$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbfcc425-8445-3bc6-8c15-29376feda2c6.roa File: cbfcc425-8445-3bc6-8c15-29376feda2c6.roa (raw, json) Hash identifier: ExXOuBRvD01d/L+E/dDhqcb1VzOUT1NuRGJ3dmmW1WA= Subject key identifier: CC:11:D0:B2:2E:60:DC:B2:2B:05:9F:67:3D:06:83:9A:BE:CE:68:22 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BDFCDA0EC6B0455BBC80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbfcc425-8445-3bc6-8c15-29376feda2c6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54288 IP address blocks: 72.52.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bd:fc:da:0e:c6:b0:45:5b:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b493938a-7d03-4e56-b14b-b00c1ba22cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:c8:87:d8:d2:78:3b:3c:d7:1f:ae:44:0d: 61:55:3c:21:0d:b9:36:61:b3:21:65:d5:eb:ba:68: de:f5:8c:a9:f5:02:ba:8d:87:ab:af:ec:9b:0c:8c: 1d:e0:b4:41:1d:d8:29:d1:d0:2c:b0:6a:a7:56:56: 23:b6:c0:44:49:0f:83:9c:58:83:39:27:fb:69:92: a3:34:8b:b9:98:55:01:8f:75:c2:dd:d4:13:d5:00: 59:3b:a7:18:65:4d:c5:20:80:df:20:af:1a:52:87: d7:9b:b7:89:df:6c:34:34:ec:54:e0:91:00:47:48: 9b:09:bb:9e:80:b3:79:5e:29:17:17:b9:d1:27:ee: 84:51:03:eb:7c:0a:6b:0b:1e:34:2e:a1:50:75:c6: f8:d6:6d:82:92:04:91:2e:c6:33:30:d4:73:2b:4f: 46:d7:16:a4:c1:82:5a:09:f2:18:16:bc:97:c0:d9: 07:ee:75:d6:4b:17:57:61:41:d4:f0:36:12:88:b1: bb:24:6f:97:11:d9:1f:4b:64:be:27:60:4d:d9:05: 7c:82:07:20:d0:c2:0b:19:8f:36:85:2f:bb:e9:73: af:a9:6f:57:f0:e4:71:a6:48:49:3d:8f:6d:97:1f: 9c:3e:8b:17:b2:de:d0:cc:e9:a2:75:47:87:8e:b7: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:11:D0:B2:2E:60:DC:B2:2B:05:9F:67:3D:06:83:9A:BE:CE:68:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbfcc425-8445-3bc6-8c15-29376feda2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:85:82:ec:41:76:cf:92:a6:11:cf:6b:bd:bd:6c:1b:51:13: 2d:0f:67:13:97:1a:65:26:53:92:ce:d4:9e:04:ad:93:c5:22: b9:92:4c:a5:d0:a6:64:70:c5:5d:92:15:fa:61:d4:ea:75:e2: 71:a8:ed:9b:72:8c:68:9b:85:69:d6:c0:0f:51:0f:f4:15:a2: 3b:68:49:f1:f1:f0:28:6b:d1:c1:57:ab:a2:d7:23:0b:e1:51: 98:4e:2e:3f:f4:2c:8e:17:6e:c3:1b:df:73:25:fc:2d:da:48: 97:ba:8b:9a:49:82:30:b4:43:54:d3:e9:d2:48:4d:f3:21:bb: d9:05:a5:93:7b:49:15:4a:84:69:18:ed:98:02:b6:04:48:89: ab:58:19:7f:e4:8b:bb:2b:83:31:69:f8:7e:e5:b7:72:77:68: 8a:7b:85:5e:cf:99:19:4f:8b:8d:62:ab:91:5b:c9:60:ed:7e: d0:16:3f:3d:28:c2:12:ed:c5:2f:17:a5:3e:ef:7a:83:e1:ae: 9e:06:75:b6:81:85:7e:5d:f3:c0:31:c0:45:be:c7:10:ce:3d: bd:1d:40:69:df:51:b4:81:dd:20:6d:2e:02:05:67:80:e6:bf: 8f:6a:8e:3d:9c:b3:5e:39:7c:4b:4a:85:a6:4e:25:40:e1:37: 50:4c:be:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17382g7GsEVbvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjQ5MzkzOGEtN2QwMy00ZTU2LWIxNGItYjAwYzFiYTIyY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvDIh9jSeDs81x+uRA1hVTwhDbk2YbMhZdXr umje9Yyp9QK6jYerr+ybDIwd4LRBHdgp0dAssGqnVlYjtsBESQ+DnFiDOSf7aZKj NIu5mFUBj3XC3dQT1QBZO6cYZU3FIIDfIK8aUofXm7eJ32w0NOxU4JEAR0ibCbue gLN5XikXF7nRJ+6EUQPrfAprCx40LqFQdcb41m2CkgSRLsYzMNRzK09G1xakwYJa CfIYFryXwNkH7nXWSxdXYUHU8DYSiLG7JG+XEdkfS2S+J2BN2QV8ggcg0MILGY82 hS+76XOvqW9X8ORxpkhJPY9tlx+cPosXst7QzOmidUeHjrcMGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwR0LIuYNyyKwWfZz0Gg5q+zmgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2JmY2M0MjUtODQ0NS0z YmM2LThjMTUtMjkzNzZmZWRhMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuFguxBds+SphHPa729bBtREy0PZxOXGmUmU5LO1J4ErZPFIrmSTKXQ pmRwxV2SFfph1Op14nGo7ZtyjGibhWnWwA9RD/QVojtoSfHx8Chr0cFXq6LXIwvh UZhOLj/0LI4XbsMb33Ml/C3aSJe6i5pJgjC0Q1TT6dJITfMhu9kFpZN7SRVKhGkY 7ZgCtgRIiatYGX/ki7srgzFp+H7lt3J3aIp7hV7PmRlPi41iq5FbyWDtftAWPz0o whLtxS8XpT7veoPhrp4GdbaBhX5d88AxwEW+xxDOPb0dQGnfUbSB3SBtLgIFZ4Dm v49qjj2cs145fEtKhaZOJUDhN1BMvqE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:04 2025 by rpki-client