$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/798f6856-53e6-31d9-85af-d4df7e02b8f0.roa File: 798f6856-53e6-31d9-85af-d4df7e02b8f0.roa (raw, json) Hash identifier: skZX/xbhN1QH1ijOg45YY9lBvc7pxvxePlVHoiA5muI= Subject key identifier: DE:11:7D:D7:7A:76:C2:6E:31:3E:8D:08:AA:68:17:85:BC:F5:1B:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F6C5820C214318BA1C5418980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/798f6856-53e6-31d9-85af-d4df7e02b8f0.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 32787 IP address blocks: 72.52.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:20:c2:14:31:8b:a1:c5:41:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=26c194e4-b861-4618-be7b-ed633ff48320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:02:bb:81:cb:83:40:cc:91:79:00:04:f2:18: a9:fe:0a:bb:e9:a5:f1:fd:72:bc:87:47:08:35:71: 25:38:0d:e4:99:3c:ef:41:e4:87:2b:7f:07:8a:78: 18:fb:cd:f4:32:9f:ed:0a:f6:38:7b:98:ae:99:6c: 66:5f:86:68:96:68:b1:a6:37:3a:c3:41:95:f7:cb: 82:e7:8b:07:fd:ad:31:a0:ea:0c:9a:78:0d:12:4d: 46:69:53:27:c1:66:86:96:13:02:bd:87:77:b0:96: 6e:b1:4f:c9:95:df:b3:18:b7:51:00:3e:2a:bd:02: bb:c2:6e:0c:5d:8a:7f:1f:08:f2:23:9b:64:5c:06: b1:2b:2d:7c:98:a3:70:81:13:cc:a5:69:3e:ae:2d: 47:2b:cf:35:18:59:22:cb:3c:e0:56:4b:a4:48:32: 47:6b:82:fd:99:ce:39:28:d2:c8:d8:6d:9a:1e:0a: 24:46:9b:83:0a:78:d5:2a:4f:84:55:db:d3:80:a4: fe:31:85:4d:c0:87:87:4d:46:ae:e0:2c:2c:fb:70: 9f:b4:94:28:da:2f:98:94:66:85:26:17:b5:83:b9: e9:d9:c0:dd:49:2a:e0:29:3e:5d:9c:91:b1:f3:f6: d8:c7:76:ed:fb:51:c1:b1:2c:f3:e1:00:6e:da:de: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:7D:D7:7A:76:C2:6E:31:3E:8D:08:AA:68:17:85:BC:F5:1B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/798f6856-53e6-31d9-85af-d4df7e02b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5a:62:b8:83:39:bb:10:b6:13:64:e4:1b:33:1f:94:97:29: b6:24:a8:da:f3:00:f9:6f:1c:a6:d1:fe:ed:f7:e1:3c:21:62: 81:0c:7e:6d:95:aa:1c:4e:8c:74:4b:d7:85:6d:78:55:56:c4: 19:04:3f:00:0c:72:54:3e:34:dd:c2:0e:a3:94:6e:d4:f8:f1: 38:5b:6e:0e:43:23:b4:62:86:53:04:b9:6f:9c:8d:e1:8c:0b: bb:63:90:6c:20:6e:b1:4f:4c:23:6e:88:b7:60:99:a0:a7:c8: 15:6b:4e:77:c4:72:02:16:8d:e5:24:a7:95:f8:7c:c8:5a:ad: ef:d9:d1:d6:79:e9:68:c6:3b:00:e6:83:0c:df:ea:e4:af:4a: ac:e8:00:52:90:90:e4:16:9e:9c:74:1c:bb:14:1c:9e:7b:6c: 34:da:2c:fe:62:55:85:4e:78:ff:41:de:d7:4a:bc:a3:6a:8d: 02:e1:44:01:e3:9c:8f:ae:f9:8d:63:1f:58:9d:2c:7b:f6:f2: a2:af:dd:29:9d:5a:00:d0:01:32:1b:62:d1:f3:62:d3:bd:0a: 71:1b:40:97:b7:12:62:4f:c3:a6:c5:b5:18:d4:56:e6:02:b9: 96:05:d0:3d:5c:24:3b:52:08:5c:06:db:1f:5c:d2:ee:62:78: b4:d2:3a:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWCDCFDGLocVBiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk MjZjMTk0ZTQtYjg2MS00NjE4LWJlN2ItZWQ2MzNmZjQ4MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAK7gcuDQMyReQAE8hip/gq76aXx/XK8h0cI NXElOA3kmTzvQeSHK38HingY+830Mp/tCvY4e5iumWxmX4Zolmixpjc6w0GV98uC 54sH/a0xoOoMmngNEk1GaVMnwWaGlhMCvYd3sJZusU/Jld+zGLdRAD4qvQK7wm4M XYp/HwjyI5tkXAaxKy18mKNwgRPMpWk+ri1HK881GFkiyzzgVkukSDJHa4L9mc45 KNLI2G2aHgokRpuDCnjVKk+EVdvTgKT+MYVNwIeHTUau4Cws+3CftJQo2i+YlGaF Jhe1g7np2cDdSSrgKT5dnJGx8/bYx3bt+1HBsSzz4QBu2t7D2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4Rfdd6dsJuMT6NCKpoF4W89RtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzk4ZjY4NTYtNTNlNi0z MWQ5LTg1YWYtZDRkZjdlMDJiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxaYriDObsQthNk5BszH5SXKbYkqNrzAPlvHKbR/u334TwhYoEMfm2V qhxOjHRL14VteFVWxBkEPwAMclQ+NN3CDqOUbtT48Thbbg5DI7RihlMEuW+cjeGM C7tjkGwgbrFPTCNuiLdgmaCnyBVrTnfEcgIWjeUkp5X4fMhare/Z0dZ56WjGOwDm gwzf6uSvSqzoAFKQkOQWnpx0HLsUHJ57bDTaLP5iVYVOeP9B3tdKvKNqjQLhRAHj nI+u+Y1jH1idLHv28qKv3SmdWgDQATIbYtHzYtO9CnEbQJe3EmJPw6bFtRjUVuYC uZYF0D1cJDtSCFwG2x9c0u5ieLTSOqk= -----END CERTIFICATE-----Generated at Sat Oct 24 18:58:24 2026 by rpki-client