$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84dcce94-0772-3833-8073-bf4fd356a4ad.roa File: 84dcce94-0772-3833-8073-bf4fd356a4ad.roa (raw, json) Hash identifier: EIsvb9OmJMvlsolvCP+l/DDE6qWctmxMyo7atLLwjB4= Subject key identifier: BD:DB:55:FB:7D:33:67:6C:09:E2:EA:CB:5E:63:07:B3:BF:37:1C:FF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D852FD8AB9F77E41E330ECC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84dcce94-0772-3833-8073-bf4fd356a4ad.roa Signing time: Thu 16 Apr 2026 01:00:23 +0000 ROA not before: Thu 16 Apr 2026 01:00:23 +0000 ROA not after: Wed 15 Jul 2026 01:00:23 +0000 asID: 396097 IP address blocks: 72.52.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:2f:d8:ab:9f:77:e4:1e:33:0e:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 16 01:00:23 2026 GMT Not After : Jul 15 01:00:23 2026 GMT Subject: CN=3704629c-69a6-4c5b-98f8-80bada50c89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:78:6d:e0:46:bb:82:3d:36:6f:c1:8b:ff: b7:9f:a7:ad:3c:d6:54:80:83:9a:c4:c5:cd:86:0c: 73:75:0b:16:12:98:9a:48:03:cc:7f:df:24:ce:58: 5c:09:ec:95:b1:ee:07:e4:ee:0f:03:5b:fa:e8:f2: 82:6a:fe:8f:cf:d1:ea:0c:12:5d:22:fa:9f:67:8e: 1a:75:03:6d:7a:0f:81:2b:72:8f:e3:e5:4b:c6:c1: 71:a1:e3:83:5f:cd:8a:04:59:81:25:9f:77:df:d1: 54:32:16:18:c1:66:4f:5f:9b:9b:b6:d0:46:77:1a: 0c:80:3c:98:42:1f:c0:97:a2:71:70:29:e2:40:8d: 16:f1:2e:70:d1:3a:94:54:1f:0e:10:95:6d:f2:3d: 57:f0:48:ac:0c:9d:07:59:c0:f0:83:11:e1:69:75: d7:eb:c0:22:26:78:18:0b:21:ca:32:be:3f:3a:9a: 23:cd:76:f5:23:c5:10:69:ac:02:c3:1e:a8:fb:d3: ec:e0:35:44:b4:0f:51:20:b5:70:31:f0:24:6c:10: 5a:96:22:cf:b7:c2:1e:65:37:11:1f:54:58:40:0f: a8:6a:4c:13:09:7e:60:aa:5b:1c:2a:6e:98:29:ed: 07:a0:5c:37:bf:31:57:d9:dd:5f:2d:3f:a3:fa:83: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DB:55:FB:7D:33:67:6C:09:E2:EA:CB:5E:63:07:B3:BF:37:1C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84dcce94-0772-3833-8073-bf4fd356a4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c3:e8:3a:b2:6a:13:a7:54:0c:b3:c8:7b:c9:b5:f5:6a:fe: dc:1b:75:8b:b0:c3:55:e5:20:2d:ac:3d:fc:d4:c9:c4:d6:61: eb:91:22:aa:6d:2c:57:57:b8:d9:b7:d9:94:78:13:65:6a:66: 42:68:5e:19:4d:7e:50:de:9a:ef:78:8f:e0:f7:62:05:7e:76: 67:0a:0d:8e:17:c1:34:51:e9:0a:73:7e:08:67:74:b2:76:38: f3:bb:48:4d:a7:7e:b1:6e:f1:8b:21:57:bd:e5:6b:75:87:01: 38:68:06:fa:cb:f4:28:69:a8:3e:07:f9:b8:d4:ba:ee:b1:68: ac:2c:a1:eb:8a:19:8f:37:cf:3c:42:70:f0:7a:79:0c:7b:33: ac:fe:b3:e6:3a:5e:84:db:0e:7e:45:87:d8:2b:1a:12:f1:2b: 23:73:82:62:9a:2d:52:2b:c0:2f:99:0e:4c:32:5c:df:98:e0: e6:e8:f0:24:6e:9e:0a:32:34:f0:b9:4d:5b:29:db:d7:a9:bf: 53:7e:bf:8f:9b:14:49:f5:13:dc:d0:42:0e:0e:13:a7:f8:1f: b4:5e:17:b3:d2:73:51:b1:9a:82:02:ee:c6:f7:6f:80:d7:dc: 5d:67:49:da:e6:f3:ca:90:d0:a4:b6:74:81:5c:7a:d2:db:95: fb:01:68:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2FL9irn3fkHjMOzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk MzcwNDYyOWMtNjlhNi00YzViLTk4ZjgtODBiYWRhNTBjODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulR4beBGu4I9Nm/Bi/+3n6etPNZUgIOaxMXN hgxzdQsWEpiaSAPMf98kzlhcCeyVse4H5O4PA1v66PKCav6Pz9HqDBJdIvqfZ44a dQNteg+BK3KP4+VLxsFxoeODX82KBFmBJZ9339FUMhYYwWZPX5ubttBGdxoMgDyY Qh/Al6JxcCniQI0W8S5w0TqUVB8OEJVt8j1X8EisDJ0HWcDwgxHhaXXX68AiJngY CyHKMr4/OpojzXb1I8UQaawCwx6o+9Ps4DVEtA9RILVwMfAkbBBaliLPt8IeZTcR H1RYQA+oakwTCX5gqlscKm6YKe0HoFw3vzFX2d1fLT+j+oMwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3bVft9M2dsCeLqy15jB7O/Nxz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODRkY2NlOTQtMDc3Mi0z ODMzLTgwNzMtYmY0ZmQzNTZhNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3D6DqyahOnVAyzyHvJtfVq/twbdYuww1XlIC2sPfzUycTWYeuRIqpt LFdXuNm32ZR4E2VqZkJoXhlNflDemu94j+D3YgV+dmcKDY4XwTRR6QpzfghndLJ2 OPO7SE2nfrFu8YshV73la3WHAThoBvrL9ChpqD4H+bjUuu6xaKwsoeuKGY83zzxC cPB6eQx7M6z+s+Y6XoTbDn5Fh9grGhLxKyNzgmKaLVIrwC+ZDkwyXN+Y4Obo8CRu ngoyNPC5TVsp29epv1N+v4+bFEn1E9zQQg4OE6f4H7ReF7PSc1GxmoIC7sb3b4DX 3F1nSdrm88qQ0KS2dIFcetLblfsBaPA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:14 2026 by rpki-client