$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30752aae-ece1-3fe5-9ebb-bcd3410f36c8.roa File: 30752aae-ece1-3fe5-9ebb-bcd3410f36c8.roa (raw, json) Hash identifier: 9qA5joE+9BEHFoMkoR0b1SfCUk6o4ng1zDSNRp6Z4hQ= Subject key identifier: C3:AA:BC:AD:BA:23:A6:FF:A7:CA:93:CC:29:86:8A:ED:AC:07:71:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49765353EA12C3530AB3BA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30752aae-ece1-3fe5-9ebb-bcd3410f36c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32787 IP address blocks: 72.52.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:53:53:ea:12:c3:53:0a:b3:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=194b8b02-b2c1-48bf-a8b5-f9c09cdb10a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:3a:ad:42:a9:a3:a0:d1:0e:05:1b:f1:7e: 5b:25:c9:58:10:45:7a:b7:fc:bf:55:9d:a8:11:02: 81:47:f3:53:e5:3d:c3:fc:4a:21:a1:c9:12:90:ac: 2e:f6:55:5a:59:22:80:65:a3:26:b2:cb:88:d3:69: 63:56:c9:31:d0:6b:42:cb:b9:67:a2:91:b3:15:12: cc:16:ec:28:7d:e7:b5:bf:a3:b8:bf:12:e1:16:81: 6d:67:74:15:48:2d:45:a1:13:23:70:57:8b:d5:f8: d5:fa:f4:cf:d3:f5:98:3f:23:d9:1e:83:99:dc:2e: 7a:70:d5:db:bb:42:93:58:77:81:8c:76:6e:58:cb: f3:6c:10:f4:b0:e8:3d:8f:e3:9d:25:86:56:d7:c3: 55:12:c0:a7:34:5f:d2:1e:84:e7:33:5f:01:d0:21: db:de:c8:c4:e1:bc:10:a8:80:71:f5:f0:43:78:20: 0f:ac:21:db:c7:ad:f4:ac:e8:54:1d:49:81:92:cf: d7:e1:16:1c:db:00:d6:15:4b:e2:57:ca:11:5e:c9: d9:b8:ac:db:75:a7:f0:be:0d:41:b8:3e:f4:83:43: 43:a9:49:6a:a5:dd:81:47:2a:6c:10:33:85:69:b2: 50:b9:81:57:74:c1:d8:26:af:9d:df:46:3f:59:26: 55:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:BC:AD:BA:23:A6:FF:A7:CA:93:CC:29:86:8A:ED:AC:07:71:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30752aae-ece1-3fe5-9ebb-bcd3410f36c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:01:b2:60:71:dd:4d:b6:31:d2:41:65:77:cc:8f:1c:97:61: 95:4a:d9:5a:17:8e:75:17:87:c5:f6:0a:a9:9c:28:c6:89:71: ff:91:db:77:d0:f1:3e:92:cb:7c:db:3a:8b:af:50:1d:5d:54: ac:04:b9:83:a4:66:43:68:e6:26:ae:e2:80:fd:bb:80:e8:26: 23:c4:dd:eb:be:f6:68:b1:2a:34:2e:01:b4:62:ec:55:38:e5: 37:14:0d:ae:c1:37:73:82:5a:e0:39:8d:fa:90:c5:c8:07:03: 92:de:b0:93:62:70:1f:a9:2d:ef:c6:f9:80:f5:03:f1:83:4d: 90:b8:54:ee:e5:ab:89:51:fd:6b:95:07:aa:6e:6a:98:46:b5: 76:aa:ad:41:55:db:47:00:6c:20:a4:f1:0d:7b:61:44:2e:33: a5:44:33:19:86:63:6a:9d:a3:a5:0a:7b:32:f7:9e:96:b5:74: 12:85:a1:de:f6:29:3b:04:d7:02:d2:22:f6:40:f6:f6:84:0c: 77:00:04:9c:5c:7b:86:42:5c:2e:84:22:05:a6:07:f3:14:10: 11:09:17:00:5b:a1:1a:7c:50:e4:8c:b3:e7:2e:61:41:d3:17: 52:b7:a4:78:ce:ed:f8:98:e4:32:54:d6:21:f0:7f:63:5d:41: 1c:c8:33:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdlNT6hLDUwqzuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTk0YjhiMDItYjJjMS00OGJmLWE4YjUtZjljMDljZGIxMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCg6rUKpo6DRDgUb8X5bJclYEEV6t/y/VZ2o EQKBR/NT5T3D/EohockSkKwu9lVaWSKAZaMmssuI02ljVskx0GtCy7lnopGzFRLM Fuwofee1v6O4vxLhFoFtZ3QVSC1FoRMjcFeL1fjV+vTP0/WYPyPZHoOZ3C56cNXb u0KTWHeBjHZuWMvzbBD0sOg9j+OdJYZW18NVEsCnNF/SHoTnM18B0CHb3sjE4bwQ qIBx9fBDeCAPrCHbx630rOhUHUmBks/X4RYc2wDWFUviV8oRXsnZuKzbdafwvg1B uD70g0NDqUlqpd2BRypsEDOFabJQuYFXdMHYJq+d30Y/WSZV2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOqvK26I6b/p8qTzCmGiu2sB3F/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzA3NTJhYWUtZWNlMS0z ZmU1LTllYmItYmNkMzQxMGYzNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcBsmBx3U22MdJBZXfMjxyXYZVK2VoXjnUXh8X2CqmcKMaJcf+R23fQ 8T6Sy3zbOouvUB1dVKwEuYOkZkNo5iau4oD9u4DoJiPE3eu+9mixKjQuAbRi7FU4 5TcUDa7BN3OCWuA5jfqQxcgHA5LesJNicB+pLe/G+YD1A/GDTZC4VO7lq4lR/WuV B6puaphGtXaqrUFV20cAbCCk8Q17YUQuM6VEMxmGY2qdo6UKezL3npa1dBKFod72 KTsE1wLSIvZA9vaEDHcABJxce4ZCXC6EIgWmB/MUEBEJFwBboRp8UOSMs+cuYUHT F1K3pHjO7fiY5DJU1iHwf2NdQRzIM+w= -----END CERTIFICATE-----Generated at Fri Oct 23 08:49:57 2026 by rpki-client