$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2921ceb-cb0b-3f72-af81-c2458a38f97a.roa File: c2921ceb-cb0b-3f72-af81-c2458a38f97a.roa (raw, json) Hash identifier: JVEq2zrRNn4CsOJztOjOlTL7DpTjS5yB2ucQODfi78Q= Subject key identifier: 2D:F0:1E:CB:85:0C:82:32:D4:09:AE:C3:39:9A:38:20:D3:B7:93:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DB4A5AF7D7DCDE06B47543500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2921ceb-cb0b-3f72-af81-c2458a38f97a.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 32787 IP address blocks: 72.52.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:af:7d:7d:cd:e0:6b:47:54:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=04488570-2ab3-4c61-acdd-ff2a8517be05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:e2:91:33:d1:a3:33:a8:2b:0d:a5:97:52: 21:6d:02:11:a2:ba:f2:af:99:dd:ee:be:ee:9c:c3: ca:16:62:35:eb:6e:7d:6b:bb:98:40:28:e3:0b:81: 92:1a:87:53:30:5e:e6:e4:8e:73:85:fd:e6:bb:c8: 96:6c:e2:ec:36:01:41:33:c5:74:fd:5e:e0:f3:1b: b5:ec:bf:41:38:fd:e0:af:bd:4e:f0:50:4e:68:f5: 84:8b:52:03:04:2a:1e:27:ce:21:76:05:b1:ab:c9: 77:c9:fe:a9:2b:13:d5:13:da:f4:ba:62:eb:2a:5f: 8f:3b:c8:49:61:43:b4:ec:1f:f2:4c:91:ee:ea:54: 14:dc:4e:1a:58:75:06:91:67:1d:47:e5:9e:d0:6f: 7f:ae:53:f4:b5:50:52:8c:e2:6d:74:8f:94:20:1a: 9d:34:d7:de:85:18:c9:cc:64:62:6d:96:fc:ee:95: 0f:b4:c2:23:ad:73:cd:5e:30:ff:db:c8:d7:b3:65: c0:9f:c1:27:0e:a8:19:0d:d0:d5:c7:4f:c7:45:7f: d4:95:99:ad:39:07:ef:92:c9:11:25:b0:61:1e:32: 00:27:13:60:6a:5d:30:67:35:8a:c8:13:8f:c2:31: 58:c2:89:ec:ac:45:94:b1:8d:d8:46:3d:e9:56:67: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F0:1E:CB:85:0C:82:32:D4:09:AE:C3:39:9A:38:20:D3:B7:93:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2921ceb-cb0b-3f72-af81-c2458a38f97a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:75:6e:7a:4d:ca:be:37:f0:a1:9b:0b:63:b4:7d:f4:8b:2a: 04:de:54:e4:df:97:1b:51:15:5b:02:b0:b1:37:74:fe:f1:85: 27:58:18:18:8d:68:72:28:ad:28:be:5b:63:ee:9b:a2:1d:d5: 53:cd:ac:b2:6b:e1:b9:86:79:33:dc:e5:07:4b:47:9b:bb:9d: 71:e9:7b:c5:ae:99:a5:f9:ad:48:bf:25:29:ae:5b:3c:f2:3a: a1:07:15:c7:b5:9e:84:af:3f:c0:cf:68:e6:ee:5f:67:ec:9f: b1:5c:8a:fa:2b:33:03:a2:54:ec:9c:ed:d5:cc:89:7f:3f:a2: ff:5f:6c:98:09:57:33:5c:dd:0b:54:30:6b:13:3e:79:b9:c2: f9:e4:52:e2:10:82:a0:fc:49:cf:80:19:6f:f7:8b:b6:cd:cc: 03:2d:ac:90:f2:6a:d1:8d:c0:2f:d8:17:4b:a0:16:22:92:30: 50:d5:b9:95:11:dc:2d:83:15:81:90:b3:ae:f8:61:8a:5c:af: 44:ee:fb:c0:cd:8e:de:66:89:9a:29:fc:a0:6e:dc:52:a9:b8: 2e:59:9b:d5:aa:7f:1b:dc:16:8b:8f:6a:6d:46:1e:b4:b4:e8: c2:91:97:40:64:f6:67:ab:eb:eb:01:a9:b4:97:54:8f:32:7e: 6e:8d:94:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pa99fc3ga0dUNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk MDQ0ODg1NzAtMmFiMy00YzYxLWFjZGQtZmYyYTg1MTdiZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKTikTPRozOoKw2ll1IhbQIRorryr5nd7r7u nMPKFmI16259a7uYQCjjC4GSGodTMF7m5I5zhf3mu8iWbOLsNgFBM8V0/V7g8xu1 7L9BOP3gr71O8FBOaPWEi1IDBCoeJ84hdgWxq8l3yf6pKxPVE9r0umLrKl+PO8hJ YUO07B/yTJHu6lQU3E4aWHUGkWcdR+We0G9/rlP0tVBSjOJtdI+UIBqdNNfehRjJ zGRibZb87pUPtMIjrXPNXjD/28jXs2XAn8EnDqgZDdDVx0/HRX/UlZmtOQfvkskR JbBhHjIAJxNgal0wZzWKyBOPwjFYwonsrEWUsY3YRj3pVmftXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3wHsuFDIIy1AmuwzmaOCDTt5OmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzI5MjFjZWItY2IwYi0z ZjcyLWFmODEtYzI0NThhMzhmOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR1bnpNyr438KGbC2O0ffSLKgTeVOTflxtRFVsCsLE3dP7xhSdYGBiN aHIorSi+W2Pum6Id1VPNrLJr4bmGeTPc5QdLR5u7nXHpe8WumaX5rUi/JSmuWzzy OqEHFce1noSvP8DPaObuX2fsn7FcivorMwOiVOyc7dXMiX8/ov9fbJgJVzNc3QtU MGsTPnm5wvnkUuIQgqD8Sc+AGW/3i7bNzAMtrJDyatGNwC/YF0ugFiKSMFDVuZUR 3C2DFYGQs674YYpcr0Tu+8DNjt5miZop/KBu3FKpuC5Zm9WqfxvcFouPam1GHrS0 6MKRl0Bk9mer6+sBqbSXVI8yfm6NlAs= -----END CERTIFICATE-----Generated at Wed May 13 08:38:33 2026 by rpki-client