$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa File: 900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa (raw, json) Hash identifier: oBxc8EK017AS+faHF5wi8mGel6YCXARKSXGB40nTQAA= Subject key identifier: 0B:35:B7:FC:B7:5F:7C:1A:E9:B3:FE:90:0E:75:04:BD:1B:BD:0E:68 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDC48396273B1B3B5C520 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 54288 IP address blocks: 72.52.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:dc:48:39:62:73:b1:b3:b5:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=fbd04159-1b34-4df8-9455-6cbdf22edf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:5c:3c:49:9f:a6:77:f7:11:77:0f:c8:91: dc:33:6c:95:2c:80:f4:98:e9:84:19:98:1c:d9:38: a7:5a:fc:2a:5c:f4:2c:2b:67:9d:7a:b6:0c:49:49: 18:46:06:3f:40:57:ec:37:03:9f:79:46:0c:d0:43: 81:f2:54:fc:77:31:8c:e4:d9:4c:04:3b:50:4d:f3: ed:65:2b:29:d7:83:1c:ed:f8:2d:1d:7b:18:6b:09: fe:1a:53:a9:8f:65:3e:00:7a:3b:70:aa:ff:c1:ee: 24:8f:66:af:c6:c8:f8:51:c9:97:54:a8:17:e3:35: 09:f4:18:9e:5b:a5:20:eb:dc:5a:46:98:f9:9d:df: 95:04:44:6d:f2:21:47:b6:47:07:d4:c1:17:71:62: 52:e7:61:a4:eb:06:2f:47:5e:1c:34:c1:e1:4e:54: 5d:d2:54:ac:c6:fb:ca:63:09:7b:0f:c1:cd:32:d3: 3c:ae:89:7c:01:f1:46:46:1b:9d:ff:44:64:86:e1: 56:64:2c:c7:b3:25:c8:44:81:b2:1d:8c:5d:be:cd: ab:3f:a5:71:aa:65:a4:46:e6:20:7a:18:87:eb:49: d7:82:df:bd:20:63:5d:63:f1:37:e2:6e:09:2e:23: ef:09:56:62:03:a6:a9:8d:c8:30:19:73:ef:13:1d: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:35:B7:FC:B7:5F:7C:1A:E9:B3:FE:90:0E:75:04:BD:1B:BD:0E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/900f9b9e-86ad-3028-87c8-8a65d5d3d0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:3c:2d:2c:07:0d:41:ea:98:42:08:d8:67:bb:d5:39:a9:bc: 99:c6:cd:0e:10:c9:be:3c:fe:31:51:f9:d2:97:f1:2b:c9:b9: a1:ac:47:ee:82:d2:fa:8d:6a:bd:fe:e8:b5:a4:8f:41:26:41: 05:11:bc:ba:d3:a9:c0:81:fc:08:99:18:65:36:ea:fc:2f:12: 13:30:c4:17:1f:67:6c:cc:68:2f:67:ca:39:02:db:6c:15:11: 77:9d:05:a8:1a:8f:3a:28:4c:bf:d5:aa:8d:a4:86:65:af:78: 15:20:dd:21:22:54:4d:dc:1d:aa:29:9f:b1:42:d0:16:fb:4e: 73:2e:03:78:e8:d4:90:2b:56:06:71:dc:c5:3b:12:91:37:61: d0:cd:f9:8f:fe:92:ed:f6:6d:7e:f1:53:b2:31:9c:a5:43:e1: 49:54:be:d6:a1:df:c5:59:f0:c2:fe:d2:63:22:c1:e8:82:d9: cf:e5:d6:93:13:5a:bd:1e:0c:69:a7:b9:df:c9:6d:9d:50:33: 4d:04:71:89:30:f7:a9:65:28:5d:42:e3:fa:e1:33:6a:44:ad: 75:1f:f3:09:7b:af:8a:bf:41:9d:c6:e4:d3:5c:46:b0:d0:77: 03:03:c0:90:8a:1d:f7:c7:e2:87:f7:fe:67:c7:d4:5b:63:51: e5:71:3d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdxIOWJzsbO1xSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmJkMDQxNTktMWIzNC00ZGY4LTk0NTUtNmNiZGYyMmVkZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzxcPEmfpnf3EXcPyJHcM2yVLID0mOmEGZgc 2TinWvwqXPQsK2ederYMSUkYRgY/QFfsNwOfeUYM0EOB8lT8dzGM5NlMBDtQTfPt ZSsp14Mc7fgtHXsYawn+GlOpj2U+AHo7cKr/we4kj2avxsj4UcmXVKgX4zUJ9Bie W6Ug69xaRpj5nd+VBERt8iFHtkcH1MEXcWJS52Gk6wYvR14cNMHhTlRd0lSsxvvK Ywl7D8HNMtM8rol8AfFGRhud/0RkhuFWZCzHsyXIRIGyHYxdvs2rP6VxqmWkRuYg ehiH60nXgt+9IGNdY/E34m4JLiPvCVZiA6apjcgwGXPvEx0lnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs1t/y3X3wa6bP+kA51BL0bvQ5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTAwZjliOWUtODZhZC0z MDI4LTg3YzgtOGE2NWQ1ZDNkMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALE8LSwHDUHqmEII2Ge71TmpvJnGzQ4Qyb48/jFR+dKX8SvJuaGsR+6C 0vqNar3+6LWkj0EmQQURvLrTqcCB/AiZGGU26vwvEhMwxBcfZ2zMaC9nyjkC22wV EXedBagajzooTL/Vqo2khmWveBUg3SEiVE3cHaopn7FC0Bb7TnMuA3jo1JArVgZx 3MU7EpE3YdDN+Y/+ku32bX7xU7IxnKVD4UlUvtah38VZ8ML+0mMiweiC2c/l1pMT Wr0eDGmnud/JbZ1QM00EcYkw96llKF1C4/rhM2pErXUf8wl7r4q/QZ3G5NNcRrDQ dwMDwJCKHffH4of3/mfH1FtjUeVxPVQ= -----END CERTIFICATE-----Generated at Mon Nov 2 04:05:38 2026 by rpki-client