$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa File: 6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa (raw, json) Hash identifier: Hoc4UvWLYmZDpZZrpmxvFp6X6PQN0W8zCiuHBFxjFfY= Subject key identifier: FA:52:2F:71:06:16:67:D7:C7:C6:2F:4A:5F:65:4F:D0:FB:A5:F6:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE921F5609760EC3538E9FFCA Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 32787 IP address blocks: 72.52.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:f5:60:97:60:ec:35:38:e9:ff:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=9be84d75-551a-428e-89e2-4fe90489a5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:74:d9:61:9b:f7:a0:fe:50:6f:7f:95:9d: 68:d5:b7:4e:5a:a9:ec:d0:e0:85:76:12:ce:e0:fb: f1:4a:25:20:44:32:9e:28:d0:43:3e:0f:97:74:9f: 6d:a6:e1:a1:86:97:c7:ef:7d:d8:3a:ef:b0:8b:cd: b5:d1:2b:99:13:95:6c:58:77:3c:db:bc:7c:f6:e2: 29:5e:c1:42:b5:11:22:ce:a3:84:de:ed:f9:0a:c3: 59:e2:ae:cf:10:8e:3a:57:d3:d5:3d:b4:33:d2:98: 02:27:8d:c7:ab:b9:c0:d8:06:90:1e:15:52:83:aa: 1d:16:02:43:cd:c2:f9:4f:a0:9b:89:fa:ff:83:43: c2:fc:b0:c7:cb:25:de:37:16:8d:f7:aa:76:7b:a7: 9a:35:93:69:91:91:f4:66:a6:0c:c7:d2:ee:69:ed: 99:6d:4d:4b:29:03:2c:4b:0e:32:bc:22:aa:25:1a: 0e:84:15:51:74:29:fe:52:b9:be:f5:7c:69:de:09: 4a:8e:4d:e9:7d:c9:09:49:1f:33:63:c8:03:e4:9a: b2:de:fd:43:30:2f:02:46:12:84:ce:d5:df:02:12: 79:e9:8f:a6:bf:4d:7a:a0:4f:30:46:5c:c1:08:99: 06:9c:66:b7:c0:0a:55:d5:6d:07:5b:be:9c:34:f4: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:2F:71:06:16:67:D7:C7:C6:2F:4A:5F:65:4F:D0:FB:A5:F6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f4:15:fd:83:e1:20:72:07:ce:d5:c8:b3:42:a1:58:86:87: 49:5f:af:e2:47:c4:db:6d:7c:cf:cc:18:2b:59:99:8f:84:90: 96:83:ce:46:8d:d2:32:0a:31:15:cf:dc:2c:bb:56:c3:c8:e6: 07:31:19:60:2c:d5:df:9b:22:ba:4e:dc:f3:16:eb:74:55:19: 18:30:4a:e9:2d:a0:7a:c6:47:ec:01:70:0e:f0:89:0c:a9:bf: bf:14:c2:49:36:e9:1f:7e:1d:e8:f9:65:03:5c:9a:69:75:5c: 8a:93:72:5e:4c:1a:bd:9e:01:e8:67:cf:87:d6:f0:8e:ae:9b: 6f:02:a2:e6:4f:fd:b9:3f:d2:40:8f:42:38:73:83:95:db:f1: 67:67:03:ac:7e:99:ff:df:93:8a:1b:5f:9f:42:66:43:5f:e6: 35:76:03:01:7a:d9:62:e3:b9:96:97:35:ce:b0:a3:d4:3e:25: d8:36:d3:c4:26:8a:03:4a:67:7e:b1:2e:17:28:73:9e:48:7b: c2:6a:76:9d:26:43:5e:6b:e8:3d:f9:2b:62:84:6c:03:ea:cd: b0:71:e8:97:0e:86:74:9a:4a:da:94:bf:d2:ac:fb:fe:bf:b8: f3:86:f6:f4:20:c1:51:ad:09:70:e1:77:31:f9:de:2c:27:c4: 8b:a8:b2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIfVgl2DsNTjp/8owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk OWJlODRkNzUtNTUxYS00MjhlLTg5ZTItNGZlOTA0ODlhNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRx02WGb96D+UG9/lZ1o1bdOWqns0OCFdhLO 4PvxSiUgRDKeKNBDPg+XdJ9tpuGhhpfH733YOu+wi8210SuZE5VsWHc827x89uIp XsFCtREizqOE3u35CsNZ4q7PEI46V9PVPbQz0pgCJ43Hq7nA2AaQHhVSg6odFgJD zcL5T6Cbifr/g0PC/LDHyyXeNxaN96p2e6eaNZNpkZH0ZqYMx9Luae2ZbU1LKQMs Sw4yvCKqJRoOhBVRdCn+Urm+9Xxp3glKjk3pfckJSR8zY8gD5Jqy3v1DMC8CRhKE ztXfAhJ56Y+mv016oE8wRlzBCJkGnGa3wApV1W0HW76cNPS8NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpSL3EGFmfXx8YvSl9lT9D7pfbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJmYWYxYWItZTQzNS0z ZmI4LWJhOWMtYzcwMmFmNzdmMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL0Ff2D4SByB87VyLNCoViGh0lfr+JHxNttfM/MGCtZmY+EkJaDzkaN 0jIKMRXP3Cy7VsPI5gcxGWAs1d+bIrpO3PMW63RVGRgwSuktoHrGR+wBcA7wiQyp v78Uwkk26R9+Hej5ZQNcmml1XIqTcl5MGr2eAehnz4fW8I6um28CouZP/bk/0kCP Qjhzg5Xb8WdnA6x+mf/fk4obX59CZkNf5jV2AwF62WLjuZaXNc6wo9Q+Jdg208Qm igNKZ36xLhcoc55Ie8Jqdp0mQ15r6D35K2KEbAPqzbBx6JcOhnSaStqUv9Ks+/6/ uPOG9vQgwVGtCXDhdzH53iwnxIuosgA= -----END CERTIFICATE-----Generated at Mon Sep 21 16:50:24 2026 by rpki-client