$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fed377e9-bd90-3fae-b492-d454f9c9f590.roa File: fed377e9-bd90-3fae-b492-d454f9c9f590.roa (raw, json) Hash identifier: yQxbKYMmYfQvDW9CYbQlRrA70+NwiJePeFvw8Yems2o= Subject key identifier: 7A:F2:9E:E7:D4:C3:D9:A8:6D:E7:EF:58:70:E6:C4:06:BA:75:F4:97 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99E6300E255500EE7F22D500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fed377e9-bd90-3fae-b492-d454f9c9f590.roa Signing time: Wed 22 Oct 2025 01:30:11 +0000 ROA not before: Wed 22 Oct 2025 01:30:11 +0000 ROA not after: Tue 20 Jan 2026 02:30:11 +0000 asID: 63219 IP address blocks: 72.52.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:e6:30:0e:25:55:00:ee:7f:22:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:30:11 2025 GMT Not After : Jan 20 02:30:11 2026 GMT Subject: CN=fa9cdab4-b26e-4b65-9958-b2e81f587a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:34:c1:e0:8c:37:1a:11:f5:4c:2d:c8:3f: 4f:8e:a3:3f:d2:5f:03:c7:d8:e9:a0:ec:4c:b1:cb: 95:64:0d:51:bc:4c:bf:67:25:06:d9:02:54:f2:f0: 1e:41:e6:73:75:87:29:e0:ef:d3:bd:70:09:bc:26: 62:f8:c8:fd:07:46:bf:d7:36:b5:75:c6:7c:36:47: 06:ed:04:6f:55:27:fc:1d:5a:01:f8:28:b0:83:ab: ca:bb:e7:d6:87:8b:40:f8:26:ed:05:82:7b:dd:7f: ad:3b:3f:53:38:b7:bd:0d:d2:e3:77:35:28:ad:a0: 03:a6:cd:56:cc:e4:36:46:11:d0:78:a5:60:28:f1: 03:1c:92:bf:8f:75:6f:8c:02:30:b3:a0:7b:90:0e: d9:d5:0b:50:c3:e9:22:85:3d:a8:4c:1d:73:0c:e4: ae:2c:cb:6b:a2:00:49:50:65:8b:43:b7:c9:4e:68: 9d:cd:45:68:7f:ea:0a:66:bf:e5:f4:99:9c:35:1c: 35:e9:f9:be:2f:0c:81:f9:cd:52:b6:65:cd:ba:41: 9c:9d:fe:7b:ee:5e:39:62:6e:07:ed:c9:d1:0f:75: b7:63:66:31:2d:61:54:48:33:67:f5:2a:52:2c:27: 5c:aa:fa:76:d2:10:a9:11:54:2a:97:d7:ee:66:e5: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F2:9E:E7:D4:C3:D9:A8:6D:E7:EF:58:70:E6:C4:06:BA:75:F4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fed377e9-bd90-3fae-b492-d454f9c9f590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:06:a7:b4:85:52:f0:cb:ed:80:07:7c:c6:9f:73:37:6f:e5: aa:24:59:c0:6c:6b:91:92:0e:8a:68:4c:de:6e:27:d2:a7:5f: 09:9c:79:29:73:db:6d:e5:80:92:ae:95:a0:6a:4b:af:28:1f: 89:cd:79:a0:a6:d9:ee:52:09:45:2d:09:22:4d:e7:bf:a1:b4: 65:b7:e2:8e:5f:7a:74:39:9b:c6:bb:c3:a5:7f:53:c0:e6:3b: a1:8a:1d:66:35:00:e0:fe:c4:e6:67:37:e6:d9:3e:06:9f:8b: 3b:5d:78:91:57:50:eb:43:02:0e:f1:2c:7b:a4:0a:2d:8f:d0: c9:38:f8:08:b5:69:0c:54:ab:a8:00:07:9a:b4:12:09:a3:e2: c1:3d:7c:16:91:7f:49:43:93:b1:3b:2e:bf:86:d7:3b:9d:c2: 10:3f:c1:34:b9:09:bb:85:2c:b7:60:8d:a5:e8:34:57:ec:c7: 08:a5:62:f4:96:d1:8e:4b:03:42:47:88:cb:f4:31:46:bf:65: a5:f6:55:17:e3:d9:c0:4a:01:8c:3b:b3:e9:8a:bc:08:5e:bf: c4:8b:44:bf:f1:a4:75:fa:dc:a0:2a:c9:4b:24:10:73:b8:c8: 8d:3b:01:3c:b5:25:e9:a3:b5:c8:b5:74:c4:97:c9:ec:a4:e2: 44:a3:3a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ5jAOJVUA7n8i1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMzAxMVoXDTI2MDEyMDAyMzAxMVowLzEtMCsGA1UEAxMk ZmE5Y2RhYjQtYjI2ZS00YjY1LTk5NTgtYjJlODFmNTg3YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT40weCMNxoR9UwtyD9PjqM/0l8Dx9jpoOxM scuVZA1RvEy/ZyUG2QJU8vAeQeZzdYcp4O/TvXAJvCZi+Mj9B0a/1za1dcZ8NkcG 7QRvVSf8HVoB+Ciwg6vKu+fWh4tA+CbtBYJ73X+tOz9TOLe9DdLjdzUoraADps1W zOQ2RhHQeKVgKPEDHJK/j3VvjAIws6B7kA7Z1QtQw+kihT2oTB1zDOSuLMtrogBJ UGWLQ7fJTmidzUVof+oKZr/l9JmcNRw16fm+LwyB+c1StmXNukGcnf577l45Ym4H 7cnRD3W3Y2YxLWFUSDNn9SpSLCdcqvp20hCpEVQql9fuZuWKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrynufUw9mobefvWHDmxAa6dfSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmVkMzc3ZTktYmQ5MC0z ZmFlLWI0OTItZDQ1NGY5YzlmNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSDRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEGp7SFUvDL7YAHfMafczdv5aokWcBsa5GSDopoTN5uJ9KnXwmceSlz 223lgJKulaBqS68oH4nNeaCm2e5SCUUtCSJN57+htGW34o5fenQ5m8a7w6V/U8Dm O6GKHWY1AOD+xOZnN+bZPgafiztdeJFXUOtDAg7xLHukCi2P0Mk4+Ai1aQxUq6gA B5q0Egmj4sE9fBaRf0lDk7E7Lr+G1zudwhA/wTS5CbuFLLdgjaXoNFfsxwilYvSW 0Y5LA0JHiMv0MUa/ZaX2VRfj2cBKAYw7s+mKvAhev8SLRL/xpHX63KAqyUskEHO4 yI07ATy1Jemjtci1dMSXyeyk4kSjOvQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:16 2025 by rpki-client