$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9dc5a4e-eeb6-3041-97d4-272b4e202a1d.roa File: b9dc5a4e-eeb6-3041-97d4-272b4e202a1d.roa (raw, json) Hash identifier: sE+nmSbcclK0cYCOswQrbcZ1xAkW1QalqFm54EC0hGE= Subject key identifier: 7F:F2:BC:D5:3B:77:B1:B5:10:DF:48:11:D4:B9:6A:40:21:79:4A:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F2957B8E7AA8B385DC42B0EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9dc5a4e-eeb6-3041-97d4-272b4e202a1d.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 213120 IP address blocks: 72.52.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b8:e7:aa:8b:38:5d:c4:2b:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=de92a114-1334-4806-8a8e-de88756b691c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:d7:54:2c:47:fd:aa:48:7e:dd:83:b7:72: 93:16:52:14:a5:22:7e:c5:bd:61:d4:23:27:b0:5e: bd:5b:e6:49:46:75:2b:f6:79:28:07:05:23:e8:85: 64:58:70:cd:ab:32:5c:84:3e:75:15:54:6d:79:e3: 0b:85:79:05:4f:f5:f4:e8:e3:a7:55:3d:ea:13:dd: fd:f0:b6:99:38:35:84:e3:42:5c:94:c4:68:3b:a7: 3c:c4:a7:ed:0e:b5:20:e6:91:55:66:52:b6:47:87: 6c:67:f4:e9:4f:6d:4d:06:b9:db:20:e5:e6:8c:76: b1:84:c2:52:8d:77:5a:e6:db:6a:97:55:6d:6f:3f: ee:aa:83:bb:1b:26:93:56:27:52:09:9d:7f:63:e2: ef:b8:cc:a1:02:e0:97:23:0b:09:7f:13:26:5d:bf: 11:bd:a1:41:f3:f7:5b:13:d7:ab:67:45:df:f4:8c: dd:cc:f6:06:07:2b:4d:b1:e5:5e:bd:8f:8f:db:64: 1f:df:28:0a:2a:95:c4:cf:d2:39:10:d9:b2:55:3e: bb:c2:54:5a:82:42:a9:22:3c:41:25:69:22:d9:45: 3c:82:9a:1c:e3:e4:7b:a9:16:d9:ca:b6:15:ab:a0: be:00:65:aa:6c:ee:09:a2:65:5b:32:a7:ca:86:63: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:BC:D5:3B:77:B1:B5:10:DF:48:11:D4:B9:6A:40:21:79:4A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9dc5a4e-eeb6-3041-97d4-272b4e202a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5a:54:96:b8:12:fb:bf:44:da:2d:a8:8c:19:b6:41:82:1f: 20:97:44:33:47:91:08:b4:72:cc:85:39:bc:1d:5f:ba:5e:d5: a6:16:17:6f:fe:c7:a9:e5:e1:27:ba:a8:19:4b:ee:a4:4c:d2: 0b:a2:37:c0:dc:c3:ec:87:c6:db:09:5a:64:7e:af:39:b8:19: e9:00:14:65:45:5e:e8:b4:47:28:a1:a1:61:ff:d7:65:e2:d4: 96:d3:66:73:ff:3a:99:02:dc:9d:36:61:42:0d:52:14:c4:05: e7:52:ce:6d:fa:53:69:97:8b:b2:ef:1b:0a:cb:44:c2:12:fb: 53:1f:5c:2a:5b:e6:c5:0b:3b:ed:a2:75:31:e6:78:0d:56:c0: fc:e8:21:01:c6:5f:4e:5d:54:98:36:fa:d4:05:72:74:97:d8: 79:01:3b:bc:62:76:9f:aa:c1:7c:95:d3:f8:4a:40:0a:fb:43: c0:8d:a1:e1:33:3f:0a:8f:a5:78:fc:70:0c:68:4a:b7:79:0c: af:2b:61:f2:8e:ba:12:44:18:10:55:3f:5b:c9:16:3e:0e:47: f6:65:75:d0:82:f3:42:56:75:05:fe:11:54:4d:c3:ac:e7:60: 3d:57:37:77:65:02:c4:35:5c:3a:77:24:93:4e:91:6e:75:d3: 03:31:f4:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7jnqos4XcQrDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZGU5MmExMTQtMTMzNC00ODA2LThhOGUtZGU4ODc1NmI2OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcPXVCxH/apIft2Dt3KTFlIUpSJ+xb1h1CMn sF69W+ZJRnUr9nkoBwUj6IVkWHDNqzJchD51FVRteeMLhXkFT/X06OOnVT3qE939 8LaZODWE40JclMRoO6c8xKftDrUg5pFVZlK2R4dsZ/TpT21NBrnbIOXmjHaxhMJS jXda5ttql1Vtbz/uqoO7GyaTVidSCZ1/Y+LvuMyhAuCXIwsJfxMmXb8RvaFB8/db E9erZ0Xf9IzdzPYGBytNseVevY+P22Qf3ygKKpXEz9I5ENmyVT67wlRagkKpIjxB JWki2UU8gpoc4+R7qRbZyrYVq6C+AGWqbO4JomVbMqfKhmM0YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/yvNU7d7G1EN9IEdS5akAheUr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjlkYzVhNGUtZWViNi0z MDQxLTk3ZDQtMjcyYjRlMjAyYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBaVJa4Evu/RNotqIwZtkGCHyCXRDNHkQi0csyFObwdX7pe1aYWF2/+ x6nl4Se6qBlL7qRM0guiN8Dcw+yHxtsJWmR+rzm4GekAFGVFXui0RyihoWH/12Xi 1JbTZnP/OpkC3J02YUINUhTEBedSzm36U2mXi7LvGwrLRMIS+1MfXCpb5sULO+2i dTHmeA1WwPzoIQHGX05dVJg2+tQFcnSX2HkBO7xidp+qwXyV0/hKQAr7Q8CNoeEz PwqPpXj8cAxoSrd5DK8rYfKOuhJEGBBVP1vJFj4OR/ZlddCC80JWdQX+EVRNw6zn YD1XN3dlAsQ1XDp3JJNOkW510wMx9I4= -----END CERTIFICATE-----Generated at Wed Sep 23 23:18:51 2026 by rpki-client