$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa File: 4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa (raw, json) Hash identifier: ix4NEb8ePCvFdl1S53jd0wa0vOwOmNcsl86P4q0wm3E= Subject key identifier: 90:3A:90:8F:D5:8A:07:CC:5D:10:3D:77:91:22:09:B0:C3:30:B1:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4C54A85EDBE92DF549E20B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 20940 IP address blocks: 72.247.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a8:5e:db:e9:2d:f5:49:e2:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=b92bc763-ea21-4c4b-80e3-71a47c87bda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:09:4c:9c:52:70:42:0c:cd:cf:e8:d2:4b: 5f:bb:3f:de:de:4e:d4:17:1c:ed:a1:57:5c:f6:71: 0c:51:3b:fb:d3:52:b0:28:f3:77:04:99:03:44:81: 43:7c:30:6a:9d:17:18:30:db:dd:f6:36:10:78:2c: 75:7a:6f:a4:79:90:5b:d4:6e:a8:8b:c4:4b:80:3e: 00:b0:57:70:05:af:91:ed:de:b7:ed:a8:3a:8e:29: 78:42:98:a7:a4:84:e0:dc:0b:b0:79:58:41:1d:a5: ac:de:21:a2:c2:78:82:97:18:a4:90:5a:08:7d:f8: bf:ce:36:81:b4:2c:bb:c9:eb:d4:d5:6c:99:a4:f4: ed:66:b7:c9:77:dc:f6:75:6e:8d:ba:b0:fc:ef:ad: d3:b2:df:12:8d:73:91:f3:97:2e:0d:50:fa:b8:7b: 47:2d:60:80:ba:14:4f:a6:ff:d1:97:16:d7:fe:9c: ad:1f:81:49:59:3b:c4:cd:6f:9b:28:37:f4:f4:1e: 0b:f8:f5:ec:c2:02:37:23:e0:7f:17:12:73:0b:8f: 25:65:80:f0:17:ef:15:72:68:4c:93:0d:2b:03:af: 59:bb:08:9e:f2:ee:b7:08:37:49:b8:2d:b0:4a:01: 56:dc:e0:19:0e:04:f3:39:88:a2:1c:41:fd:a0:b4: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3A:90:8F:D5:8A:07:CC:5D:10:3D:77:91:22:09:B0:C3:30:B1:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:16:fe:95:a3:e3:1b:85:92:b1:08:2e:3b:b5:1c:bf:f3:48: e4:21:86:08:3c:81:c3:0c:9d:32:45:33:a2:62:3a:d8:12:e0: 35:9f:f8:03:25:f7:7e:9d:e0:c0:16:ac:05:c5:7c:1f:02:83: 62:e4:2a:70:5e:ec:2a:97:d5:51:83:a9:a1:83:ca:6e:e8:14: b3:2d:b6:bd:49:03:81:bb:bf:59:7b:82:aa:21:33:dd:2e:5e: c0:30:10:04:40:81:c4:78:be:4f:d2:98:41:67:36:4a:70:79: 97:77:82:89:a1:a6:52:47:9c:76:8d:99:8b:f6:c1:97:68:1c: 0c:13:9f:c9:6e:a3:e6:2d:66:5d:d9:92:32:a1:05:8a:bb:64: 5b:31:e3:9d:f7:27:04:48:29:50:3d:97:1d:eb:b0:cd:4c:7f: a0:98:1a:cd:1a:94:1b:6d:bc:e0:a1:bb:92:01:98:27:22:75: 78:5f:cf:10:51:a3:cc:12:70:cc:10:e1:9d:aa:57:9b:0a:34: d1:ad:58:d9:97:02:83:9e:ab:2c:8f:00:36:6f:09:c1:f7:a1: 03:15:ce:a7:03:d7:d5:1b:4b:4a:eb:fc:fb:f9:f6:5f:a2:38: 94:08:d4:22:5a:eb:ce:d0:2a:4c:c0:00:b7:c8:5c:ef:a9:de: c9:ba:95:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKhe2+kt9UniC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk YjkyYmM3NjMtZWEyMS00YzRiLTgwZTMtNzFhNDdjODdiZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrcJTJxScEIMzc/o0ktfuz/e3k7UFxztoVdc 9nEMUTv701KwKPN3BJkDRIFDfDBqnRcYMNvd9jYQeCx1em+keZBb1G6oi8RLgD4A sFdwBa+R7d637ag6jil4QpinpITg3AuweVhBHaWs3iGiwniClxikkFoIffi/zjaB tCy7yevU1WyZpPTtZrfJd9z2dW6NurD8763Tst8SjXOR85cuDVD6uHtHLWCAuhRP pv/RlxbX/pytH4FJWTvEzW+bKDf09B4L+PXswgI3I+B/FxJzC48lZYDwF+8VcmhM kw0rA69Zuwie8u63CDdJuC2wSgFW3OAZDgTzOYiiHEH9oLRXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA6kI/VigfMXRA9d5EiCbDDMLHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY0YmZjNTctNGNjYS0z MGI5LWJhYWMtNTRhNmQwYzJhNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4W/pWj4xuFkrEILju1HL/zSOQhhgg8gcMMnTJFM6JiOtgS4DWf+AMl 936d4MAWrAXFfB8Cg2LkKnBe7CqX1VGDqaGDym7oFLMttr1JA4G7v1l7gqohM90u XsAwEARAgcR4vk/SmEFnNkpweZd3gomhplJHnHaNmYv2wZdoHAwTn8luo+YtZl3Z kjKhBYq7ZFsx4533JwRIKVA9lx3rsM1Mf6CYGs0alBttvOChu5IBmCcidXhfzxBR o8wScMwQ4Z2qV5sKNNGtWNmXAoOeqyyPADZvCcH3oQMVzqcD19UbS0rr/Pv59l+i OJQI1CJa687QKkzAALfIXO+p3sm6lR0= -----END CERTIFICATE-----Generated at Tue Jul 21 19:59:14 2026 by rpki-client