$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa File: 821b4c9f-d1f4-39de-bddb-539d083748cb.roa (raw, json) Hash identifier: NTQzk+IaQMEhzITIv+Q3HoEb5o8FCBK4vfgnVhEpxx4= Subject key identifier: 5B:94:C0:3E:13:A6:E5:FE:9F:CA:64:5A:8B:C0:97:96:BA:65:ED:6E Certificate issuer: /CN=084cdd3f-c178-4428-8992-9e1b2922de98 Certificate serial: 010D0C9F4328584F6F23014AE61159BCCAE22340 Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 72.1.32.0/21 maxlen: 21 72.1.40.0/22 maxlen: 22 72.1.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:01:4a:e6:11:59:bc:ca:e2:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=be9130fa-6132-43bd-923f-7c0537e09a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:25:28:19:65:72:a6:30:01:29:b3:c6:a2: fc:90:10:b6:ea:15:95:d4:9b:a6:8b:f2:25:85:12: e1:8f:49:db:05:bf:56:86:65:fe:40:d1:c4:a1:7c: e7:00:96:f0:c5:ca:a7:f5:b4:9c:1d:55:93:34:8f: 93:b3:17:a7:e3:fe:7d:d2:f3:57:45:74:4c:fb:7e: 2d:e3:29:14:d8:d4:e8:54:92:a5:d1:fe:55:1a:9b: 5e:64:7b:7f:6a:ff:53:c8:b6:75:64:4e:37:a7:03: be:b1:c5:15:17:f9:ba:d6:ea:a6:f4:ab:05:a4:46: ca:a8:ad:97:cd:62:75:3e:85:6a:f2:84:7e:45:aa: c8:46:81:00:94:a9:54:d5:99:b6:c5:0c:47:89:2e: 11:dc:51:c4:5f:ba:55:e3:c4:af:b3:12:0f:25:b5: 86:8d:f6:45:68:1d:1a:4d:85:4a:ce:a1:8f:ec:33: 5c:0c:37:d3:46:36:6f:f0:1e:c4:e5:af:d4:d5:dc: 43:cf:a9:d8:26:89:c1:5e:53:bb:49:a7:1b:76:f3: 69:89:8c:f5:d9:a9:61:1f:6d:95:71:8e:a1:76:99: e6:9d:9f:fb:57:64:7b:32:1f:7d:38:bb:59:5e:c3: 83:3a:1b:02:13:e4:35:a5:9f:5e:b3:64:45:39:d5: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:C0:3E:13:A6:E5:FE:9F:CA:64:5A:8B:C0:97:96:BA:65:ED:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl X509v3 Authority Key Identifier: keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer sbgp-ipAddrBlock: critical IPv4: 72.1.32.0-72.1.45.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fc:a6:80:1f:4d:09:4f:ed:e7:3d:0b:cc:1f:12:8e:67:0c: d8:2e:7e:85:7e:1c:a5:4c:ad:59:51:b0:e9:39:12:0e:ce:de: 79:f5:4b:f8:12:f2:f2:fe:9c:fa:1f:d4:df:a2:98:24:10:93: 70:9a:7c:e3:65:5b:11:62:1d:86:96:78:77:74:32:c0:05:01: 62:a5:87:ca:96:ae:d3:00:23:38:8f:ae:a2:6a:40:4d:11:37: 25:e6:79:ef:eb:12:72:3a:c8:74:f3:b2:86:6b:e5:80:fa:96: 16:09:cd:80:81:0f:0e:70:67:15:c8:b2:25:06:d2:71:14:af: 11:ce:ff:53:eb:34:eb:19:3a:47:53:ad:35:51:a9:54:39:12: f0:86:5b:fd:1f:7e:bd:04:72:92:1c:56:23:1c:54:23:72:cc: 64:0b:3e:1c:bb:5a:9b:dd:1a:d8:64:aa:5b:d1:c4:cf:29:be: fa:f3:c4:c5:d0:00:64:20:00:a7:28:0d:b3:5a:69:0d:3e:f5: 83:0f:a5:b0:9c:50:bb:65:58:96:fa:97:6b:6d:4d:4f:f7:32: cf:67:50:60:f7:11:1f:a7:de:77:d0:2d:b4:13:a9:30:a6:4c: df:76:88:72:69:1e:1f:b1:3e:6e:01:d3:c2:54:cb:c7:20:3e: b1:e7:76:f7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9vIwFK5hFZvMriI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg0Y2RkM2YtYzE3OC00NDI4LTg5OTItOWUxYjI5MjJk ZTk4MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YmU5MTMwZmEtNjEzMi00M2JkLTkyM2YtN2MwNTM3ZTA5YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaUlKBllcqYwASmzxqL8kBC26hWV1Jumi/Il hRLhj0nbBb9WhmX+QNHEoXznAJbwxcqn9bScHVWTNI+Tsxen4/590vNXRXRM+34t 4ykU2NToVJKl0f5VGpteZHt/av9TyLZ1ZE43pwO+scUVF/m61uqm9KsFpEbKqK2X zWJ1PoVq8oR+RarIRoEAlKlU1Zm2xQxHiS4R3FHEX7pV48SvsxIPJbWGjfZFaB0a TYVKzqGP7DNcDDfTRjZv8B7E5a/U1dxDz6nYJonBXlO7SacbdvNpiYz12alhH22V cY6hdpnmnZ/7V2R7Mh99OLtZXsODOhsCE+Q1pZ9es2RFOdWWzQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFuUwD4TpuX+n8pkWovAl5a6Ze1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wODRj ZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjkyMmRlOTgvODIxYjRjOWYtZDFmNC0z OWRlLWJkZGItNTM5ZDA4Mzc0OGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDg0Y2RkM2YtYzE3OC00NDI4LTg5 OTItOWUxYjI5MjJkZTk4LzA4NGNkZDNmLWMxNzgtNDQyOC04OTkyLTllMWIyOTIy ZGU5OC5jcmwwHwYDVR0jBBgwFoAUa7qSaWoduYwL8eLYAcm3oYXsfmUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFi MjkyMmRlOTguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVIASAD BAFIASwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANfymgB9NCU/t5z0LzB8SjmcM2C5+hX4cpUytWVGw6TkS Ds7eefVL+BLy8v6c+h/U36KYJBCTcJp842VbEWIdhpZ4d3QywAUBYqWHypau0wAj OI+uompATRE3JeZ57+sScjrIdPOyhmvlgPqWFgnNgIEPDnBnFciyJQbScRSvEc7/ U+s06xk6R1OtNVGpVDkS8IZb/R9+vQRykhxWIxxUI3LMZAs+HLtam90a2GSqW9HE zym++vPExdAAZCAApygNs1ppDT71gw+lsJxQu2VYlvqXa21NT/cyz2dQYPcRH6fe d9AttBOpMKZM33aIcmkeH7E+bgHTwlTLxyA+sed29w== -----END CERTIFICATE-----Generated at Fri Oct 9 23:34:54 2026 by rpki-client