$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa File: 2aa07d97-8874-3082-bd20-3dc2c28806cc.roa (raw, json) Hash identifier: sPmSQKwoyE56OGe+FkKvuQEeRX7kWjj8mPGxp/z5eMQ= Subject key identifier: E4:D4:BA:89:F8:33:6B:A6:D0:1F:40:06:B8:75:C0:CE:E6:9A:9F:FA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F549D4F9F84FF92F467386A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 72.255.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4f:9f:84:ff:92:f4:67:38:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=7f059fdc-f94c-4c08-b509-8c40fd7c0302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:94:5c:6d:3c:13:55:14:a0:8f:ab:3a:ab: 6d:36:fb:e4:ac:19:de:bd:f5:79:4d:6e:87:5a:5d: dc:7f:a9:bd:03:01:00:4c:bc:9d:f0:23:d5:b1:60: e3:8f:e1:0b:e1:da:84:05:9e:f8:5f:78:f2:81:a5: 67:d5:b2:49:fb:80:05:6f:af:53:70:60:7b:18:e5: fd:a7:9b:4b:24:d8:6a:9d:9a:62:58:8e:d5:2e:a1: e6:00:22:f8:b6:84:85:70:47:76:5f:30:4f:07:2b: 33:54:1d:a7:09:e9:6a:09:9b:0b:00:98:14:d9:ef: 95:4b:eb:af:16:2b:b4:5f:81:86:ba:ff:a6:1d:1e: 6a:01:66:5d:83:6a:72:2d:e8:ae:dd:11:79:d4:dd: e7:66:f0:fe:ff:18:56:c0:ff:4a:50:73:da:0e:77: 2b:54:2e:83:bf:f1:59:64:0d:e1:9a:89:f5:c8:31: fa:3e:55:82:1b:5c:be:8a:8d:ca:15:7c:56:9b:9f: b5:a0:5e:45:fa:4c:49:ec:a6:70:5b:7d:80:88:f1: f5:1a:c9:ca:28:43:34:ce:85:ee:90:26:b4:10:c3: 54:23:c1:20:41:03:83:89:a5:5f:6b:93:8c:62:22: cb:f3:99:f7:ed:ca:11:55:26:f6:34:a6:29:66:bc: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D4:BA:89:F8:33:6B:A6:D0:1F:40:06:B8:75:C0:CE:E6:9A:9F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a9:30:95:42:d2:14:8e:9a:cd:0e:55:d1:a6:ef:3a:98:ba: 27:1f:24:5c:60:ff:8b:45:22:77:5f:d7:a7:0e:23:0c:17:42: 38:7f:da:0f:6f:31:69:bc:53:4e:69:4a:57:bb:eb:b5:53:75: 2c:be:d3:75:e9:67:43:ae:37:cc:ca:a4:d2:8b:1f:08:a6:8c: 3b:43:07:0c:c9:c2:96:bc:a0:73:2a:8b:53:51:a9:db:5c:96: 6d:4a:03:92:42:a4:5b:dc:fe:90:2b:e1:48:cc:ec:69:23:94: d5:f9:c6:eb:26:a4:ed:e6:30:50:cd:bf:ea:6f:14:9b:2f:3b: de:c2:71:d5:72:aa:df:48:7b:27:7d:7b:3a:57:2c:04:3f:3a: e6:07:dd:6f:2d:d3:1a:73:48:07:73:f8:5a:78:88:63:68:3e: b8:81:16:bd:8c:f1:be:88:0a:c9:36:ed:19:9c:07:8e:4d:d8: 2b:d5:b6:04:8e:62:ca:5e:0a:6c:73:9e:be:18:cd:0e:95:23: 81:6b:9d:eb:45:23:9c:c7:34:82:29:2f:15:da:05:66:d4:99: 80:7d:fb:b6:72:b7:7e:5f:b8:2f:65:20:5f:61:69:b9:bd:78: e4:5b:02:06:59:e8:0a:38:d5:39:17:01:a0:7b:ef:56:fb:83: 18:3c:6a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnU+fhP+S9Gc4agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk N2YwNTlmZGMtZjk0Yy00YzA4LWI1MDktOGM0MGZkN2MwMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp82UXG08E1UUoI+rOqttNvvkrBnevfV5TW6H Wl3cf6m9AwEATLyd8CPVsWDjj+EL4dqEBZ74X3jygaVn1bJJ+4AFb69TcGB7GOX9 p5tLJNhqnZpiWI7VLqHmACL4toSFcEd2XzBPByszVB2nCelqCZsLAJgU2e+VS+uv Fiu0X4GGuv+mHR5qAWZdg2pyLeiu3RF51N3nZvD+/xhWwP9KUHPaDncrVC6Dv/FZ ZA3hmon1yDH6PlWCG1y+io3KFXxWm5+1oF5F+kxJ7KZwW32AiPH1GsnKKEM0zoXu kCa0EMNUI8EgQQODiaVfa5OMYiLL85n37coRVSb2NKYpZryW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTUuon4M2um0B9ABrh1wM7mmp/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmFhMDdkOTctODg3NC0z MDgyLWJkMjAtM2RjMmMyODgwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFipMJVC0hSOms0OVdGm7zqYuicfJFxg/4tFIndf16cOIwwXQjh/2g9v MWm8U05pSle767VTdSy+03XpZ0OuN8zKpNKLHwimjDtDBwzJwpa8oHMqi1NRqdtc lm1KA5JCpFvc/pAr4UjM7GkjlNX5xusmpO3mMFDNv+pvFJsvO97CcdVyqt9Ieyd9 ezpXLAQ/OuYH3W8t0xpzSAdz+Fp4iGNoPriBFr2M8b6ICsk27RmcB45N2CvVtgSO YspeCmxznr4YzQ6VI4FrnetFI5zHNIIpLxXaBWbUmYB9+7Zyt35fuC9lIF9habm9 eORbAgZZ6Ao41TkXAaB771b7gxg8avM= -----END CERTIFICATE-----Generated at Sun Oct 11 06:23:28 2026 by rpki-client