$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5ea5f58-81c3-3579-854a-d30c22a5ae6c.roa File: f5ea5f58-81c3-3579-854a-d30c22a5ae6c.roa (raw, json) Hash identifier: Nj8yXtz8jxPGtS0RoF8Kq597L18IDkO3gVLBDMrvjVM= Subject key identifier: F1:95:B0:C9:FF:88:19:33:72:06:90:88:EE:A3:1B:08:E9:2A:07:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D667A55C4FAD49152A9F20B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5ea5f58-81c3-3579-854a-d30c22a5ae6c.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 32787 IP address blocks: 72.52.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:55:c4:fa:d4:91:52:a9:f2:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=35e1bc73-7c39-4ab3-a05c-abf97466b77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:64:f4:ab:a4:2f:77:b3:4f:02:f7:ac:89:8e: 34:b8:0a:23:e1:4a:8f:b1:d1:69:a1:d9:6d:9b:fe: 8f:c8:cc:8f:71:86:2e:f1:22:93:f3:0c:61:40:b2: cd:f5:f0:f2:02:df:91:54:e8:bb:ec:30:f6:3d:90: a8:43:2b:28:ba:44:4e:cb:27:61:48:15:11:a7:5a: 72:71:93:ca:aa:b5:85:d1:42:6f:fc:33:a2:2f:f6: 9a:3f:d0:87:a6:17:d0:28:e9:61:a5:a2:eb:93:62: 53:c7:69:d9:7b:c7:b3:59:ec:b5:cb:6b:8b:e1:4c: cd:b9:b8:5f:68:0a:12:84:09:bb:c6:46:08:de:bb: e5:12:86:91:5d:a1:fa:de:6f:e8:22:34:43:4c:52: d6:6a:23:05:90:41:d1:de:66:7a:b1:e9:68:57:2c: 82:e0:d7:f1:6f:f4:65:7d:56:5a:91:22:c2:40:58: 0e:d6:1f:37:32:ca:50:57:84:6d:05:05:d5:fa:08: c0:45:31:a6:23:81:c2:d0:62:6b:1b:62:4c:04:24: 28:08:6e:8d:ad:f4:75:1f:e4:96:39:ed:08:14:fc: 57:7e:25:22:f8:04:24:34:20:70:07:08:ab:00:ea: 60:9c:85:bb:ff:b4:0c:0c:ff:5a:35:97:1c:ba:55: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:95:B0:C9:FF:88:19:33:72:06:90:88:EE:A3:1B:08:E9:2A:07:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5ea5f58-81c3-3579-854a-d30c22a5ae6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ad:87:0d:fa:63:64:ee:93:11:26:9a:c4:22:ce:84:0b:a3: 1a:eb:93:83:96:c6:48:29:2f:d7:7f:ea:ec:60:5d:ce:bf:bd: 2f:52:90:9b:35:17:bf:c9:78:79:1f:d0:56:2e:53:d5:62:68: 53:35:81:41:85:5b:95:26:82:dd:61:ac:93:4b:c1:d5:85:c0: f8:f6:f4:92:5d:4d:75:44:9b:9c:5d:bc:85:92:27:dc:a3:b0: 46:e0:d0:ae:c7:5c:42:8c:a3:3d:01:8c:a5:35:bb:52:b5:5c: df:93:1a:6f:46:2f:3f:10:b0:22:5f:cc:61:e1:9f:6b:bb:ea: 70:33:9f:71:fb:c6:7d:03:ff:47:44:e2:83:92:cb:28:06:4d: cb:b6:c1:d6:fc:b3:b9:83:02:d4:30:0d:dc:67:38:b1:fd:37: c9:a0:0a:2a:9d:e8:c9:51:c4:55:6e:e3:77:ca:21:83:ab:72: 45:65:5c:3f:63:3c:9b:dc:1d:3b:9f:b3:c5:97:71:0a:80:6a: 1c:87:2d:24:64:b0:37:72:20:c1:26:40:4d:5d:5a:9c:1b:ce: 78:de:b4:3c:46:f7:85:29:f6:96:71:d9:f2:77:8f:34:29:a3: 68:5e:dd:78:72:33:40:9a:94:0c:6f:3d:d3:6c:6e:56:f2:c3: 4b:6d:e9:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melXE+tSRUqnyC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk MzVlMWJjNzMtN2MzOS00YWIzLWEwNWMtYWJmOTc0NjZiNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGT0q6Qvd7NPAvesiY40uAoj4UqPsdFpodlt m/6PyMyPcYYu8SKT8wxhQLLN9fDyAt+RVOi77DD2PZCoQysoukROyydhSBURp1py cZPKqrWF0UJv/DOiL/aaP9CHphfQKOlhpaLrk2JTx2nZe8ezWey1y2uL4UzNubhf aAoShAm7xkYI3rvlEoaRXaH63m/oIjRDTFLWaiMFkEHR3mZ6seloVyyC4Nfxb/Rl fVZakSLCQFgO1h83MspQV4RtBQXV+gjARTGmI4HC0GJrG2JMBCQoCG6NrfR1H+SW Oe0IFPxXfiUi+AQkNCBwBwirAOpgnIW7/7QMDP9aNZcculXYqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGVsMn/iBkzcgaQiO6jGwjpKgcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVlYTVmNTgtODFjMy0z NTc5LTg1NGEtZDMwYzIyYTVhZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2thw36Y2TukxEmmsQizoQLoxrrk4OWxkgpL9d/6uxgXc6/vS9SkJs1 F7/JeHkf0FYuU9ViaFM1gUGFW5Umgt1hrJNLwdWFwPj29JJdTXVEm5xdvIWSJ9yj sEbg0K7HXEKMoz0BjKU1u1K1XN+TGm9GLz8QsCJfzGHhn2u76nAzn3H7xn0D/0dE 4oOSyygGTcu2wdb8s7mDAtQwDdxnOLH9N8mgCiqd6MlRxFVu43fKIYOrckVlXD9j PJvcHTufs8WXcQqAahyHLSRksDdyIMEmQE1dWpwbznjetDxG94Up9pZx2fJ3jzQp o2he3XhyM0CalAxvPdNsblbyw0tt6a0= -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:00 2026 by rpki-client