a0:ac:be:aa:c5: ef:61:1e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fHLRWJTZINw1eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk NmIxNmFhZTctNzQ3My00NWM0LWJhZDUtMTQ2NzM1NWZjMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoeJJlCJnPItvZGEA0e+7UAdtSYR6UvkcefH 6T/UBh6q161BQpgwRZfOmSUEs7E7607z7Sf5AlUAl/uRIQdRG3GHoFzuuzWH3fGQ 4yF1jzFLp/QAw7wijCfv8hvpjYgp52wfrmUo/beGpr4TF8iYchw+Y6VuVzFfYa74 zY1/kC1GXip5daa0J21p/r1EZ+EP0NaDG0Dw7uR4NZoLrS4i8k6uRKeCWTtwjHel EuuB0YRFK+ICqpE5VQWyE02GqZH+Ei7KfqZA9ZLHEBej/XRyoP+y8WleX7LUOeVW 2rsmNz/v9GcqlixUY9TIZku/3FCBtz7U6iYipjsuqrn5/NEwqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUyDeRRB8TvxhAYsWYCvdTpGJ8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWZiNmE1ODEtNDk2ZC0z ZWViLWJiZjEtMTMyMTQ1YmQ2YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP96MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnBX7/NeFFZhVX6Jq5dYHwlhLtKDX3ElPKKnBKxwE1PPHwCe4yYt2K0 Gm7eLElxNqe3iQJZQmRUzx48Vs0LOVWxAxxR7HY0xVZvNylXddbA+gN1XtuJ+1/C hLwv0p51LvCxt4Txesd/MtVpUEolak6ZLGszuqscRjr2MPZozxpi3ySuN9PlJ5Nl MPStGByMfaUk30yBkrB/Z5WOT6suPXoxM3u3aSKo61LMnfKE5Xmqdq8gkK7WIJar 7qwp8tVuh/RJa5L0SXIRSb6/Cd7J4mf55PG4C/wfAU7azzRwBFujfJaexFXxLlvs Bscmpo+Dpa3suvHd9I2grL6qxe9hHtU= -----END CERTIFICATE-----Generated at Mon Mar 2 01:17:40 2026 by rpki-client