$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/338329aa-12c5-3bca-8c17-e2a305441386.roa File: 338329aa-12c5-3bca-8c17-e2a305441386.roa (raw, json) Hash identifier: Ku6XMZ8ckKKZ0snikhVzFdqKtjEFdoa0Z9Geqklk9+M= Subject key identifier: 5B:A8:92:05:72:D2:52:D6:F1:61:6F:C6:94:E1:22:7F:C3:E0:A4:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F2957B758B7A42FD12688C000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/338329aa-12c5-3bca-8c17-e2a305441386.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 213120 IP address blocks: 72.52.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b7:58:b7:a4:2f:d1:26:88:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=b40b30ed-fe5f-4f44-b3d6-32e931a915c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:47:a3:ac:53:2b:0f:23:5b:fa:4c:6b:d3: b1:68:1f:3c:2f:1a:4d:5d:b2:a4:2f:ac:80:d5:07: b9:89:5d:b8:2b:b8:92:57:ee:52:5a:eb:ce:2c:2d: 00:ec:81:69:19:1e:9f:1c:02:fa:3f:9a:39:e9:72: 60:ef:5a:8a:39:19:be:34:f1:2b:77:89:33:e8:6e: 23:c8:54:88:cc:7d:7f:fd:5b:c8:ac:6d:73:a2:50: f5:78:24:d5:b6:eb:33:3a:bc:8f:76:a6:48:4a:67: 20:e3:47:2c:fb:18:65:e0:a4:60:0f:9d:02:34:23: c9:bb:87:d9:f6:cb:bd:ea:86:e7:5f:e4:45:ea:a9: 7a:16:e8:5b:b0:51:f3:1a:f1:1e:c5:8c:d2:6d:83: e8:39:c2:00:ee:53:d4:ee:52:39:e3:78:f5:3d:ad: 5a:1c:60:53:23:ec:a8:8b:0d:1e:9b:53:2e:ad:78: 32:0b:cd:42:43:15:56:8b:02:9e:f0:33:ba:74:b9: d5:96:31:58:f1:36:50:e5:05:dc:e5:67:a1:df:58: b4:31:13:77:a3:16:80:4d:b3:a2:29:6f:d9:f0:ff: c1:36:89:70:ca:d7:32:ae:f0:c1:36:70:90:9e:1e: 2e:a5:85:c8:87:3d:5a:5b:2d:fa:e5:99:39:08:90: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A8:92:05:72:D2:52:D6:F1:61:6F:C6:94:E1:22:7F:C3:E0:A4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/338329aa-12c5-3bca-8c17-e2a305441386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:37:ea:16:de:cb:ee:68:fd:a0:20:60:69:8e:d9:f8:de:7c: c3:99:d2:21:1b:02:de:56:3d:bc:4a:ff:24:7c:e8:52:1d:39: 40:fc:22:13:9c:10:d6:62:75:84:40:28:23:8b:b1:ec:dc:69: 2a:fb:68:76:74:ee:bf:21:48:db:a4:dd:a8:fd:f5:fa:82:0f: fa:14:35:e0:b4:ff:04:12:16:aa:6c:e7:31:b6:77:e6:3e:27: 33:a4:5c:04:c0:ab:a6:a9:3e:08:23:aa:0f:4d:92:a5:57:c3: 6a:9d:52:83:a5:92:e6:e9:95:be:39:93:a9:77:1d:65:dd:64: c3:e8:cc:51:5b:04:b1:85:96:41:a0:61:e5:59:5c:c6:07:f3: 71:08:0b:62:00:fb:77:ca:0e:1d:b6:1b:98:9e:2e:d3:11:c4: 71:68:7d:d5:4c:35:05:5b:b8:84:93:dd:d4:db:2c:31:60:fa: f2:9d:d4:9a:53:c8:fa:c9:61:5e:4f:fb:a7:e5:0d:ec:1b:57: a8:4c:b4:ec:f9:30:70:fb:93:d0:b6:69:6c:9b:ad:51:99:d6: 7b:28:36:39:bb:fa:d4:a0:df:ce:15:d3:43:69:69:5e:80:a0: 1c:21:6c:ed:f4:d2:3f:b5:1b:d7:68:63:6d:67:3e:0a:12:1d: 93:d4:75:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7dYt6Qv0SaIwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YjQwYjMwZWQtZmU1Zi00ZjQ0LWIzZDYtMzJlOTMxYTkxNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLJHo6xTKw8jW/pMa9OxaB88LxpNXbKkL6yA 1Qe5iV24K7iSV+5SWuvOLC0A7IFpGR6fHAL6P5o56XJg71qKORm+NPErd4kz6G4j yFSIzH1//VvIrG1zolD1eCTVtuszOryPdqZISmcg40cs+xhl4KRgD50CNCPJu4fZ 9su96obnX+RF6ql6FuhbsFHzGvEexYzSbYPoOcIA7lPU7lI543j1Pa1aHGBTI+yo iw0em1MurXgyC81CQxVWiwKe8DO6dLnVljFY8TZQ5QXc5Weh31i0MRN3oxaATbOi KW/Z8P/BNolwytcyrvDBNnCQnh4upYXIhz1aWy365Zk5CJCySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuokgVy0lLW8WFvxpThIn/D4KTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzM4MzI5YWEtMTJjNS0z YmNhLThjMTctZTJhMzA1NDQxMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk36hbey+5o/aAgYGmO2fjefMOZ0iEbAt5WPbxK/yR86FIdOUD8IhOc ENZidYRAKCOLsezcaSr7aHZ07r8hSNuk3aj99fqCD/oUNeC0/wQSFqps5zG2d+Y+ JzOkXATAq6apPggjqg9NkqVXw2qdUoOlkubplb45k6l3HWXdZMPozFFbBLGFlkGg YeVZXMYH83EIC2IA+3fKDh22G5ieLtMRxHFofdVMNQVbuIST3dTbLDFg+vKd1JpT yPrJYV5P+6flDewbV6hMtOz5MHD7k9C2aWybrVGZ1nsoNjm7+tSg384V00NpaV6A oBwhbO300j+1G9doY21nPgoSHZPUdQs= -----END CERTIFICATE-----Generated at Fri Sep 25 04:14:06 2026 by rpki-client