$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e48e6e23-43db-3cf8-b997-18f21cdd4538.roa File: e48e6e23-43db-3cf8-b997-18f21cdd4538.roa (raw, json) Hash identifier: GJLjrv1DelqjNlztipBsBCG8MtLOt+s3tR9YN8U838U= Subject key identifier: CE:47:11:5E:50:3D:0B:4B:39:25:51:D4:9C:0C:A6:CF:E3:C8:F4:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A313A1025415410A049D60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e48e6e23-43db-3cf8-b997-18f21cdd4538.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 72.247.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:13:a1:02:54:15:41:0a:04:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=c1046882-127f-4a91-9060-2fab47443310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:43:cf:ad:1f:62:7c:89:fc:08:bf:8a:3e:83: 5b:8a:44:97:b2:7f:92:79:91:88:84:98:e9:84:11: de:c7:4d:7b:cc:38:c8:52:66:2e:d7:2b:4c:eb:42: 95:89:56:ba:3f:d8:9c:66:34:52:be:8f:eb:71:05: 11:ea:88:fb:8d:52:59:6f:ee:86:24:a8:6e:92:eb: 64:d0:d9:52:9e:91:e6:05:7f:64:62:2b:bc:29:a0: f7:51:71:54:a7:86:7f:03:ec:36:86:91:9d:fc:46: 68:ca:84:3b:89:4c:cd:ac:64:45:11:83:8f:23:b9: 80:d1:84:dc:4d:75:f0:1e:1c:7e:1d:e0:fc:c3:eb: 88:89:b7:7d:61:1f:9f:70:fd:3f:09:2c:ff:13:3f: a6:2a:8e:6b:4e:3f:c8:dc:94:ae:02:7c:4c:02:da: 33:59:1e:4e:02:fb:ae:76:33:00:0b:cf:a5:fd:ee: 74:03:29:30:03:41:95:56:0c:be:99:76:1c:5d:9c: e3:78:a3:56:97:59:4a:db:fb:b8:e5:8e:8a:70:c9: 1a:ff:d5:63:d1:c9:af:ad:e7:cd:be:d5:91:ce:2a: 54:f6:e5:9c:d3:6c:3e:92:33:76:7c:50:99:74:9c: 35:95:82:f8:4a:24:77:02:07:e6:4f:0b:b0:9e:3e: 3d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:47:11:5E:50:3D:0B:4B:39:25:51:D4:9C:0C:A6:CF:E3:C8:F4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e48e6e23-43db-3cf8-b997-18f21cdd4538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0a:73:51:9f:fc:36:37:b3:3d:c2:1b:68:c4:89:6c:1f:88: 18:f0:6f:a6:a9:52:d6:7b:68:d7:69:80:41:6e:3e:cd:66:26: 48:fd:63:89:14:0d:63:17:54:a1:b9:0b:eb:67:f8:d3:74:6c: ce:b6:c8:bf:44:a1:b1:1e:1c:6c:f3:e3:ce:31:fb:0b:c0:1e: 60:30:f0:70:4b:8b:36:00:ce:5d:6a:e8:54:f0:83:49:30:b5: 27:89:6b:12:0c:19:8b:a9:19:e4:a5:62:14:20:60:e5:5e:af: c5:cb:4e:b6:8e:da:17:e5:c3:59:a5:84:53:51:2c:ec:5e:48: 4f:62:c8:2b:63:5d:9a:f8:a5:43:c0:34:55:e8:a2:2c:a3:a5: db:fa:88:0d:03:b3:b6:4d:7f:23:8b:a2:51:1a:f0:80:5e:96: e6:2b:5c:11:44:70:54:34:4e:3f:03:ef:cb:83:81:26:6e:1f: 97:ec:22:bd:78:43:ed:f4:bc:20:5d:ce:a0:09:10:88:2e:61: a1:45:46:c9:b4:5a:34:66:cf:91:e5:4c:87:a1:60:bb:bd:2b: 91:d8:62:21:75:68:67:1b:a9:b2:ef:2b:97:de:0a:99:77:57: b3:c6:23:13:bc:e8:6a:03:2f:92:6d:7e:b2:1b:38:ba:02:a5: 9f:4d:9e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxOhAlQVQQoEnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk YzEwNDY4ODItMTI3Zi00YTkxLTkwNjAtMmZhYjQ3NDQzMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EPPrR9ifIn8CL+KPoNbikSXsn+SeZGIhJjp hBHex017zDjIUmYu1ytM60KViVa6P9icZjRSvo/rcQUR6oj7jVJZb+6GJKhukutk 0NlSnpHmBX9kYiu8KaD3UXFUp4Z/A+w2hpGd/EZoyoQ7iUzNrGRFEYOPI7mA0YTc TXXwHhx+HeD8w+uIibd9YR+fcP0/CSz/Ez+mKo5rTj/I3JSuAnxMAtozWR5OAvuu djMAC8+l/e50AykwA0GVVgy+mXYcXZzjeKNWl1lK2/u45Y6KcMka/9Vj0cmvrefN vtWRzipU9uWc02w+kjN2fFCZdJw1lYL4SiR3AgfmTwuwnj49ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5HEV5QPQtLOSVR1JwMps/jyPQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ4ZTZlMjMtNDNkYi0z Y2Y4LWI5OTctMThmMjFjZGQ0NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkKc1Gf/DY3sz3CG2jEiWwfiBjwb6apUtZ7aNdpgEFuPs1mJkj9Y4kU DWMXVKG5C+tn+NN0bM62yL9EobEeHGzz484x+wvAHmAw8HBLizYAzl1q6FTwg0kw tSeJaxIMGYupGeSlYhQgYOVer8XLTraO2hflw1mlhFNRLOxeSE9iyCtjXZr4pUPA NFXooiyjpdv6iA0Ds7ZNfyOLolEa8IBeluYrXBFEcFQ0Tj8D78uDgSZuH5fsIr14 Q+30vCBdzqAJEIguYaFFRsm0WjRmz5HlTIehYLu9K5HYYiF1aGcbqbLvK5feCpl3 V7PGIxO86GoDL5JtfrIbOLoCpZ9NnoM= -----END CERTIFICATE-----Generated at Wed Oct 21 22:58:19 2026 by rpki-client