$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa File: 3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa (raw, json) Hash identifier: ju4xZrB1uZhhD+9Exd7k1dG49uTHDWv/GKMAEonsX6w= Subject key identifier: 3C:26:D3:7C:8C:8A:AD:3C:10:DA:B1:6D:D2:F0:86:57:7B:BC:3A:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE921EF1D1259927DCDB54980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 213120 IP address blocks: 72.52.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ef:1d:12:59:92:7d:cd:b5:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=a1867dcf-c2a2-4687-9491-5e5d2c788fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:f8:99:ac:26:e6:e2:1e:fd:d9:bd:4e:f5: bc:8a:17:01:69:bb:1d:23:19:c4:83:eb:db:e0:77: 97:b4:ae:34:99:bf:8b:f0:de:c0:ce:7e:b4:11:4f: b3:07:53:5e:f5:97:ee:f6:15:ab:11:b3:b0:b5:20: 4b:5d:58:54:5d:11:d2:30:0f:59:57:ed:af:7f:dd: 36:c3:63:4c:f9:de:12:d3:b5:59:c0:f9:08:24:ff: b7:33:1b:da:8c:4b:88:c8:7a:64:ab:4c:d3:f4:ab: b0:c6:da:87:be:41:03:37:31:82:3f:d9:36:83:22: de:d6:eb:40:ff:b6:2d:92:1b:dc:49:60:eb:af:bc: bc:5f:51:25:39:30:3a:e4:9d:4f:37:67:5b:21:ec: 0a:4c:cd:42:75:31:a5:0a:7f:2f:9d:23:7d:2b:54: 54:04:84:3d:2d:a7:9d:cd:e0:4c:a4:af:a1:9e:8f: 62:79:e7:1a:43:91:33:5f:af:c5:5e:c2:01:85:1d: 41:37:e9:e4:7c:74:a4:6f:aa:e4:10:66:e8:8f:7e: 05:fa:89:35:0f:dd:f8:21:ad:00:69:5a:2d:e7:ad: d3:69:c7:fc:86:5c:3a:14:37:65:e9:f7:c5:75:b1: 89:91:bd:20:24:df:ed:09:f5:e3:5a:76:3a:ce:57: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:26:D3:7C:8C:8A:AD:3C:10:DA:B1:6D:D2:F0:86:57:7B:BC:3A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:43:9c:f1:43:fa:e0:b8:26:ac:5f:bd:ff:35:61:87:cd:c2: 8f:2f:64:3f:51:83:4e:bb:d2:b6:62:f6:a7:a3:af:e8:c4:dd: 8e:9a:d8:32:88:2c:63:1a:1e:a0:94:5d:f9:83:00:66:80:8b: 12:0a:53:04:a3:bb:0f:d4:3a:c8:ce:11:f0:08:52:1d:cd:8c: d0:3b:52:eb:14:58:61:3e:e5:52:36:c3:3e:4b:83:88:ff:0c: 14:98:66:c3:67:f0:4b:b4:62:26:b6:ab:e1:3f:a8:fa:ea:b0: 96:79:c1:4f:ee:f7:b5:e5:4a:6c:dc:60:da:18:c6:b6:ee:91: fc:fa:4c:1f:6d:44:6a:5a:12:7a:1f:c3:bd:c3:34:7e:3b:23: 16:d3:dc:eb:57:1b:9f:57:55:cf:e3:ee:b3:f9:b7:82:52:7c: 5b:ba:f4:a2:ad:a0:15:fd:df:9d:02:72:3a:ce:3b:d9:77:e4: b5:ee:44:87:32:e6:9a:ef:ff:ce:f3:dc:57:ae:6c:1c:1f:d5: 35:78:34:09:4d:34:29:bb:d3:41:73:e1:5f:31:6e:d8:67:95: a9:cc:d7:53:9e:d5:2b:15:2e:2c:2c:f7:a9:e7:77:67:42:3d: e0:98:ea:24:77:3f:6c:8f:8c:6d:27:b0:8c:4f:5d:5b:b4:3f: d2:63:ba:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIe8dElmSfc21SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk YTE4NjdkY2YtYzJhMi00Njg3LTk0OTEtNWU1ZDJjNzg4ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F34mawm5uIe/dm9TvW8ihcBabsdIxnEg+vb 4HeXtK40mb+L8N7Azn60EU+zB1Ne9Zfu9hWrEbOwtSBLXVhUXRHSMA9ZV+2vf902 w2NM+d4S07VZwPkIJP+3MxvajEuIyHpkq0zT9KuwxtqHvkEDNzGCP9k2gyLe1utA /7YtkhvcSWDrr7y8X1ElOTA65J1PN2dbIewKTM1CdTGlCn8vnSN9K1RUBIQ9Laed zeBMpK+hno9ieecaQ5EzX6/FXsIBhR1BN+nkfHSkb6rkEGboj34F+ok1D934Ia0A aVot563Tacf8hlw6FDdl6ffFdbGJkb0gJN/tCfXjWnY6zlcUDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwm03yMiq08ENqxbdLwhld7vDqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FmZmRkNWMtYTQ4OS0z Nzk1LThjZDQtN2MzOWY0ZjMwMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVDnPFD+uC4Jqxfvf81YYfNwo8vZD9Rg0670rZi9qejr+jE3Y6a2DKI LGMaHqCUXfmDAGaAixIKUwSjuw/UOsjOEfAIUh3NjNA7UusUWGE+5VI2wz5Lg4j/ DBSYZsNn8Eu0Yia2q+E/qPrqsJZ5wU/u97XlSmzcYNoYxrbukfz6TB9tRGpaEnof w73DNH47IxbT3OtXG59XVc/j7rP5t4JSfFu69KKtoBX9350CcjrOO9l35LXuRIcy 5prv/87z3FeubBwf1TV4NAlNNCm700Fz4V8xbthnlanM11Oe1SsVLiws96nnd2dC PeCY6iR3P2yPjG0nsIxPXVu0P9JjukI= -----END CERTIFICATE-----Generated at Fri Sep 4 22:46:11 2026 by rpki-client