$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa File: 900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa (raw, json) Hash identifier: f1D7ZGKIbIKX+r8KQGEeoeurd1zVa3wN5KQsQFlsc/4= Subject key identifier: 60:87:52:73:99:C9:7F:C1:D1:66:06:D2:0F:C1:64:24:CB:D2:69:1D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BE0D187F4DC061695200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54288 IP address blocks: 72.52.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:be:0d:18:7f:4d:c0:61:69:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0b88eb8e-a97c-43be-b2f4-8d8334ff1ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4f:e5:cf:79:5e:92:2c:6d:de:35:b2:67:c2: e6:d9:b1:0d:de:81:77:ed:a5:07:7b:46:af:b0:61: 20:25:83:c0:34:53:9c:89:4e:b9:cd:5a:ad:65:61: 99:3c:d3:7f:c5:54:1f:3b:ff:b2:f3:30:b7:82:80: 1e:78:e3:9b:2f:ab:ce:9f:fb:7e:ab:87:d7:48:a8: ba:18:8b:19:34:89:ac:97:c6:63:9f:e6:7e:58:a9: 4a:38:f5:37:60:e9:1f:06:29:b6:94:bc:67:b1:a0: b2:10:a3:20:ce:95:ca:13:ee:c4:7a:3b:d6:c7:6f: f2:d9:6b:ea:b6:97:c9:12:91:5a:94:f1:61:7b:53: ca:01:00:5d:82:86:50:06:de:f2:82:30:21:02:fa: 4b:b1:8c:54:07:ab:37:9c:ea:c1:e6:ef:1c:2d:ea: 10:e7:2f:f4:dc:a2:c5:b7:c0:7c:6f:d5:df:a0:33: f0:2c:8b:9a:c0:50:5a:ec:06:d5:5f:56:31:ed:c3: 1c:51:c7:68:e7:64:49:00:49:bf:7f:7d:6a:5a:0d: 51:4c:6e:83:77:09:06:73:5d:71:2e:3f:b9:5b:50: bc:4c:0f:a9:d4:8d:5d:94:b9:90:bc:de:81:d4:bb: 2f:7e:33:84:d2:89:e0:50:98:c8:f9:37:f8:36:07: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:87:52:73:99:C9:7F:C1:D1:66:06:D2:0F:C1:64:24:CB:D2:69:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d8:b5:4f:a6:ad:0a:78:06:6a:44:ce:fe:55:25:1d:49:db: 42:0d:79:b4:68:13:d9:09:4f:17:89:d5:06:32:8f:52:20:06: d7:78:11:61:00:dc:52:5b:25:46:e9:d9:ab:7f:35:89:d0:64: 65:81:ae:77:5d:52:31:6a:a8:33:ac:2d:e9:6c:25:c9:96:63: 86:a0:1b:fc:ca:6f:80:ce:7c:99:22:ce:64:80:6d:cd:ad:e7: c9:3b:a0:98:6c:f2:8e:43:ef:46:e1:16:91:72:1b:c0:f8:b5: b6:47:a5:c8:32:a5:d8:b7:48:49:40:55:17:2a:0d:4a:22:b4: 66:f2:77:9a:c8:9b:ce:75:12:60:fb:7f:2f:82:5c:82:08:f3: f3:26:5e:2f:ac:e6:b7:74:74:54:49:e2:17:44:cb:0e:fb:c7: 63:8d:33:24:f4:98:61:9d:6c:64:bf:80:df:03:0e:9b:3d:3d: 9a:44:e6:6b:1f:21:e1:03:db:c1:b4:8f:46:50:8e:87:86:58: a9:06:43:fe:52:04:07:4a:9d:a9:b8:1a:96:85:08:93:7b:81: 92:37:31:c9:0e:02:6a:8d:f0:e0:9c:18:bc:d0:95:bf:2f:6b: 1a:de:85:eb:04:41:15:e6:ad:51:cd:05:9c:91:e9:de:56:bb: f4:48:9c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ174NGH9NwGFpUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGI4OGViOGUtYTk3Yy00M2JlLWIyZjQtOGQ4MzM0ZmYxY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE/lz3lekixt3jWyZ8Lm2bEN3oF37aUHe0av sGEgJYPANFOciU65zVqtZWGZPNN/xVQfO/+y8zC3goAeeOObL6vOn/t+q4fXSKi6 GIsZNImsl8Zjn+Z+WKlKOPU3YOkfBim2lLxnsaCyEKMgzpXKE+7EejvWx2/y2Wvq tpfJEpFalPFhe1PKAQBdgoZQBt7ygjAhAvpLsYxUB6s3nOrB5u8cLeoQ5y/03KLF t8B8b9XfoDPwLIuawFBa7AbVX1Yx7cMcUcdo52RJAEm/f31qWg1RTG6DdwkGc11x Lj+5W1C8TA+p1I1dlLmQvN6B1LsvfjOE0ongUJjI+Tf4NgdLlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCHUnOZyX/B0WYG0g/BZCTL0mkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTAwZjliOWUtODZhZC0z MDI4LTg3YzgtOGE2NWQ1ZDNkMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3YtU+mrQp4BmpEzv5VJR1J20INebRoE9kJTxeJ1QYyj1IgBtd4EWEA 3FJbJUbp2at/NYnQZGWBrnddUjFqqDOsLelsJcmWY4agG/zKb4DOfJkizmSAbc2t 58k7oJhs8o5D70bhFpFyG8D4tbZHpcgypdi3SElAVRcqDUoitGbyd5rIm851EmD7 fy+CXIII8/MmXi+s5rd0dFRJ4hdEyw77x2ONMyT0mGGdbGS/gN8DDps9PZpE5msf IeED28G0j0ZQjoeGWKkGQ/5SBAdKnam4GpaFCJN7gZI3MckOAmqN8OCcGLzQlb8v axrehesEQRXmrVHNBZyR6d5Wu/RInPw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:51 2025 by rpki-client