$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/84a4a6f6-9f4b-397a-a064-06f849917dea.roa File: 84a4a6f6-9f4b-397a-a064-06f849917dea.roa (raw, json) Hash identifier: SGJ9v+7cy3u2RBwTHWJ3Xq6cIaxm9UysbXLG1K5U+Yk= Subject key identifier: CA:64:AC:DA:5F:15:22:78:63:31:65:C6:F8:FF:69:22:C0:CF:27:AB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B3556DF37A8730743323CAB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/84a4a6f6-9f4b-397a-a064-06f849917dea.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 19905 IP address blocks: 72.255.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:df:37:a8:73:07:43:32:3c:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=fe7b2bc3-3d29-4c85-acc9-8604d792f427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:fa:79:e0:93:a7:81:7f:db:a4:74:f9:aa: 0f:01:33:bb:5a:7d:38:f1:6f:2a:91:f0:fc:41:e8: e7:17:3a:5a:71:75:e6:26:65:22:f4:44:c0:08:61: e3:e3:c3:65:af:26:dd:4b:c8:f7:eb:ec:d0:ac:10: f7:5c:eb:1e:d1:97:c4:93:52:b0:45:59:42:c0:32: f1:4f:78:53:64:8a:3c:05:0e:fd:5c:a3:f3:c3:d2: 27:cf:90:a3:80:71:7d:4b:25:75:78:25:4e:64:ad: 8e:40:aa:df:f1:10:69:83:f0:f3:49:d3:0b:8b:4d: 9e:7c:96:30:44:d6:4d:ac:2b:b1:f2:0c:e6:ec:90: 4d:04:2f:a9:a5:37:3b:30:97:e6:dc:c4:6f:e4:23: 59:ff:b2:cd:41:b3:cb:27:19:41:df:df:d6:00:f6: 3a:c5:27:e2:b5:73:dc:08:de:d3:f9:d9:22:62:1f: af:57:cc:e7:1d:e4:28:e1:07:70:18:77:3e:c2:e9: d8:d5:31:a1:23:06:c8:60:2d:ec:11:e0:c0:13:56: 0e:e4:f0:fa:79:89:74:c5:dc:9c:3f:e0:ba:18:d4: ff:01:25:05:10:29:d3:8c:f9:16:4f:dc:4d:1b:ff: d4:83:d7:fa:2c:88:76:a1:3a:7d:8f:04:08:eb:72: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:64:AC:DA:5F:15:22:78:63:31:65:C6:F8:FF:69:22:C0:CF:27:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/84a4a6f6-9f4b-397a-a064-06f849917dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:31:da:ab:52:2c:38:a3:d4:7f:99:01:6e:92:c0:98:66:b8: 59:05:4c:82:90:9e:f1:a2:ab:b1:45:7d:da:92:69:8c:4f:a8: 40:5d:d7:f8:32:a8:8c:29:8a:4d:6d:27:d0:4c:f9:53:39:63: 13:3c:e5:97:8f:cc:0f:7c:9b:63:88:84:f7:d7:e1:3a:87:96: 23:42:c2:ea:04:f1:c6:0c:ae:73:09:e7:30:d8:a3:b1:d5:53: 05:3a:a9:d9:2a:6b:b7:91:55:2d:ba:07:90:42:ca:c9:21:a6: 05:28:97:35:97:58:57:fc:56:fb:7f:70:58:d5:90:31:bc:06: c9:4a:fc:be:70:d3:da:ea:2d:dd:4e:1f:e9:d0:4d:88:59:db: b9:7e:77:12:7d:0d:f4:ae:c7:ad:b1:48:8b:df:9f:63:61:f1: a3:72:9a:9f:26:f1:f2:d5:f1:3e:99:bb:a5:ef:91:b7:23:ad: 77:28:c8:a1:5e:04:ec:69:3c:84:fd:c2:a2:35:0a:a5:be:c8: e1:0f:b4:e7:a4:e1:ea:f3:20:e8:3e:4d:65:b9:ff:29:87:d1: ed:d7:1f:cd:54:25:04:e8:81:df:fe:56:3d:59:b9:29:9c:6e: 7f:22:45:88:de:5d:86:12:d1:75:e7:ce:6e:7e:d2:fe:89:5b: c2:aa:c4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vt83qHMHQzI8q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZmU3YjJiYzMtM2QyOS00Yzg1LWFjYzktODYwNGQ3OTJmNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cj6eeCTp4F/26R0+aoPATO7Wn048W8qkfD8 QejnFzpacXXmJmUi9ETACGHj48NlrybdS8j36+zQrBD3XOse0ZfEk1KwRVlCwDLx T3hTZIo8BQ79XKPzw9Inz5CjgHF9SyV1eCVOZK2OQKrf8RBpg/DzSdMLi02efJYw RNZNrCux8gzm7JBNBC+ppTc7MJfm3MRv5CNZ/7LNQbPLJxlB39/WAPY6xSfitXPc CN7T+dkiYh+vV8znHeQo4QdwGHc+wunY1TGhIwbIYC3sEeDAE1YO5PD6eYl0xdyc P+C6GNT/ASUFECnTjPkWT9xNG//Ug9f6LIh2oTp9jwQI63L2BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpkrNpfFSJ4YzFlxvj/aSLAzyerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODRhNGE2ZjYtOWY0Yi0z OTdhLWEwNjQtMDZmODQ5OTE3ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEx2qtSLDij1H+ZAW6SwJhmuFkFTIKQnvGiq7FFfdqSaYxPqEBd1/gy qIwpik1tJ9BM+VM5YxM85ZePzA98m2OIhPfX4TqHliNCwuoE8cYMrnMJ5zDYo7HV UwU6qdkqa7eRVS26B5BCyskhpgUolzWXWFf8Vvt/cFjVkDG8BslK/L5w09rqLd1O H+nQTYhZ27l+dxJ9DfSux62xSIvfn2Nh8aNymp8m8fLV8T6Zu6XvkbcjrXcoyKFe BOxpPIT9wqI1CqW+yOEPtOek4erzIOg+TWW5/ymH0e3XH81UJQTogd/+Vj1ZuSmc bn8iRYjeXYYS0XXnzm5+0v6JW8KqxNA= -----END CERTIFICATE-----Generated at Sat Oct 11 07:20:23 2025 by rpki-client