$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa File: baa423ff-3491-327f-b5ba-048ac3231549.roa (raw, json) Hash identifier: /dbW3Hi8T36MkERd3GMPC/e2LFBA2wJMH/IasmmRW0g= Subject key identifier: 8B:39:5E:4B:1A:09:CD:1F:89:93:24:25:FA:86:08:C4:FA:8A:19:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584DD625A92F259DBC2FDD954980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 30036 IP address blocks: 72.255.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:a9:2f:25:9d:bc:2f:dd:95:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=ffe8b1aa-aaae-43fb-8408-957fb8e9cb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:d9:a3:18:a0:23:af:3b:c7:55:10:3a:25: 8b:12:2e:e4:c5:8f:b9:f0:2c:56:c0:52:21:7e:28: b7:70:25:73:43:ab:64:82:6b:f8:48:15:84:84:e0: 0e:5e:6a:c0:03:16:43:87:5f:a3:af:1e:53:2d:d8: ad:d5:0e:70:57:ad:79:b7:06:a6:90:c5:46:38:6c: e7:91:db:3c:87:5e:2a:01:fb:c6:26:45:a3:ac:57: e2:e5:16:ca:c4:7f:3d:fc:7a:ed:e9:92:8a:e5:ed: ed:66:60:72:7f:54:31:a3:e9:ac:c9:d1:b6:c5:ac: 0a:3a:dc:5e:da:7b:5a:3a:1a:1a:7b:a8:21:45:da: d7:d2:33:8d:59:68:4b:53:01:0d:54:97:98:e4:23: 13:de:7a:06:78:cf:65:76:09:91:c4:1d:a4:38:36: 1a:77:8a:09:26:ff:12:42:4c:ce:cc:08:fb:19:fe: 91:8a:3b:f7:53:b2:d9:a4:14:3f:ab:59:23:b4:11: fd:f5:d5:2c:97:86:af:5a:c3:8f:02:f4:8b:a4:5e: a2:53:cc:1a:65:42:a6:2a:3d:49:81:d4:42:c6:35: cd:26:cd:d9:2d:93:3a:f6:12:d4:51:26:f0:82:c2: 0c:9e:a7:f8:32:7d:42:1d:1d:8d:34:36:32:41:2b: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:39:5E:4B:1A:09:CD:1F:89:93:24:25:FA:86:08:C4:FA:8A:19:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:96:b8:ff:a2:09:d5:cf:37:07:11:d7:d8:96:c5:d3:39:0a: b1:9d:df:49:eb:c8:2c:da:02:85:93:cc:44:a9:42:89:0f:c5: 5f:c0:d4:2b:88:25:cf:61:d4:1f:0b:51:74:7d:f2:3d:3a:00: 94:9b:a7:19:e5:e4:5c:d7:e8:e2:f2:37:76:92:92:40:e6:22: 29:86:16:5c:98:d4:a9:38:1b:8c:04:7c:c3:f4:3f:c7:4e:ba: 7d:64:57:54:f5:ba:d6:cb:38:e1:73:0d:3d:bd:c9:0c:5d:ab: db:59:b4:0d:3c:42:56:63:91:dd:7f:7a:17:0f:0c:a2:68:ad: 7b:e8:53:be:b6:f5:26:7c:49:a7:3b:63:72:31:95:8e:c7:c0: 4d:46:84:77:37:86:58:d4:79:19:bf:8c:29:b3:8a:00:35:88: 8c:af:7d:2b:51:f6:99:9e:f8:8b:cc:aa:81:ad:83:7f:ef:fa: 0d:71:88:72:be:ca:02:6e:fc:e5:dd:90:4b:bf:9c:27:bc:d1: 56:e9:6b:b2:e6:a3:ff:26:e2:0d:5d:4b:e2:fe:1c:60:7e:df: c7:8b:0b:4d:5d:ae:58:f7:d8:53:a7:74:c1:24:bc:d2:55:5b: 36:39:93:2d:9d:16:0c:1a:a4:5b:ee:6d:71:82:65:5f:30:8e: d4:c1:0d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJakvJZ28L92VSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmZlOGIxYWEtYWFhZS00M2ZiLTg0MDgtOTU3ZmI4ZTljYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofDZoxigI687x1UQOiWLEi7kxY+58CxWwFIh fii3cCVzQ6tkgmv4SBWEhOAOXmrAAxZDh1+jrx5TLdit1Q5wV615twamkMVGOGzn kds8h14qAfvGJkWjrFfi5RbKxH89/Hrt6ZKK5e3tZmByf1Qxo+msydG2xawKOtxe 2ntaOhoae6ghRdrX0jONWWhLUwENVJeY5CMT3noGeM9ldgmRxB2kODYad4oJJv8S QkzOzAj7Gf6Rijv3U7LZpBQ/q1kjtBH99dUsl4avWsOPAvSLpF6iU8waZUKmKj1J gdRCxjXNJs3ZLZM69hLUUSbwgsIMnqf4Mn1CHR2NNDYyQSvppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs5XksaCc0fiZMkJfqGCMT6ihkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFhNDIzZmYtMzQ5MS0z MjdmLWI1YmEtMDQ4YWMzMjMxNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuWuP+iCdXPNwcR19iWxdM5CrGd30nryCzaAoWTzESpQokPxV/A1CuI Jc9h1B8LUXR98j06AJSbpxnl5FzX6OLyN3aSkkDmIimGFlyY1Kk4G4wEfMP0P8dO un1kV1T1utbLOOFzDT29yQxdq9tZtA08QlZjkd1/ehcPDKJorXvoU7629SZ8Sac7 Y3IxlY7HwE1GhHc3hljUeRm/jCmzigA1iIyvfStR9pme+IvMqoGtg3/v+g1xiHK+ ygJu/OXdkEu/nCe80Vbpa7Lmo/8m4g1dS+L+HGB+38eLC01drlj32FOndMEkvNJV WzY5ky2dFgwapFvubXGCZV8wjtTBDbs= -----END CERTIFICATE-----Generated at Sun Jun 14 05:25:00 2026 by rpki-client