$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0016d969-34d8-3e26-b387-801ee709e280.roa File: 0016d969-34d8-3e26-b387-801ee709e280.roa (raw, json) Hash identifier: cZM6tiKBFTo0iPSjRCXbn24ObgFbRfDlNSPIs4fHWIM= Subject key identifier: A3:18:54:EB:64:10:6C:F0:92:26:A2:34:E0:CC:90:40:D5:61:32:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2D3F7415E5453A6F00BE8780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0016d969-34d8-3e26-b387-801ee709e280.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 213120 IP address blocks: 72.52.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:74:15:e5:45:3a:6f:00:be:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=a3bea405-7148-402a-8249-7c971122107f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:fe:8b:c3:4b:46:1a:7b:4b:c5:30:1e:d4: 63:5f:83:eb:5b:0c:cf:05:9c:f5:e1:1e:ab:d3:9c: 20:f1:0c:63:4a:28:e4:03:04:12:77:b1:ac:28:ba: 40:00:6f:ae:e1:99:15:19:66:c3:61:b9:41:5f:ac: 5e:22:cf:f7:c5:fa:6d:4c:d7:96:d9:12:84:71:7c: de:af:82:60:18:30:e0:cb:10:97:74:db:cd:86:a4: 99:c1:f8:be:7b:b5:ee:f6:09:bd:8b:29:0c:6b:65: cd:6a:0d:e9:c6:a5:e3:4b:2b:4f:a7:52:ca:b6:0a: 58:c1:47:5b:18:4d:05:96:56:b7:ed:db:85:28:0c: 33:1c:cd:15:eb:c4:66:23:61:7d:94:5f:10:5b:1d: 11:ac:ad:73:0d:77:ad:e0:58:ea:46:75:3b:df:43: f6:ca:d2:8b:55:a8:51:cb:5a:43:d5:7a:fe:24:c8: 99:6c:b5:f8:bd:8d:27:47:61:d9:5b:45:39:1b:8f: f2:b9:e6:6d:1f:fe:05:1d:97:de:26:db:06:36:ab: 44:1d:cd:4d:7e:99:27:6a:4b:a0:38:fb:39:08:62: ad:4c:ae:be:aa:8e:98:d7:59:80:fc:12:f7:17:02: 1b:a8:77:20:cb:8b:75:c5:ed:45:5e:0c:b1:5d:b8: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:54:EB:64:10:6C:F0:92:26:A2:34:E0:CC:90:40:D5:61:32:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0016d969-34d8-3e26-b387-801ee709e280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:54:36:64:00:5a:43:56:8e:d8:f1:1d:9c:64:6f:3e:95:33: d8:8e:04:7d:b6:18:93:3e:6f:b5:8b:fc:c4:51:b0:6c:51:20: b8:63:f8:43:29:ad:64:84:fd:cc:31:3c:4f:8e:dd:99:cd:a2: b9:ec:f7:82:d5:52:52:b1:87:04:01:41:e8:46:66:b2:36:c5: 5e:d4:be:25:36:dc:66:80:6f:00:85:05:f2:f3:0c:d4:12:9f: 99:24:df:60:8b:29:55:34:8f:1f:25:8b:69:a3:f7:ab:13:95: cb:e3:88:1f:8a:34:46:e2:59:06:d1:57:91:95:a0:89:7d:29: fb:0c:60:77:2c:1b:e8:fb:82:94:2b:d7:a0:0e:5c:e0:dc:39: c5:b9:bd:19:69:64:2a:47:24:f3:11:14:9c:fd:21:62:13:17: f1:e6:b1:df:10:53:3b:b5:5a:d7:1c:d2:ff:dd:19:09:9c:52: 37:b7:5c:d4:2f:1e:60:5a:08:e8:f0:e3:8a:4c:65:b9:3e:a6: 1f:c0:a8:91:46:e7:6f:09:3d:85:0a:d7:b4:84:8e:5b:5a:67: f9:5c:19:16:ed:c4:dd:32:2f:e5:ae:78:7e:19:d1:6b:bb:66: 69:a2:1c:1b:6a:2c:11:d1:c9:1d:40:aa:a6:41:ee:66:30:15: 60:2e:7d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3QV5UU6bwC+h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YTNiZWE0MDUtNzE0OC00MDJhLTgyNDktN2M5NzExMjIxMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SX+i8NLRhp7S8UwHtRjX4PrWwzPBZz14R6r 05wg8QxjSijkAwQSd7GsKLpAAG+u4ZkVGWbDYblBX6xeIs/3xfptTNeW2RKEcXze r4JgGDDgyxCXdNvNhqSZwfi+e7Xu9gm9iykMa2XNag3pxqXjSytPp1LKtgpYwUdb GE0Flla37duFKAwzHM0V68RmI2F9lF8QWx0RrK1zDXet4FjqRnU730P2ytKLVahR y1pD1Xr+JMiZbLX4vY0nR2HZW0U5G4/yueZtH/4FHZfeJtsGNqtEHc1Nfpknakug OPs5CGKtTK6+qo6Y11mA/BL3FwIbqHcgy4t1xe1FXgyxXbg08QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMYVOtkEGzwkiaiNODMkEDVYTIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDAxNmQ5NjktMzRkOC0z ZTI2LWIzODctODAxZWU3MDllMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFUNmQAWkNWjtjxHZxkbz6VM9iOBH22GJM+b7WL/MRRsGxRILhj+EMp rWSE/cwxPE+O3ZnNorns94LVUlKxhwQBQehGZrI2xV7UviU23GaAbwCFBfLzDNQS n5kk32CLKVU0jx8li2mj96sTlcvjiB+KNEbiWQbRV5GVoIl9KfsMYHcsG+j7gpQr 16AOXODcOcW5vRlpZCpHJPMRFJz9IWITF/Hmsd8QUzu1Wtcc0v/dGQmcUje3XNQv HmBaCOjw44pMZbk+ph/AqJFG528JPYUK17SEjltaZ/lcGRbtxN0yL+WueH4Z0Wu7 ZmmiHBtqLBHRyR1AqqZB7mYwFWAufVs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:59 2026 by rpki-client