$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa File: baa423ff-3491-327f-b5ba-048ac3231549.roa (raw, json) Hash identifier: IXWRkSWkTlkj1ERA3L7RUgz8mM1Z71ZBuSXZQQoPeXU= Subject key identifier: 11:5C:5E:68:0B:0D:1C:31:61:D1:04:82:63:0A:6C:C7:14:35:68:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A549B12B84B995E17229B7C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 30036 IP address blocks: 72.255.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:12:b8:4b:99:5e:17:22:9b:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=c0885adb-752d-470c-8b79-7f08dc1788b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:9d:5c:f1:b1:8a:2d:ad:b7:7b:03:19:2d: 26:66:1a:5f:d2:72:9d:6c:e1:33:39:7a:61:69:59: 6a:72:eb:42:6f:20:e7:88:26:df:1b:98:0b:c5:58: 16:68:9a:9e:96:5a:8c:6a:97:42:39:a2:0d:e5:88: 91:69:b5:5c:38:e5:3b:b5:c0:db:47:7f:6c:4f:df: d3:09:f3:ab:dd:46:cf:82:1a:74:7c:ed:be:c8:32: e5:be:90:6b:2d:75:3a:b5:e7:47:d4:42:9f:a0:c3: 34:f6:f5:d5:6f:f6:f9:e4:de:84:ef:19:80:60:2b: dc:11:2d:6a:50:99:9d:35:ee:49:17:31:12:92:11: 0d:2d:b0:dc:a0:e4:3b:f7:ec:5c:1a:57:ec:3c:a8: 84:6b:99:60:29:9d:5d:05:45:2c:a0:28:3e:ca:c2: 6d:2e:fb:3d:49:23:b5:9f:4e:c5:52:9e:23:96:53: 62:83:48:3b:67:69:d1:a3:43:67:d2:57:2d:da:14: b6:ff:65:c0:bb:dd:47:ab:e7:38:9d:c8:fc:98:48: b3:fc:15:ac:64:43:f1:cb:90:ee:a9:95:f2:aa:a3: e1:76:3c:68:35:28:80:8f:fd:d9:1f:c5:ec:e2:cb: 2e:15:5e:9b:76:9b:a6:35:cf:91:71:39:ce:d4:e6: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5C:5E:68:0B:0D:1C:31:61:D1:04:82:63:0A:6C:C7:14:35:68:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/baa423ff-3491-327f-b5ba-048ac3231549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9d:a0:d9:da:6c:9e:a4:8b:81:ec:fb:e1:fd:ef:16:8e:60: 25:4b:46:b4:72:19:86:1a:2b:c5:fd:3d:97:e7:c6:b1:f8:00: 90:f1:28:5c:ad:7a:6f:e2:67:ad:59:1c:6e:bc:85:11:c3:91: 31:40:0a:67:ea:de:4d:e1:e9:47:2d:f7:65:19:0a:06:07:d1: 59:93:14:fb:8d:6d:ec:dc:e3:40:a3:ae:bd:58:c2:ea:d6:32: ac:b8:f3:56:32:97:d5:50:3c:f2:6a:39:2d:20:aa:b7:61:83: 85:30:f5:ee:b1:58:bd:1c:5f:2e:f6:af:f3:78:93:bb:2e:53: 40:83:5d:76:50:ee:7b:07:e5:3f:38:61:a8:4e:cf:0f:1b:ab: e4:ec:f9:4c:fa:28:28:44:0b:5f:2e:2d:5b:c6:ae:e5:0d:77: 9c:64:92:ea:c1:58:99:9f:57:39:c9:69:86:f9:50:54:8d:08: b0:4d:4f:76:82:20:8d:7c:93:71:5a:cf:87:0d:72:8d:f1:13: 74:e4:7e:e2:3e:89:34:17:f4:ad:dc:ff:63:58:c9:4e:e1:05: c1:7f:b6:2d:fc:d8:ab:47:56:55:c8:c2:1a:8f:6c:43:98:6c: aa:46:9a:29:e8:90:1c:90:51:f2:da:c0:54:a5:b6:c0:44:bc: 57:94:6e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxK4S5leFyKbfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk YzA4ODVhZGItNzUyZC00NzBjLThiNzktN2YwOGRjMTc4OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHedXPGxii2tt3sDGS0mZhpf0nKdbOEzOXph aVlqcutCbyDniCbfG5gLxVgWaJqellqMapdCOaIN5YiRabVcOOU7tcDbR39sT9/T CfOr3UbPghp0fO2+yDLlvpBrLXU6tedH1EKfoMM09vXVb/b55N6E7xmAYCvcES1q UJmdNe5JFzESkhENLbDcoOQ79+xcGlfsPKiEa5lgKZ1dBUUsoCg+ysJtLvs9SSO1 n07FUp4jllNig0g7Z2nRo0Nn0lct2hS2/2XAu91Hq+c4ncj8mEiz/BWsZEPxy5Du qZXyqqPhdjxoNSiAj/3ZH8Xs4ssuFV6bdpumNc+RcTnO1Oah1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFcXmgLDRwxYdEEgmMKbMcUNWhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFhNDIzZmYtMzQ5MS0z MjdmLWI1YmEtMDQ4YWMzMjMxNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABadoNnabJ6ki4Hs++H97xaOYCVLRrRyGYYaK8X9PZfnxrH4AJDxKFyt em/iZ61ZHG68hRHDkTFACmfq3k3h6Uct92UZCgYH0VmTFPuNbezc40Cjrr1YwurW Mqy481Yyl9VQPPJqOS0gqrdhg4Uw9e6xWL0cXy72r/N4k7suU0CDXXZQ7nsH5T84 YahOzw8bq+Ts+Uz6KChEC18uLVvGruUNd5xkkurBWJmfVznJaYb5UFSNCLBNT3aC II18k3Faz4cNco3xE3TkfuI+iTQX9K3c/2NYyU7hBcF/ti382KtHVlXIwhqPbEOY bKpGminokByQUfLawFSltsBEvFeUboI= -----END CERTIFICATE-----Generated at Wed Jul 2 20:59:35 2025 by rpki-client