$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84dcce94-0772-3833-8073-bf4fd356a4ad.roa File: 84dcce94-0772-3833-8073-bf4fd356a4ad.roa (raw, json) Hash identifier: nxKzzz/8oDgy3w8oWwGnAdZ5oHRoOJlNzccwclKhy+U= Subject key identifier: 8C:2D:83:32:6A:09:76:AD:75:AD:77:2C:28:A6:A7:12:7D:A8:46:74 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CA491B6D8A274DEF2649B4B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84dcce94-0772-3833-8073-bf4fd356a4ad.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 396097 IP address blocks: 72.52.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:b6:d8:a2:74:de:f2:64:9b:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=d315801b-770f-4903-a349-cc6e73fc3b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8f:0e:e3:90:d9:65:a6:f5:db:3d:a8:1d:97: dd:dd:c2:d2:71:8d:59:af:a1:fa:1a:6a:f9:ab:82: 90:29:48:c5:61:29:3c:b1:d5:17:0e:12:e7:58:0a: ee:9f:38:9f:72:b9:9a:f6:bd:03:8d:d6:d3:15:18: 47:1f:8e:89:3c:c7:cd:68:53:a6:bc:9d:95:8b:89: 0d:ad:34:c4:d4:4a:a3:42:15:f2:cd:31:bb:b5:19: 96:f5:b8:10:ba:98:5d:53:45:a0:cc:38:1e:88:d4: e5:e9:64:2f:b8:05:19:d2:1b:4d:82:b7:c4:d7:01: 85:df:93:a6:88:d5:b6:01:3b:02:64:48:7c:be:f5: fa:c5:bf:b8:a1:88:09:69:27:71:ad:a5:89:57:d6: 82:8c:b7:aa:d1:75:ad:72:f5:95:e7:7f:01:96:22: 6b:22:00:a2:94:92:ac:92:b1:54:ab:86:e3:13:a7: 7f:8d:9b:ba:60:c1:28:88:ac:ed:c4:f8:8d:ce:51: 13:50:d3:4e:f5:1f:99:8e:66:4d:3d:ee:46:9a:58: c1:e9:e8:f9:15:13:59:05:0e:73:e5:37:52:77:22: c1:be:f5:de:47:0a:ee:e6:3a:7e:62:8e:b6:32:12: 63:37:24:6d:3e:95:77:33:c4:06:1c:b0:80:91:dd: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2D:83:32:6A:09:76:AD:75:AD:77:2C:28:A6:A7:12:7D:A8:46:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84dcce94-0772-3833-8073-bf4fd356a4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d2:06:b9:70:f7:0e:7f:83:d0:24:08:72:94:1f:37:9a:59: 2f:9f:a0:5f:9f:48:b6:65:26:e3:1a:d0:62:a9:c1:57:4a:5d: 9d:5e:20:9f:c7:46:99:97:02:87:fe:18:56:12:28:9f:41:a2: fb:e5:cd:7d:aa:f7:55:7b:db:64:23:54:15:2c:8d:1c:0b:33: 3c:18:36:af:3d:19:59:96:e0:80:fd:1d:f3:11:dd:7d:47:bb: c3:3c:91:69:cb:fd:7b:3e:f5:d4:5a:99:04:e3:9e:c3:b2:de: 3f:21:0c:bb:1a:e1:ac:ab:41:7d:25:29:7e:66:84:70:9d:9e: 34:6d:e9:d1:4c:3f:95:23:06:a6:92:cd:ac:66:31:f7:94:28: 69:c4:b5:a3:3c:fe:a7:7a:a9:6f:0a:c1:99:23:10:98:3a:34: e6:6f:40:4d:68:9b:c8:33:87:09:93:d0:24:65:1e:3f:46:ab: 06:77:a5:5a:b4:11:4c:f3:f0:dd:61:f4:41:88:eb:08:b6:e3: 7b:99:8d:91:f5:b3:c6:ec:26:b3:a1:51:63:4a:dd:04:46:8b: 95:1e:8e:25:d9:d1:c1:02:67:d0:e5:cc:88:3c:8e:2d:2b:ac: 17:b4:bc:f1:3f:43:bb:40:36:c1:18:61:1f:75:dc:14:02:a1: 6f:73:b9:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEykkbbYonTe8mSbS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZDMxNTgwMWItNzcwZi00OTAzLWEzNDktY2M2ZTczZmMzYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg48O45DZZab12z2oHZfd3cLScY1Zr6H6Gmr5 q4KQKUjFYSk8sdUXDhLnWArunzifcrma9r0DjdbTFRhHH46JPMfNaFOmvJ2Vi4kN rTTE1EqjQhXyzTG7tRmW9bgQuphdU0WgzDgeiNTl6WQvuAUZ0htNgrfE1wGF35Om iNW2ATsCZEh8vvX6xb+4oYgJaSdxraWJV9aCjLeq0XWtcvWV538BliJrIgCilJKs krFUq4bjE6d/jZu6YMEoiKztxPiNzlETUNNO9R+ZjmZNPe5GmljB6ej5FRNZBQ5z 5TdSdyLBvvXeRwru5jp+Yo62MhJjNyRtPpV3M8QGHLCAkd3LKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwtgzJqCXatda13LCimpxJ9qEZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODRkY2NlOTQtMDc3Mi0z ODMzLTgwNzMtYmY0ZmQzNTZhNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjSBrlw9w5/g9AkCHKUHzeaWS+foF+fSLZlJuMa0GKpwVdKXZ1eIJ/H RpmXAof+GFYSKJ9BovvlzX2q91V722QjVBUsjRwLMzwYNq89GVmW4ID9HfMR3X1H u8M8kWnL/Xs+9dRamQTjnsOy3j8hDLsa4ayrQX0lKX5mhHCdnjRt6dFMP5UjBqaS zaxmMfeUKGnEtaM8/qd6qW8KwZkjEJg6NOZvQE1om8gzhwmT0CRlHj9GqwZ3pVq0 EUzz8N1h9EGI6wi243uZjZH1s8bsJrOhUWNK3QRGi5UejiXZ0cECZ9DlzIg8ji0r rBe0vPE/Q7tANsEYYR913BQCoW9zufc= -----END CERTIFICATE-----Generated at Sun Mar 1 20:49:04 2026 by rpki-client