$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6f77ea-df12-3384-9dee-7bfa56904c97.roa File: 1a6f77ea-df12-3384-9dee-7bfa56904c97.roa (raw, json) Hash identifier: cNjLWrig+eOTembMOP3OVew2nYC2nB3T72YnR7732c4= Subject key identifier: 20:5E:17:08:C2:1C:9F:86:81:2F:31:17:37:D9:B8:4D:DB:72:4F:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F2C2259D8263874082E215780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6f77ea-df12-3384-9dee-7bfa56904c97.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 32787 IP address blocks: 72.52.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:59:d8:26:38:74:08:2e:21:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=1910b0eb-b29d-4de7-b890-30ccb006ba53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:7c:fb:c5:0c:2d:9e:33:17:46:87:90:8f: 6a:9d:ca:a2:e3:b2:6c:af:86:ba:36:ad:88:a8:bc: bd:e1:0e:b0:4c:26:6e:f3:ce:ba:c6:b6:ce:81:81: fd:32:48:2d:1d:37:8d:1c:22:f1:ec:93:de:83:d8: 2e:1e:c0:2b:63:e0:22:3a:55:59:12:8b:fb:bb:67: 69:95:a0:da:d8:75:0e:af:41:1f:24:6b:01:64:a9: 5b:06:75:f2:73:ee:20:5f:c9:53:56:7e:cf:75:3e: 5d:2b:a8:22:0f:30:2c:07:76:12:57:f2:64:1a:9f: b8:44:a5:95:64:b1:c8:02:2d:f4:b5:7d:9b:64:f8: 34:04:2f:3f:c2:24:c6:ef:32:05:8a:64:32:58:34: f9:3d:d8:c1:27:62:7c:93:a2:dd:9e:19:81:c3:18: 39:58:c1:2d:17:2c:fd:8d:59:4b:79:74:87:db:81: 20:f9:5c:f5:c4:77:e5:2f:7b:55:2d:36:44:22:7a: ac:0e:d3:00:83:8c:74:c2:fe:e7:0f:eb:8c:66:aa: c8:fe:71:52:66:69:5e:ff:83:9e:57:2f:b1:fa:70: e9:6c:7f:51:00:de:df:48:0a:3e:f5:f8:40:36:65: a4:18:34:68:66:c1:f2:8f:6e:e9:bf:6c:a2:7e:d2: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5E:17:08:C2:1C:9F:86:81:2F:31:17:37:D9:B8:4D:DB:72:4F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6f77ea-df12-3384-9dee-7bfa56904c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:31:e8:0b:30:3f:9e:1c:8d:9e:35:b8:77:3a:f6:af:42:67: 02:27:92:aa:d2:32:eb:7c:87:c8:cd:57:10:22:31:0c:da:a7: d9:37:7e:d1:ef:e7:a7:95:9d:c0:f1:e6:ff:21:9d:bf:1b:81: 42:49:32:b5:e2:ce:22:56:9d:31:33:8a:9e:4e:3d:af:09:b1: 91:b1:de:47:87:2a:8f:fc:56:72:4a:5f:77:d3:ea:83:d2:b3: e1:ac:af:32:81:9b:26:09:0d:6b:6d:c7:8f:f6:4e:51:df:13: d2:98:a7:35:9b:2b:34:f1:3d:56:b7:48:33:ef:c7:f7:52:38: c7:1c:bc:3a:83:8d:81:bb:0f:75:40:e5:7a:5f:ae:af:a8:02: 2b:fa:ee:07:85:68:8b:64:20:ce:70:3d:fa:34:f4:5d:67:7d: 3a:2c:59:e1:f6:d4:79:3c:f7:d8:83:86:45:5e:bc:fc:df:92: 1c:64:d5:46:80:11:0f:20:d8:b9:1c:27:ae:06:27:eb:ca:5b: 6b:e6:96:d7:b6:52:cb:0c:63:33:a8:c0:30:cd:9a:15:43:89: a8:35:f2:ac:4d:57:d0:8f:f9:c0:70:c9:09:f9:d7:61:90:4a: 05:a8:46:96:79:31:a4:8f:8d:49:09:54:c0:77:83:12:8a:23: 50:0b:e7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIlnYJjh0CC4hV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk MTkxMGIwZWItYjI5ZC00ZGU3LWI4OTAtMzBjY2IwMDZiYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhed8+8UMLZ4zF0aHkI9qncqi47Jsr4a6Nq2I qLy94Q6wTCZu8866xrbOgYH9MkgtHTeNHCLx7JPeg9guHsArY+AiOlVZEov7u2dp laDa2HUOr0EfJGsBZKlbBnXyc+4gX8lTVn7PdT5dK6giDzAsB3YSV/JkGp+4RKWV ZLHIAi30tX2bZPg0BC8/wiTG7zIFimQyWDT5PdjBJ2J8k6LdnhmBwxg5WMEtFyz9 jVlLeXSH24Eg+Vz1xHflL3tVLTZEInqsDtMAg4x0wv7nD+uMZqrI/nFSZmle/4Oe Vy+x+nDpbH9RAN7fSAo+9fhANmWkGDRoZsHyj27pv2yiftJF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBeFwjCHJ+GgS8xFzfZuE3bck8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE2Zjc3ZWEtZGYxMi0z Mzg0LTlkZWUtN2JmYTU2OTA0Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIx6AswP54cjZ41uHc69q9CZwInkqrSMut8h8jNVxAiMQzap9k3ftHv 56eVncDx5v8hnb8bgUJJMrXiziJWnTEzip5OPa8JsZGx3keHKo/8VnJKX3fT6oPS s+GsrzKBmyYJDWttx4/2TlHfE9KYpzWbKzTxPVa3SDPvx/dSOMccvDqDjYG7D3VA 5Xpfrq+oAiv67geFaItkIM5wPfo09F1nfTosWeH21Hk899iDhkVevPzfkhxk1UaA EQ8g2LkcJ64GJ+vKW2vmlte2UssMYzOowDDNmhVDiag18qxNV9CP+cBwyQn512GQ SgWoRpZ5MaSPjUkJVMB3gxKKI1AL51M= -----END CERTIFICATE-----Generated at Mon Sep 21 08:07:03 2026 by rpki-client