$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa File: 5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa (raw, json) Hash identifier: qXP+TL5IQ1Q5mr+R6oRYfF8+ekEbSbNwj3GNRTPah10= Subject key identifier: 57:9F:FA:40:18:20:7C:67:A7:8E:E6:E4:EE:19:64:1D:FF:6B:31:FB Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584F4F0808838DFDBBDAF95847C0 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 72.0.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:08:83:8d:fd:bb:da:f9:58:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=4fa794e5-f774-4105-a21b-daf511bb746c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:6c:18:12:81:ab:ce:b5:9f:dd:d8:a9:35: 9e:70:d2:a2:bd:67:32:95:53:14:91:12:92:f2:c1: 73:c7:1b:4b:3c:46:2a:99:01:6e:0a:dd:c1:cb:2f: 0e:3c:2d:b6:0a:8f:11:29:34:75:d5:66:fb:2b:49: ed:50:59:ad:2a:42:c4:15:1a:a9:aa:25:5f:8d:0a: 3b:d2:9d:d2:25:74:76:70:ef:7e:3a:80:45:35:d8: 8d:5b:1d:cb:85:ce:f1:1e:3c:27:8e:8e:37:ab:37: a0:41:39:9f:22:24:d7:d7:e6:36:a6:fc:4c:d5:1e: e1:b3:17:11:68:df:72:82:b1:06:6f:f3:da:98:57: 14:74:80:4f:b4:28:6d:ab:30:1a:fd:d4:a0:a4:1b: 09:3a:2c:81:7d:aa:82:9a:cc:6b:d0:7e:ed:11:92: 1e:0c:b0:0b:c1:83:29:e8:40:e9:41:50:62:0a:76: 09:4a:1c:f5:c6:70:5a:51:01:93:e3:63:a8:c2:3a: c5:c1:96:a5:4a:ae:58:82:14:65:7b:72:6a:61:fd: 34:af:84:da:7e:da:be:4f:bc:cc:1e:86:a0:54:d7: 73:0c:fb:e0:c2:d6:98:06:6c:e4:b0:f8:53:1d:f2: 72:a2:ee:20:3a:ca:4b:f6:fc:b0:3f:a6:22:5b:c8: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:FA:40:18:20:7C:67:A7:8E:E6:E4:EE:19:64:1D:FF:6B:31:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b2:e3:93:9d:70:77:ce:1f:e3:60:3a:10:47:9e:f4:a1:83: fa:d4:da:b4:db:aa:9e:34:dc:ec:f1:e9:b4:56:e5:52:8f:f9: 90:22:28:c1:50:db:df:1d:d8:59:85:5d:6b:1a:3e:af:ad:a8: a4:92:e7:93:31:30:38:24:91:84:33:e7:94:f6:40:f0:22:6f: 40:b6:7d:1a:7d:79:81:6c:2a:0f:42:0c:fc:eb:27:90:9b:bf: a7:b8:4c:a6:80:ee:3d:20:e3:21:1a:7e:4f:8b:8a:a7:46:ec: a6:c1:ba:5d:be:58:34:6c:00:dc:cc:b8:6b:e0:84:df:8f:92: 12:31:3a:66:f0:ff:7e:bc:91:79:75:10:e2:8c:fa:89:8d:9e: 31:d2:39:54:eb:f5:ab:0a:f0:d2:3b:9c:d5:8c:34:25:06:42: c1:7c:62:11:ba:e4:cf:ee:b5:90:49:d9:d9:46:35:08:cf:15: 7c:52:12:0d:dc:97:ae:0b:1d:82:12:f7:24:63:ed:17:b2:a3: 41:39:bc:e1:2a:2c:e9:0d:10:19:9e:08:ea:66:74:be:f1:40: e0:ae:47:0d:e4:26:65:7d:17:36:ac:29:2b:cc:b6:21:e6:d4: 39:35:b9:49:7f:2a:fe:7c:1b:88:71:16:53:1e:c6:fd:b4:6c: 80:60:09:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAiDjf272vlYR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NGZhNzk0ZTUtZjc3NC00MTA1LWEyMWItZGFmNTExYmI3NDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5hsGBKBq861n93YqTWecNKivWcylVMUkRKS 8sFzxxtLPEYqmQFuCt3Byy8OPC22Co8RKTR11Wb7K0ntUFmtKkLEFRqpqiVfjQo7 0p3SJXR2cO9+OoBFNdiNWx3Lhc7xHjwnjo43qzegQTmfIiTX1+Y2pvxM1R7hsxcR aN9ygrEGb/PamFcUdIBPtChtqzAa/dSgpBsJOiyBfaqCmsxr0H7tEZIeDLALwYMp 6EDpQVBiCnYJShz1xnBaUQGT42OowjrFwZalSq5YghRle3JqYf00r4Taftq+T7zM HoagVNdzDPvgwtaYBmzksPhTHfJyou4gOspL9vywP6YiW8iXSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFef+kAYIHxnp47m5O4ZZB3/azH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvNWVmMjRiYTAtNTNlNC0z OWE0LTllODItMmExZmYwMDc4NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiy45OdcHfOH+NgOhBHnvShg/rU2rTbqp403Ozx6bRW5VKP+ZAiKMFQ 298d2FmFXWsaPq+tqKSS55MxMDgkkYQz55T2QPAib0C2fRp9eYFsKg9CDPzrJ5Cb v6e4TKaA7j0g4yEafk+LiqdG7KbBul2+WDRsANzMuGvghN+PkhIxOmbw/368kXl1 EOKM+omNnjHSOVTr9asK8NI7nNWMNCUGQsF8YhG65M/utZBJ2dlGNQjPFXxSEg3c l64LHYIS9yRj7Reyo0E5vOEqLOkNEBmeCOpmdL7xQOCuRw3kJmV9FzasKSvMtiHm 1Dk1uUl/Kv58G4hxFlMexv20bIBgCSA= -----END CERTIFICATE-----Generated at Tue Oct 6 20:34:36 2026 by rpki-client