$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f67f281c-80a5-332c-92a7-f440054718bd.roa File: f67f281c-80a5-332c-92a7-f440054718bd.roa (raw, json) Hash identifier: YUqug9Ll3eHcuerMRuh/KgMHlL1Mgb+CPZf6TSmhydk= Subject key identifier: 30:A6:3B:C5:33:84:E7:BC:6C:F2:2B:EE:69:86:A1:60:5E:BE:AE:95 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C7D7C7370BB75937C20DADA40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f67f281c-80a5-332c-92a7-f440054718bd.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 72.255.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:73:70:bb:75:93:7c:20:da:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=3425f96f-24cf-4b60-828b-d8d46298058f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9b:eb:d3:d2:c0:9d:39:d4:84:66:37:33:27: c9:57:90:f8:82:a5:47:8e:51:b4:fd:65:21:09:50: d5:b9:d7:3c:4d:90:95:0b:a7:58:da:80:95:67:f7: 86:9a:96:ce:82:22:4e:52:50:cf:2e:df:fe:0f:6d: 61:b0:ad:2f:b4:0c:bb:fe:70:b4:ee:20:9c:bd:9e: 31:0e:05:bf:f6:c5:85:96:87:0a:3d:06:2c:57:00: 98:7f:6f:23:a8:4c:5c:f2:86:77:49:c6:76:50:b1: 01:4c:ea:fd:43:63:20:96:89:e5:1d:b8:fc:8d:38: b4:40:fb:cc:00:75:48:39:b9:18:8d:f3:90:f7:f1: 54:e1:70:83:8a:d2:20:2f:a1:56:74:01:d4:60:0f: c0:b0:60:5a:83:da:a5:52:35:d2:4b:70:41:cd:06: 3f:c3:4e:f9:90:a1:a0:1c:a9:87:9f:9b:00:a7:30: e1:74:d0:fd:55:8f:c5:71:92:1e:a4:dd:4e:97:71: b0:13:70:0d:4e:82:dc:a6:03:3e:3f:0d:7e:1b:19: 39:9f:3d:74:37:94:4f:d9:d3:ef:ba:7b:b7:3c:9d: 27:c5:47:97:07:6a:c6:fc:5f:03:17:b7:85:8b:8e: 3c:53:aa:57:83:ef:2e:35:fd:30:5f:ab:04:a7:e5: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A6:3B:C5:33:84:E7:BC:6C:F2:2B:EE:69:86:A1:60:5E:BE:AE:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f67f281c-80a5-332c-92a7-f440054718bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e1:b8:d3:91:7f:2e:11:c0:41:97:44:a6:a3:2b:93:72:e3: f1:a2:30:31:21:52:98:fd:9d:24:99:bd:ab:f2:96:dd:1d:77: 32:35:6e:f9:1d:87:4c:03:ce:f0:34:32:a5:23:15:ca:36:0c: a7:39:e9:be:12:2a:38:dd:7c:cf:49:82:71:4e:bd:83:8c:23: a7:0c:56:30:6c:d5:43:64:c1:ea:bc:2e:e5:d1:4b:1e:a9:a1: b0:80:c3:ce:d5:d1:66:6f:5e:90:b4:c0:af:d1:81:f4:72:31: 93:92:5c:5a:8e:6e:67:f3:a7:bd:07:ca:fa:9c:cc:81:eb:ef: 80:77:5a:66:0f:75:5b:3b:ff:a7:a4:35:f3:34:b4:8b:2b:c5: 83:94:94:c7:9c:93:85:d9:11:2b:6a:15:83:25:ce:18:cc:c9: 36:1f:45:a2:a4:2d:2b:f1:f4:6f:55:e1:76:0b:ca:61:c8:a4: cf:2b:dc:0b:69:a1:96:2e:58:85:25:63:b2:59:c4:c0:68:5a: bf:42:a3:9c:7a:9c:79:a3:80:a2:78:5c:4b:6a:54:bf:ed:a3: 1f:8e:67:db:b8:f2:9d:13:d4:31:7e:8e:e4:dd:1f:43:12:14: 2f:41:0e:01:8c:0a:69:4e:4d:03:00:15:ae:e7:ce:7e:a6:c0: 20:1f:c2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fHNwu3WTfCDa2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MzQyNWY5NmYtMjRjZi00YjYwLTgyOGItZDhkNDYyOTgwNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5vr09LAnTnUhGY3MyfJV5D4gqVHjlG0/WUh CVDVudc8TZCVC6dY2oCVZ/eGmpbOgiJOUlDPLt/+D21hsK0vtAy7/nC07iCcvZ4x DgW/9sWFlocKPQYsVwCYf28jqExc8oZ3ScZ2ULEBTOr9Q2MglonlHbj8jTi0QPvM AHVIObkYjfOQ9/FU4XCDitIgL6FWdAHUYA/AsGBag9qlUjXSS3BBzQY/w075kKGg HKmHn5sApzDhdND9VY/FcZIepN1Ol3GwE3ANToLcpgM+Pw1+Gxk5nz10N5RP2dPv unu3PJ0nxUeXB2rG/F8DF7eFi448U6pXg+8uNf0wX6sEp+Ue+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCmO8UzhOe8bPIr7mmGoWBevq6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjY3ZjI4MWMtODBhNS0z MzJjLTkyYTctZjQ0MDA1NDcxOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3huNORfy4RwEGXRKajK5Ny4/GiMDEhUpj9nSSZvavylt0ddzI1bvkd h0wDzvA0MqUjFco2DKc56b4SKjjdfM9JgnFOvYOMI6cMVjBs1UNkweq8LuXRSx6p obCAw87V0WZvXpC0wK/RgfRyMZOSXFqObmfzp70HyvqczIHr74B3WmYPdVs7/6ek NfM0tIsrxYOUlMeck4XZEStqFYMlzhjMyTYfRaKkLSvx9G9V4XYLymHIpM8r3Atp oZYuWIUlY7JZxMBoWr9Co5x6nHmjgKJ4XEtqVL/tox+OZ9u48p0T1DF+juTdH0MS FC9BDgGMCmlOTQMAFa7nzn6mwCAfwoc= -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:45 2026 by rpki-client