$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa File: cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa (raw, json) Hash identifier: jH0BgRDWvGlTQITX8UnE7A6eYmoPqYyPoiZTMybCqDM= Subject key identifier: 5A:2F:F6:7B:63:5F:06:DF:98:24:55:C3:6C:69:3E:1C:92:A1:07:70 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C3C6FA7ABB97C8C452780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:3c:6f:a7:ab:b9:7c:8c:45:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=b17fa896-cf0e-4d53-b178-22fdd95838bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:55:7e:54:10:9c:dd:a0:a9:dc:d6:3a:81:ec: 44:f0:15:df:ca:3c:05:ea:a4:cb:4a:c7:b5:7d:02: 7d:e6:57:cb:a1:33:00:7b:8b:30:4e:f6:87:23:2b: e7:37:ab:7b:ab:d7:69:85:90:a1:3a:2d:27:f1:ce: 36:2c:31:9e:02:c1:c6:97:52:45:aa:17:f9:a9:88: 13:6e:cb:37:11:85:5c:1e:58:be:04:36:a8:73:0c: ae:95:26:eb:98:99:3e:2a:7d:bd:9c:72:b5:8c:d4: 6f:0f:b6:6c:4b:9c:cd:d2:a1:d6:a2:dd:c5:d4:0b: 98:81:f5:74:2e:c1:b2:e5:f1:5d:16:d6:bb:1b:0a: a6:69:f2:f5:d3:9f:26:0b:65:52:59:13:d0:f0:f5: 46:40:45:88:2f:3f:ec:ff:b0:c3:81:86:30:d7:54: b0:be:6d:a1:00:6c:3c:8c:80:65:2c:93:01:8b:fb: b2:d9:5a:c9:2b:c6:a6:2a:41:2b:b9:4f:53:5c:5d: 15:26:c7:e6:ef:e1:ba:19:aa:90:7f:c7:38:d9:70: f3:c0:56:c2:a4:f9:2a:87:7a:a6:d2:6e:56:4a:9b: 5b:9a:5e:a6:44:94:23:68:58:b3:ba:9a:67:62:ec: 45:aa:a8:b0:6c:87:ab:26:4e:69:da:57:b5:a1:c8: 19:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2F:F6:7B:63:5F:06:DF:98:24:55:C3:6C:69:3E:1C:92:A1:07:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:71:da:44:48:23:06:ad:a4:23:02:c8:fc:39:bd:85:0e:b7: a4:98:2b:d6:f5:20:23:95:57:3a:df:3c:cc:cb:c1:f1:a0:da: 3a:c8:48:4e:1c:ed:c0:63:ef:1c:f7:ea:0a:50:3d:70:e6:a5: 83:49:10:52:f1:f5:6b:66:95:93:27:d5:1c:da:8f:e5:8d:a4: 1d:d8:36:66:e2:ba:8c:22:64:bd:b9:0b:74:14:1d:03:03:02: f9:6a:67:df:29:9c:60:b1:ed:8d:b9:19:87:88:f0:41:2f:e4: bc:6a:d8:31:cc:ca:4d:c8:56:3e:13:53:0b:a1:c9:5e:c8:e5: a1:49:1d:da:c1:a3:63:87:a4:8a:f4:7f:dd:89:af:5e:b5:f8: b7:a1:42:b9:29:3b:99:f5:da:d8:0c:df:c2:86:0a:e8:3d:f1: 2e:2c:fa:9f:b1:2f:20:28:9b:f3:e2:16:1f:b1:5a:d6:cc:1c: e0:ca:34:a8:d0:9e:51:a8:1e:39:cc:a3:ad:dd:79:e6:7e:42: 63:d0:9e:8a:7b:76:bf:fb:44:48:ed:9c:02:bd:ca:59:a9:f9: b5:44:b5:a4:d5:a0:c6:21:5f:bc:eb:18:5c:61:81:12:ab:0a: 0e:92:cb:74:b5:77:cf:04:4b:60:45:a8:09:e1:e1:c2:fe:ed: 86:d6:b6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fDxvp6u5fIxFJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YjE3ZmE4OTYtY2YwZS00ZDUzLWIxNzgtMjJmZGQ5NTgzOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFV+VBCc3aCp3NY6gexE8BXfyjwF6qTLSse1 fQJ95lfLoTMAe4swTvaHIyvnN6t7q9dphZChOi0n8c42LDGeAsHGl1JFqhf5qYgT bss3EYVcHli+BDaocwyulSbrmJk+Kn29nHK1jNRvD7ZsS5zN0qHWot3F1AuYgfV0 LsGy5fFdFta7GwqmafL1058mC2VSWRPQ8PVGQEWILz/s/7DDgYYw11Swvm2hAGw8 jIBlLJMBi/uy2VrJK8amKkEruU9TXF0VJsfm7+G6GaqQf8c42XDzwFbCpPkqh3qm 0m5WSptbml6mRJQjaFizuppnYuxFqqiwbIerJk5p2le1ocgZmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFov9ntjXwbfmCRVw2xpPhySoQdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2Q3NTgwZmEtYWNhNy0z NzgyLWE0YzUtNDM4NWE2Y2Y0YmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBx2kRIIwatpCMCyPw5vYUOt6SYK9b1ICOVVzrfPMzLwfGg2jrISE4c 7cBj7xz36gpQPXDmpYNJEFLx9WtmlZMn1Rzaj+WNpB3YNmbiuowiZL25C3QUHQMD AvlqZ98pnGCx7Y25GYeI8EEv5Lxq2DHMyk3IVj4TUwuhyV7I5aFJHdrBo2OHpIr0 f92Jr161+LehQrkpO5n12tgM38KGCug98S4s+p+xLyAom/PiFh+xWtbMHODKNKjQ nlGoHjnMo63deeZ+QmPQnop7dr/7REjtnAK9ylmp+bVEtaTVoMYhX7zrGFxhgRKr Cg6Sy3S1d88ES2BFqAnh4cL+7YbWtjE= -----END CERTIFICATE-----Generated at Sun Mar 1 20:48:59 2026 by rpki-client