$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac95c19c-3d49-329e-8e22-843bacdbbbb7.roa File: ac95c19c-3d49-329e-8e22-843bacdbbbb7.roa (raw, json) Hash identifier: 1ERpvZ3/a6mkuiba2+oGjdpJ4BPfRP/CFzrkSTxIN/c= Subject key identifier: 17:CB:EB:EE:76:50:66:F9:E8:12:9E:23:0C:66:5B:15:C6:5A:F6:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CA491B6C6B78049FB323E3040 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac95c19c-3d49-329e-8e22-843bacdbbbb7.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 54243 IP address blocks: 72.52.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:b6:c6:b7:80:49:fb:32:3e:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=d171da02-182a-46f2-b7b4-0c8122870c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:ac:ed:98:4a:df:b4:54:24:b2:0e:69:5e: a6:5e:62:e4:06:1b:4f:88:ae:e0:58:4b:70:5e:c3: 2b:54:33:19:10:46:33:28:71:36:d4:ca:a2:63:9e: 1d:70:75:60:64:8e:4f:1f:6b:0a:a0:34:0e:bf:83: 99:f2:9a:d0:2f:99:2c:12:ac:ac:7d:e3:04:a4:19: ea:53:d1:13:f4:bb:8d:67:76:a2:77:15:0d:04:c6: 45:93:58:38:c4:df:1b:0c:42:2e:e0:3c:7a:05:29: 88:ba:56:f7:b0:ba:43:b0:de:ea:df:e0:0c:68:65: 94:70:97:4b:59:44:fa:ca:0f:d8:08:64:ac:0f:6d: 32:51:bd:01:48:8d:cd:d3:e6:62:67:9c:4b:28:f2: aa:28:21:46:65:d8:13:4a:f0:66:f4:45:42:ea:de: 2a:f2:4a:2d:60:e2:4a:56:4a:51:4d:43:53:4f:fe: 49:aa:19:26:24:8a:65:45:50:78:41:e7:5d:6b:58: 2f:20:23:20:48:91:7d:31:17:e7:e3:63:fc:16:8a: 3e:94:7e:31:f8:ac:4a:51:4c:4c:03:5d:a1:b6:38: 4c:b1:17:ef:25:07:3a:5c:27:49:da:19:a6:8c:d2: ad:d8:79:e4:2f:33:2b:f4:fe:02:4f:5d:35:f9:6a: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CB:EB:EE:76:50:66:F9:E8:12:9E:23:0C:66:5B:15:C6:5A:F6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac95c19c-3d49-329e-8e22-843bacdbbbb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a5:93:9e:26:56:ea:8e:57:a0:21:38:0a:5a:cc:dc:0e:9f: cc:36:32:35:90:59:ec:00:0f:2a:25:19:81:18:e1:99:f6:5e: c3:1b:85:bc:b0:4d:21:fc:c7:16:1f:d7:7d:77:6a:e5:ea:4f: 19:68:c9:30:ed:d1:0c:86:0f:62:b9:8a:bd:e6:22:53:7e:87: 94:cf:54:9f:ef:83:ae:89:5c:b0:44:8c:81:8c:0e:b0:c7:cc: 9d:fe:92:17:a3:b0:bb:1f:38:26:91:1b:f6:f5:97:ea:6e:ec: 5d:1c:f4:2f:52:ca:4d:87:fa:c3:46:8c:1b:f2:b0:72:ad:f2: 00:1d:33:d0:54:30:6a:21:e8:c4:9d:ab:d3:1b:d2:96:0d:78: d7:16:6d:11:c0:f4:49:90:1a:9d:e8:9f:70:ac:35:fb:de:39: 43:8e:10:17:96:39:1e:da:7b:41:9f:1e:58:8c:b0:11:ec:62: 8c:09:43:50:e7:47:69:0d:35:ef:91:7b:51:a4:32:a6:cf:25: c4:e1:30:4f:ca:82:e7:ec:9b:e9:0b:0e:39:8c:3a:88:7e:c6: 1f:33:3e:3e:f3:46:e2:8e:e1:79:f2:c7:55:ad:d9:aa:ea:f1: fb:2f:42:65:70:b5:66:80:f7:00:e2:c7:dc:c5:58:52:c4:d6: f5:8e:5e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEykkbbGt4BJ+zI+MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZDE3MWRhMDItMTgyYS00NmYyLWI3YjQtMGM4MTIyODcwYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKis7ZhK37RUJLIOaV6mXmLkBhtPiK7gWEtw XsMrVDMZEEYzKHE21MqiY54dcHVgZI5PH2sKoDQOv4OZ8prQL5ksEqysfeMEpBnq U9ET9LuNZ3aidxUNBMZFk1g4xN8bDEIu4Dx6BSmIulb3sLpDsN7q3+AMaGWUcJdL WUT6yg/YCGSsD20yUb0BSI3N0+ZiZ5xLKPKqKCFGZdgTSvBm9EVC6t4q8kotYOJK VkpRTUNTT/5JqhkmJIplRVB4Qedda1gvICMgSJF9MRfn42P8Foo+lH4x+KxKUUxM A12htjhMsRfvJQc6XCdJ2hmmjNKt2HnkLzMr9P4CT101+WqL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfL6+52UGb56BKeIwxmWxXGWvYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWM5NWMxOWMtM2Q0OS0z MjllLThlMjItODQzYmFjZGJiYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALilk54mVuqOV6AhOApazNwOn8w2MjWQWewADyolGYEY4Zn2XsMbhbyw TSH8xxYf1313auXqTxloyTDt0QyGD2K5ir3mIlN+h5TPVJ/vg66JXLBEjIGMDrDH zJ3+khejsLsfOCaRG/b1l+pu7F0c9C9Syk2H+sNGjBvysHKt8gAdM9BUMGoh6MSd q9Mb0pYNeNcWbRHA9EmQGp3on3CsNfveOUOOEBeWOR7ae0GfHliMsBHsYowJQ1Dn R2kNNe+Re1GkMqbPJcThME/Kgufsm+kLDjmMOoh+xh8zPj7zRuKO4Xnyx1Wt2arq 8fsvQmVwtWaA9wDix9zFWFLE1vWOXjA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:26:29 2026 by rpki-client