$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/8b597857-9340-38a9-ab20-acd34a5b3e9b.roa File: 8b597857-9340-38a9-ab20-acd34a5b3e9b.roa (raw, json) Hash identifier: lQ6lQ5+QF0enFXW+LdHfCgEFPTG1gqrCv5MFV82Iqws= Subject key identifier: 66:6C:0A:41:E3:BA:51:4A:05:F8:A7:D6:BF:E7:E2:C3:89:2F:E8:0B Certificate issuer: /CN=52f53adc-637c-4f98-858f-551878f8a6bb Certificate serial: 010D0C9F4328584F49739E501A62739BE3107F24 Authority key identifier: 45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/8b597857-9340-38a9-ab20-acd34a5b3e9b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36103 IP address blocks: 64.72.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9e:50:1a:62:73:9b:e3:10:7f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f53adc-637c-4f98-858f-551878f8a6bb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0270f467-6b12-4679-8588-50a30a37b2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:38:8d:0c:da:4c:68:04:c8:39:c2:58:68: e3:0a:6e:8c:c5:47:2d:7b:60:11:1a:bf:5c:c0:9f: 02:3c:5f:99:a0:42:f9:a9:1f:5a:9e:1b:60:fe:a1: 65:9a:a8:c0:32:00:1f:dc:03:b4:c9:60:a7:4e:ea: ee:0d:ec:65:c7:91:96:e0:d4:52:2f:1e:14:c2:de: ab:69:08:77:ef:e8:cd:11:70:71:23:7f:14:a6:ee: 41:30:c6:e1:f4:ad:e8:c6:d7:f8:21:86:1e:1b:19: 60:64:97:03:b7:e2:3b:48:de:de:22:bb:23:b6:6a: 7e:63:54:1a:fc:1c:4a:1c:90:a5:24:b3:08:5f:79: 97:69:7e:ed:56:de:89:31:b9:e7:a8:6c:d2:c5:5d: 90:d6:aa:74:da:23:65:91:17:b9:ed:e1:4f:98:41: 68:71:4e:63:88:be:3a:49:59:88:f8:34:a5:aa:7e: 70:d7:6f:09:cc:08:94:5f:12:88:bd:1e:77:e7:57: eb:ab:a3:3d:4d:3f:22:31:ac:e1:4b:55:05:b1:be: ae:9a:1b:2b:54:d7:85:29:b4:3d:b9:2b:83:6d:7d: 8f:d4:36:81:d3:d3:9d:5b:d5:3b:84:0c:02:1c:73: 04:90:58:6f:c8:11:0b:3a:57:b1:62:41:6d:a6:5a: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6C:0A:41:E3:BA:51:4A:05:F8:A7:D6:BF:E7:E2:C3:89:2F:E8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/8b597857-9340-38a9-ab20-acd34a5b3e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.crl X509v3 Authority Key Identifier: keyid:45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer sbgp-ipAddrBlock: critical IPv4: 64.72.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:63:60:8f:b8:b5:e3:98:0d:96:9e:a4:54:c0:1a:2c:22:cd: ab:56:6d:ce:e4:55:60:54:55:eb:c3:c2:44:5b:74:7c:ee:eb: 6f:73:96:6f:71:0d:09:37:1f:0d:d5:1a:8c:14:e1:7f:4b:98: 7e:39:6e:f3:11:07:a6:b0:e9:ff:ae:85:38:24:0f:e0:69:05: e0:f4:cd:b0:93:9c:ea:c4:ed:93:76:30:25:0b:1a:bc:d7:78: 4a:84:24:0f:e6:a9:b1:09:c2:46:18:af:5a:45:7f:4b:93:9d: fc:ed:ec:66:1f:42:ab:30:0c:d2:cd:d7:67:0d:ab:39:8b:66: 62:57:0f:39:85:c3:6f:fd:0c:58:64:02:b4:e1:dc:02:9b:72: 33:96:c0:15:75:52:8a:16:1f:7f:da:b6:ad:6f:08:42:b8:59: 0a:d5:c6:80:1e:15:85:19:38:39:37:63:51:ec:68:a6:40:dc: 5d:14:15:cb:a1:7e:c4:c7:ba:de:59:db:21:db:e2:62:9f:da: ec:4f:45:59:fa:98:34:dc:55:16:5c:72:cd:78:ef:f7:68:8d: 52:3d:ff:6a:9c:8e:8c:c1:bb:d7:6c:76:59:c4:87:7c:16:a1: d6:d2:66:fe:4b:b3:94:2f:8c:1a:79:61:70:f2:3a:05:26:52: 94:59:34:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc55QGmJzm+MQfyQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmNTNhZGMtNjM3Yy00Zjk4LTg1OGYtNTUxODc4Zjhh NmJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDI3MGY0NjctNmIxMi00Njc5LTg1ODgtNTBhMzBhMzdiMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBI4jQzaTGgEyDnCWGjjCm6MxUcte2ARGr9c wJ8CPF+ZoEL5qR9anhtg/qFlmqjAMgAf3AO0yWCnTuruDexlx5GW4NRSLx4Uwt6r aQh37+jNEXBxI38Upu5BMMbh9K3oxtf4IYYeGxlgZJcDt+I7SN7eIrsjtmp+Y1Qa /BxKHJClJLMIX3mXaX7tVt6JMbnnqGzSxV2Q1qp02iNlkRe57eFPmEFocU5jiL46 SVmI+DSlqn5w128JzAiUXxKIvR5351frq6M9TT8iMazhS1UFsb6umhsrVNeFKbQ9 uSuDbX2P1DaB09OdW9U7hAwCHHMEkFhvyBELOlexYkFtplphcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZsCkHjulFKBfin1r/n4sOJL+gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MmY1 M2FkYy02MzdjLTRmOTgtODU4Zi01NTE4NzhmOGE2YmIvOGI1OTc4NTctOTM0MC0z OGE5LWFiMjAtYWNkMzRhNWIzZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTJmNTNhZGMtNjM3Yy00Zjk4LTg1 OGYtNTUxODc4ZjhhNmJiLzUyZjUzYWRjLTYzN2MtNGY5OC04NThmLTU1MTg3OGY4 YTZiYi5jcmwwHwYDVR0jBBgwFoAURUgYT0D4GaQXwGMAapz2t49LbZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MmY1M2FkYy02MzdjLTRmOTgtODU4Zi01NTE4 NzhmOGE2YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJjYI+4teOYDZaepFTAGiwizatWbc7kVWBUVevDwkRbdHzu629zlm9x DQk3Hw3VGowU4X9LmH45bvMRB6aw6f+uhTgkD+BpBeD0zbCTnOrE7ZN2MCULGrzX eEqEJA/mqbEJwkYYr1pFf0uTnfzt7GYfQqswDNLN12cNqzmLZmJXDzmFw2/9DFhk ArTh3AKbcjOWwBV1UooWH3/atq1vCEK4WQrVxoAeFYUZODk3Y1HsaKZA3F0UFcuh fsTHut5Z2yHb4mKf2uxPRVn6mDTcVRZccs147/dojVI9/2qcjozBu9dsdlnEh3wW odbSZv5Ls5QvjBp5YXDyOgUmUpRZNCE= -----END CERTIFICATE-----Generated at Sat Sep 26 09:22:49 2026 by rpki-client