$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b511eb3-13df-3a35-aa23-93f899a7ad30.roa File: 1b511eb3-13df-3a35-aa23-93f899a7ad30.roa (raw, json) Hash identifier: YQiDIQHhBwq8/QAggmR8Z8Ot2f9mFr07qLxajccpW3E= Subject key identifier: 32:90:7F:F7:86:04:7C:CE:DA:37:5D:BB:72:A9:C2:DD:CB:16:3C:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8F3DAFCF51514ADA2000BDA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b511eb3-13df-3a35-aa23-93f899a7ad30.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 24319 IP address blocks: 72.246.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:af:cf:51:51:4a:da:20:00:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=29b50244-0bd8-446c-9456-04f7023aa795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:8a:62:f6:88:d0:26:2b:ca:2b:44:6e:00: bc:b7:ab:c0:7f:be:33:84:a0:d5:78:0b:70:7f:ab: 51:50:20:c8:22:a2:b2:38:b7:39:71:fb:ed:e5:27: eb:55:58:08:d7:f3:cb:85:6d:82:89:5d:e3:3f:c4: e8:e6:4a:07:ea:7e:63:8e:ab:36:c7:fd:d4:0e:9c: ad:79:ab:9a:d5:a4:f2:c0:de:63:ea:c9:82:a2:55: 23:29:29:15:2d:59:30:68:2c:a4:8e:2b:15:5f:b9: d6:6d:e1:71:cb:bc:9c:a5:32:88:4b:32:04:c4:82: 35:c1:3a:ac:df:da:0b:8e:0b:86:76:67:ab:62:50: 72:3b:b6:70:75:96:38:c4:e7:bb:6e:df:04:a8:f2: ca:68:68:54:3f:1b:e2:ae:c1:a3:3e:96:8c:c2:e7: 4b:01:bc:33:6b:2f:c1:bc:5b:c0:c6:03:98:80:92: ef:e3:ed:4c:83:91:75:29:a0:66:9e:54:01:a5:70: 6b:df:88:1c:26:6e:71:1b:50:30:09:a5:b1:e5:51: 7d:53:1b:25:c5:9f:5f:8e:b0:21:70:93:44:b7:f8: 85:97:0e:ef:ea:54:78:2d:2a:e4:a5:7f:80:24:17: 46:40:d9:6e:a5:b0:8c:7e:9d:53:e3:05:62:df:91: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:7F:F7:86:04:7C:CE:DA:37:5D:BB:72:A9:C2:DD:CB:16:3C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b511eb3-13df-3a35-aa23-93f899a7ad30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a1:75:8d:09:d8:9a:02:95:40:2c:d5:a5:57:ba:75:97:6f: b2:ac:77:18:fd:e4:c9:2e:44:3e:60:93:eb:3f:5a:8e:33:3f: 1c:e2:23:13:32:ff:40:d3:b4:04:e4:f8:1b:7f:5f:3b:51:61: dc:ab:81:3a:f5:fd:45:02:24:93:b3:22:f8:4b:ed:14:43:5f: 7e:a3:0f:02:33:20:3c:17:f0:0e:a4:ac:43:79:03:25:7b:17: a8:5a:cb:b2:ea:6b:f0:07:a0:8c:32:9d:58:a9:63:66:0f:7f: d2:12:21:f7:95:61:3c:b2:20:5c:43:16:2e:23:19:90:27:00: ba:9c:6b:cc:5f:a0:9f:d6:e1:27:28:b5:11:68:ff:d6:61:2b: 8b:be:e8:c3:f8:9e:7a:65:66:19:c4:cf:ef:11:4e:7f:62:04: 4d:46:f0:5c:6b:7c:7d:43:ff:24:65:12:a0:8f:76:9f:dd:00: 9f:e2:51:4b:0b:ff:fc:99:33:6d:d2:45:90:56:24:ac:f3:b6: bf:9d:1b:36:0f:da:18:89:7a:36:92:7f:92:be:58:73:4f:d7: 25:5e:90:19:33:c9:1e:8f:4f:dd:31:d0:d1:5a:93:64:1c:cf: af:50:2f:f1:00:e6:83:3d:93:b2:22:64:cc:05:6b:1a:7d:e7: df:c2:59:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPa/PUVFK2iAAvaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MjliNTAyNDQtMGJkOC00NDZjLTk0NTYtMDRmNzAyM2FhNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6eKYvaI0CYryitEbgC8t6vAf74zhKDVeAtw f6tRUCDIIqKyOLc5cfvt5SfrVVgI1/PLhW2CiV3jP8To5koH6n5jjqs2x/3UDpyt eaua1aTywN5j6smColUjKSkVLVkwaCykjisVX7nWbeFxy7ycpTKISzIExII1wTqs 39oLjguGdmerYlByO7ZwdZY4xOe7bt8EqPLKaGhUPxvirsGjPpaMwudLAbwzay/B vFvAxgOYgJLv4+1Mg5F1KaBmnlQBpXBr34gcJm5xG1AwCaWx5VF9UxslxZ9fjrAh cJNEt/iFlw7v6lR4LSrkpX+AJBdGQNlupbCMfp1T4wVi35EruwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKQf/eGBHzO2jddu3Kpwt3LFjxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI1MTFlYjMtMTNkZi0z YTM1LWFhMjMtOTNmODk5YTdhZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPY2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2hdY0J2JoClUAs1aVXunWXb7Ksdxj95MkuRD5gk+s/Wo4zPxziIxMy /0DTtATk+Bt/XztRYdyrgTr1/UUCJJOzIvhL7RRDX36jDwIzIDwX8A6krEN5AyV7 F6hay7Lqa/AHoIwynVipY2YPf9ISIfeVYTyyIFxDFi4jGZAnALqca8xfoJ/W4Sco tRFo/9ZhK4u+6MP4nnplZhnEz+8RTn9iBE1G8FxrfH1D/yRlEqCPdp/dAJ/iUUsL //yZM23SRZBWJKzztr+dGzYP2hiJejaSf5K+WHNP1yVekBkzyR6PT90x0NFak2Qc z69QL/EA5oM9k7IiZMwFaxp959/CWXA= -----END CERTIFICATE-----Generated at Sat Oct 24 10:43:27 2026 by rpki-client