$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa File: afb6a581-496d-3eeb-bbf1-132145bd6a49.roa (raw, json) Hash identifier: trdhD1zb1ItrK+ZVCj6XMIgCziz8UDCuGSzOuDK8IHU= Subject key identifier: B2:B6:94:B7:39:4B:B0:CC:CD:54:2F:EB:BE:C8:C4:07:E8:F2:A4:14 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07C9FF2FC5072CF6CA0400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 72.255.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c9:ff:2f:c5:07:2c:f6:ca:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4f59a03b-d9a0-4ba9-8328-daaccf32952c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e4:d7:6d:04:96:9e:19:77:ea:cd:8e:2d:2e: 0c:62:31:67:e2:d9:e9:88:bf:76:b6:4f:83:71:bd: ab:b3:f5:61:bf:65:e6:45:69:10:a9:1c:90:44:17: b6:0e:c6:b3:80:00:0f:2c:48:4a:99:39:1d:48:7b: fa:5c:db:eb:75:0d:ff:3e:59:32:47:51:e7:24:01: 17:9e:ef:06:1c:2d:8a:e4:22:0e:34:f7:1d:d8:c7: df:a5:b5:28:c6:7d:2a:fa:54:5c:8a:42:4d:a2:44: cf:68:f7:85:8b:4b:8c:b5:a1:80:66:66:4e:1f:61: 18:9b:c7:34:7c:0a:a7:26:fe:10:7b:d6:0b:cd:e6: 0e:da:c1:ee:b3:cc:d7:7f:18:6e:11:48:8e:d1:7b: 40:35:a2:b2:54:4b:ad:b3:5f:da:ac:bc:40:4d:de: 79:43:69:23:a0:9e:09:7f:1d:90:45:b4:99:28:c0: 42:bf:6f:b3:14:31:d7:a5:f7:4b:29:75:bb:77:61: 03:e2:7c:51:78:43:07:2a:b2:49:c2:a7:f9:e3:6c: 5c:9f:72:b6:2d:dc:a0:b5:d4:2b:52:f7:49:cd:aa: d7:9d:b0:b5:1d:cc:ff:ff:46:c7:90:11:bf:52:81: ca:2d:00:31:58:f6:e3:df:ef:fa:52:30:d9:85:5b: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:94:B7:39:4B:B0:CC:CD:54:2F:EB:BE:C8:C4:07:E8:F2:A4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/afb6a581-496d-3eeb-bbf1-132145bd6a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1e:fd:a0:b5:15:3a:6a:14:52:fd:2e:56:28:7e:5d:60:c2: e6:c1:f3:6d:a4:94:8c:82:44:36:cd:a4:0e:30:47:f8:d8:d5: 7a:19:d9:30:39:9b:34:13:4f:56:e9:17:65:72:4e:23:e8:44: 82:db:d0:00:b0:b3:cf:74:68:e3:2c:a3:24:55:f5:7a:65:2f: 8d:5f:32:a8:ea:12:39:42:8e:58:11:d1:38:7a:3a:27:80:8c: 8d:e3:af:bf:4f:49:43:51:15:c2:3e:e3:d6:e0:5b:88:47:1c: 42:6c:a2:53:41:e8:d8:9b:27:8a:1e:04:13:9a:3c:db:75:a7: dd:3d:0e:50:b2:b2:08:67:f4:46:24:29:9e:e6:17:51:9b:c1: 86:4c:87:77:ab:54:34:ac:c3:0a:ef:0a:4e:5b:f9:ed:d0:04: e7:a5:ef:f6:b8:ae:f7:1a:b4:be:77:1c:f7:a2:60:f0:7f:a8: c6:58:c4:ee:ce:77:fe:65:8d:30:43:e8:29:c4:49:51:a7:2c: 29:eb:56:41:67:d5:89:fb:b6:7a:13:7a:c5:24:78:a7:fe:05: 01:b1:33:29:ed:36:cd:0e:89:40:4b:a5:e4:19:3d:d3:7c:07: 3c:11:31:31:1e:b2:18:4d:22:e1:2d:14:df:56:cc:f3:bb:ac: 0e:d6:61:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8n/L8UHLPbKBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NGY1OWEwM2ItZDlhMC00YmE5LTgzMjgtZGFhY2NmMzI5NTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eTXbQSWnhl36s2OLS4MYjFn4tnpiL92tk+D cb2rs/Vhv2XmRWkQqRyQRBe2DsazgAAPLEhKmTkdSHv6XNvrdQ3/PlkyR1HnJAEX nu8GHC2K5CIONPcd2MffpbUoxn0q+lRcikJNokTPaPeFi0uMtaGAZmZOH2EYm8c0 fAqnJv4Qe9YLzeYO2sHus8zXfxhuEUiO0XtANaKyVEuts1/arLxATd55Q2kjoJ4J fx2QRbSZKMBCv2+zFDHXpfdLKXW7d2ED4nxReEMHKrJJwqf542xcn3K2LdygtdQr UvdJzarXnbC1Hcz//0bHkBG/UoHKLQAxWPbj3+/6UjDZhVt6VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK2lLc5S7DMzVQv677IxAfo8qQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWZiNmE1ODEtNDk2ZC0z ZWViLWJiZjEtMTMyMTQ1YmQ2YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP96MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJge/aC1FTpqFFL9LlYofl1gwubB822klIyCRDbNpA4wR/jY1XoZ2TA5 mzQTT1bpF2VyTiPoRILb0ACws890aOMsoyRV9XplL41fMqjqEjlCjlgR0Th6OieA jI3jr79PSUNRFcI+49bgW4hHHEJsolNB6NibJ4oeBBOaPNt1p909DlCysghn9EYk KZ7mF1GbwYZMh3erVDSswwrvCk5b+e3QBOel7/a4rvcatL53HPeiYPB/qMZYxO7O d/5ljTBD6CnESVGnLCnrVkFn1Yn7tnoTesUkeKf+BQGxMyntNs0OiUBLpeQZPdN8 BzwRMTEeshhNIuEtFN9WzPO7rA7WYRY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:18 2025 by rpki-client