$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08246ed5-51fc-3131-8a08-91a35e9b0a86.roa File: 08246ed5-51fc-3131-8a08-91a35e9b0a86.roa (raw, json) Hash identifier: W/dj9Lj09lBL7rvHf0NGn57whdwIOCDcCpKgaQ/1ag4= Subject key identifier: 7D:53:33:03:AA:4F:8E:4A:93:59:47:64:89:85:F3:08:06:B2:C5:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D468687BD30810626169AD780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08246ed5-51fc-3131-8a08-91a35e9b0a86.roa Signing time: Tue 24 Mar 2026 14:19:13 +0000 ROA not before: Tue 24 Mar 2026 14:19:13 +0000 ROA not after: Mon 22 Jun 2026 14:19:13 +0000 asID: 32787 IP address blocks: 72.52.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:86:87:bd:30:81:06:26:16:9a:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 24 14:19:13 2026 GMT Not After : Jun 22 14:19:13 2026 GMT Subject: CN=56697669-d960-4ec7-ad76-559422ce0170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d9:69:f7:50:ec:25:b6:bb:79:96:ef:c3:ae: ab:58:12:26:6e:0b:74:35:8e:75:9e:b9:df:8f:4e: 26:2b:82:5e:62:a3:e7:b3:32:b1:d9:d4:28:1f:24: 3a:e2:9c:ad:be:06:8b:93:43:b5:90:a3:51:32:ff: 1b:50:4c:b5:66:d5:b8:46:d8:78:9a:77:16:dd:52: 20:06:a2:5f:11:70:c1:75:cc:87:29:03:ce:d3:e3: ee:64:31:df:76:53:f6:4b:5c:be:9a:87:de:b9:7e: 0b:88:75:f5:74:55:d3:2d:c8:8a:21:ee:6c:55:51: 59:1c:5c:a8:f2:a4:cf:8f:70:f1:f6:f9:0f:d7:b5: 82:ca:a1:ea:26:d1:3d:11:86:69:8d:e4:ef:6c:01: 89:27:35:ac:1f:cc:da:38:c0:50:46:51:71:aa:f9: 18:f5:fa:fa:d6:f4:f6:ed:fa:1b:f5:64:f8:b5:2d: 07:23:f3:b7:2f:c4:53:a4:27:5d:66:b2:bd:75:1e: 49:8f:a5:9c:5b:27:57:03:35:28:d9:77:90:e6:5c: f1:1b:86:c2:cc:16:99:22:75:9d:eb:8f:20:c0:9a: 98:5c:cb:5b:4a:03:9b:cc:88:c2:d2:4b:04:f3:b0: c3:93:3c:e8:3a:6d:2d:21:49:64:ec:b8:e0:c4:20: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:53:33:03:AA:4F:8E:4A:93:59:47:64:89:85:F3:08:06:B2:C5:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08246ed5-51fc-3131-8a08-91a35e9b0a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:63:15:a1:d9:03:3a:f8:f8:84:b2:3b:33:00:b5:4a:ff:95: 11:67:ce:a9:ec:de:16:c5:3b:1d:86:df:d5:4f:31:39:e5:2e: 0e:d1:51:21:5f:1e:ee:5f:e4:14:09:41:cd:eb:3d:b9:4f:d1: c8:98:3b:73:0c:06:b0:32:b9:a0:1f:b2:59:b7:31:f1:d6:a6: 64:ae:4b:e4:e5:c4:24:68:3c:4b:ec:2c:5d:a4:76:5e:c0:c6: d7:31:91:ff:47:4d:92:c6:70:5a:66:fd:c4:6f:d3:03:1f:64: 76:b1:d8:fb:d1:b2:a5:bc:d6:05:02:22:86:eb:aa:5c:a8:62: e4:94:b0:d9:b6:a2:9a:1e:2f:68:38:07:05:f1:08:ec:55:b3: 10:df:f3:f3:43:ba:66:12:f8:c1:9e:b4:62:dd:92:d7:31:19: ab:1c:64:7c:73:b2:74:97:f3:a7:3a:10:98:09:29:4a:38:94: 5c:2d:cc:fd:bb:c4:e1:29:84:93:14:91:ed:b9:c7:a4:bf:c7: c3:f2:0b:d1:34:f9:84:a3:68:86:51:f3:15:9f:cb:74:40:07: a5:eb:a6:86:9e:5a:10:c8:6b:28:ed:76:5a:a0:af:b0:20:24: 53:5c:e2:63:e8:08:39:2f:e2:e7:53:19:d7:ad:60:a3:b8:c1: 74:41:f6:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ghoe9MIEGJhaa14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyNDE0MTkxM1oXDTI2MDYyMjE0MTkxM1owLzEtMCsGA1UEAxMk NTY2OTc2NjktZDk2MC00ZWM3LWFkNzYtNTU5NDIyY2UwMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNlp91DsJba7eZbvw66rWBImbgt0NY51nrnf j04mK4JeYqPnszKx2dQoHyQ64pytvgaLk0O1kKNRMv8bUEy1ZtW4Rth4mncW3VIg BqJfEXDBdcyHKQPO0+PuZDHfdlP2S1y+mofeuX4LiHX1dFXTLciKIe5sVVFZHFyo 8qTPj3Dx9vkP17WCyqHqJtE9EYZpjeTvbAGJJzWsH8zaOMBQRlFxqvkY9fr61vT2 7fob9WT4tS0HI/O3L8RTpCddZrK9dR5Jj6WcWydXAzUo2XeQ5lzxG4bCzBaZInWd 648gwJqYXMtbSgObzIjC0ksE87DDkzzoOm0tIUlk7LjgxCDJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1TMwOqT45Kk1lHZImF8wgGssV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDgyNDZlZDUtNTFmYy0z MTMxLThhMDgtOTFhMzVlOWIwYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBjFaHZAzr4+ISyOzMAtUr/lRFnzqns3hbFOx2G39VPMTnlLg7RUSFf Hu5f5BQJQc3rPblP0ciYO3MMBrAyuaAfslm3MfHWpmSuS+TlxCRoPEvsLF2kdl7A xtcxkf9HTZLGcFpm/cRv0wMfZHax2PvRsqW81gUCIobrqlyoYuSUsNm2opoeL2g4 BwXxCOxVsxDf8/NDumYS+MGetGLdktcxGascZHxzsnSX86c6EJgJKUo4lFwtzP27 xOEphJMUke25x6S/x8PyC9E0+YSjaIZR8xWfy3RAB6XrpoaeWhDIayjtdlqgr7Ag JFNc4mPoCDkv4udTGdetYKO4wXRB9n0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:35 2026 by rpki-client