
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa
File: 6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa (raw, json)
Hash identifier: 5/wZJe4BZnC8GQdSocDlvQKP3WwVDRJhWG5EJTjbZ4A=
Subject key identifier: EC:C8:F4:86:3F:B7:A0:87:13:2F:95:47:AC:AC:1C:FF:FE:D4:D4:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E46BF2B541AFA1D9369CD94C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa
Signing time: Wed 24 Jun 2026 09:00:12 +0000
ROA not before: Wed 24 Jun 2026 09:00:12 +0000
ROA not after: Tue 22 Sep 2026 09:00:12 +0000
asID: 32787
IP address blocks: 72.52.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:46:bf:2b:54:1a:fa:1d:93:69:cd:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 24 09:00:12 2026 GMT
Not After : Sep 22 09:00:12 2026 GMT
Subject: CN=90dcd2dc-d93b-4941-8cf0-65826e0b8bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:9d:3a:1d:6a:77:8a:c9:2c:1c:27:18:a9:
be:52:bd:c8:8f:cf:26:5a:a3:13:a2:c1:7b:8b:20:
da:97:94:67:5d:32:7f:95:dc:bc:6b:c5:ab:8b:af:
a9:df:7a:a5:a5:7d:87:10:ed:bd:a1:fc:2c:34:5a:
a9:f3:7f:2c:4d:b3:46:56:b6:08:42:e9:01:29:57:
f8:ad:bb:ec:b9:a8:92:77:8f:a7:77:22:5e:cc:c7:
af:61:c8:85:d0:ee:1a:69:a0:2a:ff:1b:bb:fb:34:
1f:54:57:4f:9b:a3:c5:c7:83:13:f2:a2:db:36:f3:
f8:9e:2b:51:d2:e4:eb:60:d5:5d:54:f1:35:57:34:
f1:f8:20:c8:54:e5:89:e5:29:74:2f:4a:64:9c:b8:
8a:ca:f2:a6:61:f7:91:62:a7:5c:af:be:ae:70:4d:
83:e7:c9:1e:59:65:70:f3:c2:a1:05:3b:91:67:a4:
e2:a5:25:dc:79:12:0d:82:51:37:5e:31:69:91:3c:
2a:8e:87:88:0c:9f:66:78:ce:f2:20:14:ad:12:7b:
02:39:76:95:c8:8c:7f:15:4a:4b:8b:d1:b8:5a:48:
49:79:7c:75:82:c9:b1:0f:2f:93:b4:de:1b:47:46:
87:e8:4c:a0:84:c0:d5:2f:16:6e:1c:67:c2:50:14:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C8:F4:86:3F:B7:A0:87:13:2F:95:47:AC:AC:1C:FF:FE:D4:D4:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bfaf1ab-e435-3fb8-ba9c-c702af77f038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:32:10:b4:6e:ed:65:e6:cf:c3:4a:26:06:1b:81:42:94:9a:
e5:ac:a3:9b:c1:34:8c:3b:b2:68:ee:76:80:a8:a1:8f:d7:f6:
8f:76:6d:67:88:52:b0:8d:21:8d:48:a7:8b:57:dc:31:98:06:
50:d8:d0:bf:c5:4d:fe:ad:04:24:3d:26:b7:21:9d:a9:75:16:
fe:c6:1a:3e:20:0a:e0:d5:64:c7:d0:bb:95:42:b9:75:e7:01:
3b:63:4c:a5:67:3a:bf:5f:a9:36:8a:73:10:da:54:30:ae:60:
e5:58:ce:26:fc:34:77:a3:41:b0:60:ba:55:6b:43:c0:84:df:
7b:47:d7:af:05:ec:0a:68:09:6f:53:80:71:5a:4b:fb:6e:31:
e6:90:f5:9c:99:80:6f:95:24:87:83:60:54:57:97:fa:88:1e:
f3:c3:9e:3c:8b:d5:95:c4:97:25:72:aa:20:c4:e2:88:eb:4b:
ae:c6:e7:e4:81:b9:71:8b:ff:5e:30:f1:5b:81:c8:3f:b7:37:
d4:2a:af:e6:1f:84:ef:e7:fd:7c:7c:66:5a:8b:ec:a5:66:9f:
be:bb:11:cb:6d:90:fa:44:d7:93:04:32:83:ea:73:2a:33:1d:
1f:8c:f8:22:57:30:01:6e:8f:46:f6:12:fd:eb:60:50:c8:07:
64:4d:15:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GvytUGvodk2nNlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk
OTBkY2QyZGMtZDkzYi00OTQxLThjZjAtNjU4MjZlMGI4YmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklWdOh1qd4rJLBwnGKm+Ur3Ij88mWqMTosF7
iyDal5RnXTJ/ldy8a8Wri6+p33qlpX2HEO29ofwsNFqp838sTbNGVrYIQukBKVf4
rbvsuaiSd4+ndyJezMevYciF0O4aaaAq/xu7+zQfVFdPm6PFx4MT8qLbNvP4nitR
0uTrYNVdVPE1VzTx+CDIVOWJ5Sl0L0pknLiKyvKmYfeRYqdcr76ucE2D58keWWVw
88KhBTuRZ6TipSXceRINglE3XjFpkTwqjoeIDJ9meM7yIBStEnsCOXaVyIx/FUpL
i9G4WkhJeXx1gsmxDy+TtN4bR0aH6EyghMDVLxZuHGfCUBTtqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzI9IY/t6CHEy+VR6ysHP/+1NTPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJmYWYxYWItZTQzNS0z
ZmI4LWJhOWMtYzcwMmFmNzdmMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIyELRu7WXmz8NKJgYbgUKUmuWso5vBNIw7smjudoCooY/X9o92bWeI
UrCNIY1Ip4tX3DGYBlDY0L/FTf6tBCQ9Jrchnal1Fv7GGj4gCuDVZMfQu5VCuXXn
ATtjTKVnOr9fqTaKcxDaVDCuYOVYzib8NHejQbBgulVrQ8CE33tH168F7ApoCW9T
gHFaS/tuMeaQ9ZyZgG+VJIeDYFRXl/qIHvPDnjyL1ZXElyVyqiDE4ojrS67G5+SB
uXGL/14w8VuByD+3N9Qqr+YfhO/n/Xx8ZlqL7KVmn767EcttkPpE15MEMoPqcyoz
HR+M+CJXMAFuj0b2Ev3rYFDIB2RNFV4=
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:11:30 2026 by rpki-client