$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ff22fd2-7d13-3d36-9c7d-d7bcf197d28e.roa File: 2ff22fd2-7d13-3d36-9c7d-d7bcf197d28e.roa (raw, json) Hash identifier: tZdEI+IzU8aVVfIFOr88m3DED2eUQdQ4HMOsqAwzGjw= Subject key identifier: 43:D3:CC:23:A1:E0:7A:0A:47:57:98:40:53:7F:2C:55:28:10:66:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D6944FAC17204E1236E4D1580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ff22fd2-7d13-3d36-9c7d-d7bcf197d28e.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 32787 IP address blocks: 72.52.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:fa:c1:72:04:e1:23:6e:4d:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=9bbaeaf4-1c30-489f-b23f-1a2d3f48d6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:63:64:aa:7d:e2:1d:da:42:0c:68:78:bd:65: ee:a3:06:14:5d:41:b6:ca:6b:40:8a:56:1b:f6:08: a6:59:9e:09:f1:bf:6e:a0:fb:ce:d9:1d:14:46:60: 6b:65:fc:2c:e2:15:58:e0:0d:7a:b3:4d:8a:ca:0a: 86:a6:d2:d4:5c:8f:14:b9:1b:73:e1:20:30:c3:83: 60:55:1d:58:ad:86:eb:20:eb:ed:b3:41:23:72:aa: a9:b4:fa:49:a6:83:0b:0d:a0:fe:b2:8c:4b:18:f5: 3d:4a:f7:c1:f2:18:d6:76:e9:d7:72:47:ab:38:d3: d7:f5:c0:c8:f9:4a:57:36:da:b9:3b:08:df:2b:e7: 78:97:c3:0b:8c:bf:7e:d2:07:a5:22:33:54:82:d6: 5d:f5:92:e8:7b:0c:fd:bb:71:4e:59:15:c0:87:a6: 9c:e3:70:47:cf:d4:19:40:a0:49:97:2f:6a:23:48: 74:1b:85:68:11:49:46:a3:33:64:2b:a9:73:e5:55: b2:a1:f0:39:41:f6:df:f7:9e:3e:3a:41:12:68:cd: 78:49:32:ec:b2:c4:de:3e:ed:02:73:92:08:12:8d: 22:3b:d8:6c:dc:c4:1f:5a:11:ad:47:4f:ec:19:50: 74:2c:94:da:33:ad:fe:7b:6d:87:de:db:fa:cd:a7: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:CC:23:A1:E0:7A:0A:47:57:98:40:53:7F:2C:55:28:10:66:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ff22fd2-7d13-3d36-9c7d-d7bcf197d28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ef:18:34:0f:ef:db:64:22:fb:1d:5c:62:fe:36:d2:7f:53: 77:a8:91:63:58:98:75:ad:6e:c4:2c:38:b2:bd:fa:dd:bd:eb: 9b:c1:0e:67:1c:ef:40:c3:d4:b8:df:d8:eb:f6:8a:ff:a1:57: 74:2b:d3:04:de:6e:38:4b:6c:ac:40:5d:14:9c:c6:47:57:d8: 9e:8b:89:f8:19:04:76:1c:ce:12:20:ee:17:76:d3:bd:a3:87: 7f:a4:92:a4:01:52:94:0b:b7:ab:c1:ea:fc:88:97:39:42:af: 3d:91:76:d8:8b:27:fc:e0:d0:8c:7e:1c:35:86:58:c8:10:fa: fe:c2:2f:55:b1:3e:6f:89:90:a5:99:99:5e:36:f5:5e:c1:74: ad:32:09:e8:15:43:f7:d3:88:6c:49:27:08:45:12:47:25:c2: 15:58:af:8c:29:62:ca:45:23:8e:10:9c:9b:18:8e:2a:87:bc: 5f:99:ff:43:cd:29:b3:ae:f1:a6:35:ab:fa:e9:33:73:75:8e: 68:29:fe:6d:37:ed:c1:b7:48:fc:43:27:d0:54:ac:29:81:fb: 85:3d:72:62:fd:70:72:7c:bb:df:ed:36:00:0c:4b:6b:5c:b1: 05:0d:04:e5:26:ce:8c:23:fc:5f:e8:7a:38:b3:0b:54:c6:c5: 31:72:97:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRPrBcgThI25NFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk OWJiYWVhZjQtMWMzMC00ODlmLWIyM2YtMWEyZDNmNDhkNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGNkqn3iHdpCDGh4vWXuowYUXUG2ymtAilYb 9gimWZ4J8b9uoPvO2R0URmBrZfws4hVY4A16s02KygqGptLUXI8UuRtz4SAww4Ng VR1YrYbrIOvts0EjcqqptPpJpoMLDaD+soxLGPU9SvfB8hjWdunXckerONPX9cDI +UpXNtq5OwjfK+d4l8MLjL9+0gelIjNUgtZd9ZLoewz9u3FOWRXAh6ac43BHz9QZ QKBJly9qI0h0G4VoEUlGozNkK6lz5VWyofA5Qfbf954+OkESaM14STLsssTePu0C c5IIEo0iO9hs3MQfWhGtR0/sGVB0LJTaM63+e22H3tv6zacapQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPTzCOh4HoKR1eYQFN/LFUoEGazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmZmMjJmZDItN2QxMy0z ZDM2LTljN2QtZDdiY2YxOTdkMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjvGDQP79tkIvsdXGL+NtJ/U3eokWNYmHWtbsQsOLK9+t2965vBDmcc 70DD1Ljf2Ov2iv+hV3Qr0wTebjhLbKxAXRScxkdX2J6LifgZBHYczhIg7hd2072j h3+kkqQBUpQLt6vB6vyIlzlCrz2RdtiLJ/zg0Ix+HDWGWMgQ+v7CL1WxPm+JkKWZ mV429V7BdK0yCegVQ/fTiGxJJwhFEkclwhVYr4wpYspFI44QnJsYjiqHvF+Z/0PN KbOu8aY1q/rpM3N1jmgp/m037cG3SPxDJ9BUrCmB+4U9cmL9cHJ8u9/tNgAMS2tc sQUNBOUmzowj/F/oejizC1TGxTFylzo= -----END CERTIFICATE-----Generated at Fri Apr 17 07:07:24 2026 by rpki-client