$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a5f3c0-b4d7-36bc-a607-69636e5144c6.roa File: 88a5f3c0-b4d7-36bc-a607-69636e5144c6.roa (raw, json) Hash identifier: Ovn4Pzz9mXYQLpyFJqLnRJWMEkV/huiHroviW7EIQwg= Subject key identifier: 92:CB:8E:88:99:A0:DF:63:BF:FF:5C:23:85:08:0D:E1:BD:FC:48:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8B0DA7FBAB50B96272DCF000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a5f3c0-b4d7-36bc-a607-69636e5144c6.roa Signing time: Sun 18 Oct 2026 13:00:12 +0000 ROA not before: Sun 18 Oct 2026 13:00:12 +0000 ROA not after: Sat 16 Jan 2027 14:00:12 +0000 asID: 32787 IP address blocks: 72.52.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:0d:a7:fb:ab:50:b9:62:72:dc:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 13:00:12 2026 GMT Not After : Jan 16 14:00:12 2027 GMT Subject: CN=5c43b220-7d75-4209-8ce1-1efb41bfd8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:7d:f6:f0:c3:8a:e5:8f:d1:48:5a:1c:59: 43:6c:07:8c:24:da:66:46:26:7f:99:d9:22:21:82: 03:92:b6:0c:7a:9b:83:97:6d:7b:43:e8:a3:21:88: d6:54:56:e3:78:82:cc:4f:dc:51:2b:bb:c8:a7:f4: 42:93:ab:3f:0e:3d:cf:68:e1:ea:c2:6e:5e:a0:b6: 17:97:36:f7:b9:1f:b7:de:2b:f4:59:88:e3:e6:0c: 2d:b4:3b:33:df:49:15:22:b3:23:29:98:92:2a:48: 18:f8:6d:23:8e:19:c9:21:81:82:d1:b0:e4:35:7b: 23:46:df:cd:5d:a6:8f:85:8a:49:80:7a:4f:e3:aa: b3:e6:16:44:b3:e9:15:d2:90:84:09:a5:06:c7:5a: 80:89:3e:a8:db:af:f6:f0:c0:18:60:7a:02:10:06: d6:e5:ad:0a:19:6c:18:19:77:59:97:1d:31:ca:f6: 6a:25:0c:93:2b:e7:b4:77:7b:b8:ff:87:29:92:de: ae:0e:f4:8d:e8:ca:99:80:a9:2b:ea:2a:10:ef:94: 23:00:ff:78:6a:ef:06:9b:9a:20:f9:a2:34:18:86: e5:dd:6d:06:7d:c2:2e:1e:c5:94:60:ea:4e:23:a6: 4b:9d:8d:b4:48:ff:ed:44:38:0f:5f:32:60:11:8d: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CB:8E:88:99:A0:DF:63:BF:FF:5C:23:85:08:0D:E1:BD:FC:48:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a5f3c0-b4d7-36bc-a607-69636e5144c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1f:e6:8d:fb:78:f0:6d:24:ed:83:d8:71:20:85:85:d2:0b: 6f:1c:20:4e:c7:7a:9e:25:0b:3f:2c:6f:b2:d6:c1:20:a8:d0: 9e:22:51:07:93:de:18:8b:eb:30:02:86:a0:60:1f:dc:c7:c7: 0e:44:6c:f9:72:99:9d:d2:0f:04:0a:11:05:d8:6e:43:94:83: 23:a9:4c:17:96:ce:70:4c:fc:bc:46:d5:2c:4d:11:35:61:8e: 6e:cf:60:2d:b0:a1:60:d6:86:f7:15:ec:7d:e4:c5:1d:4b:f8: 3a:4f:6d:3e:da:39:74:a5:44:a1:58:d7:6d:73:75:57:e4:e1: 42:20:00:47:02:a5:c2:f3:1c:6d:20:f2:4c:a4:9e:b0:28:8a: b8:3d:f3:33:74:5f:11:0f:f3:1f:6f:7b:c0:0c:38:5e:c3:bc: 95:e6:52:c1:f7:f3:16:88:c6:92:15:64:81:44:13:ee:13:b8: 56:36:16:d3:42:0b:cf:1c:dd:4b:e6:7e:97:40:0b:8b:1d:18: 38:78:d2:83:6a:48:b5:41:0c:a8:f3:c7:16:d1:62:5d:f8:82: 66:fd:ce:a1:5d:02:45:3c:31:3d:59:01:ce:6f:a1:2f:41:e6: f6:58:a4:32:0f:ef:f6:38:2c:da:9d:d2:24:81:6a:2c:b9:af: 3f:5e:69:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+LDaf7q1C5YnLc8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxODEzMDAxMloXDTI3MDExNjE0MDAxMlowLzEtMCsGA1UEAxMk NWM0M2IyMjAtN2Q3NS00MjA5LThjZTEtMWVmYjQxYmZkOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bx99vDDiuWP0UhaHFlDbAeMJNpmRiZ/mdki IYIDkrYMepuDl217Q+ijIYjWVFbjeILMT9xRK7vIp/RCk6s/Dj3PaOHqwm5eoLYX lzb3uR+33iv0WYjj5gwttDsz30kVIrMjKZiSKkgY+G0jjhnJIYGC0bDkNXsjRt/N XaaPhYpJgHpP46qz5hZEs+kV0pCECaUGx1qAiT6o26/28MAYYHoCEAbW5a0KGWwY GXdZlx0xyvZqJQyTK+e0d3u4/4cpkt6uDvSN6MqZgKkr6ioQ75QjAP94au8Gm5og +aI0GIbl3W0GfcIuHsWUYOpOI6ZLnY20SP/tRDgPXzJgEY047wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLLjoiZoN9jv/9cI4UIDeG9/EjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhhNWYzYzAtYjRkNy0z NmJjLWE2MDctNjk2MzZlNTE0NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgf5o37ePBtJO2D2HEghYXSC28cIE7Hep4lCz8sb7LWwSCo0J4iUQeT 3hiL6zAChqBgH9zHxw5EbPlymZ3SDwQKEQXYbkOUgyOpTBeWznBM/LxG1SxNETVh jm7PYC2woWDWhvcV7H3kxR1L+DpPbT7aOXSlRKFY121zdVfk4UIgAEcCpcLzHG0g 8kyknrAoirg98zN0XxEP8x9ve8AMOF7DvJXmUsH38xaIxpIVZIFEE+4TuFY2FtNC C88c3UvmfpdAC4sdGDh40oNqSLVBDKjzxxbRYl34gmb9zqFdAkU8MT1ZAc5voS9B 5vZYpDIP7/Y4LNqd0iSBaiy5rz9eaUs= -----END CERTIFICATE-----Generated at Sun Oct 25 10:47:01 2026 by rpki-client