$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa File: 7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa (raw, json) Hash identifier: mwUsrPNi0rl6vDepMiR2OaRB9eKYXVnK/VpLToXU0ZU= Subject key identifier: 91:D5:F7:FA:BD:B8:90:DB:77:03:5A:12:8A:B1:FD:DB:9D:29:32:7D Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F4C3D43161E9DCE4473A10940 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 55286 IP address blocks: 72.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:43:16:1e:9d:ce:44:73:a1:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=21975911-e7b9-4b0b-8aae-c1c97d9c1d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:d6:ed:dd:ab:16:bc:66:63:78:7f:83:2f: fc:c7:18:2f:17:18:de:67:3e:08:ad:c4:93:d8:6b: 9e:13:22:9e:73:41:e6:00:64:86:b7:0c:6e:52:b1: c3:75:84:20:d8:1a:b8:6b:27:eb:72:62:25:70:95: 4d:3a:96:79:85:94:45:74:77:67:2b:15:26:21:32: 0e:03:74:55:a8:be:e1:b2:27:7e:56:b5:50:4c:cb: 0c:c1:d5:1b:84:b9:e4:ce:84:14:38:46:ec:dd:31: f5:fe:ae:26:a5:af:dc:ca:2e:bf:ea:a2:7a:82:e2: 8e:8c:c3:cb:16:ba:a7:a6:12:95:ed:bc:0d:fb:9b: 4d:1f:ac:1f:ac:b8:2f:99:9a:dc:43:28:c1:f6:d3: 02:5c:fc:26:7d:f2:28:16:71:e5:2f:14:63:2d:1c: 4c:00:9f:7b:ba:3d:8e:99:05:9c:96:52:00:b8:cf: 90:a0:19:39:1f:ec:e1:22:c4:0e:bf:30:cd:b5:ff: d8:78:1d:5f:35:74:d5:46:a4:a2:05:20:cb:e2:84: 6a:d2:0c:c8:25:e0:34:a4:d2:34:b6:90:39:23:d1: d3:d0:95:5f:f4:be:87:77:47:9d:6d:99:4f:95:d5: 8a:44:79:58:dc:db:c9:33:2a:3b:17:5f:09:1f:cc: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D5:F7:FA:BD:B8:90:DB:77:03:5A:12:8A:B1:FD:DB:9D:29:32:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 72.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b6:1a:96:3f:99:c3:32:c4:7e:05:aa:c6:31:db:03:67:a3: 31:b6:19:d0:c9:29:f5:82:d9:e8:9c:ba:30:71:9f:2d:cc:ac: e3:09:7d:06:f4:94:1c:5d:a3:82:e8:c8:ce:ec:72:91:43:e5: d2:28:66:6f:0a:1c:0a:7e:5a:4d:c4:7d:81:88:a4:5c:20:17: ae:59:9e:83:65:a3:59:62:57:72:73:67:14:76:ca:4b:88:66: 97:23:58:d6:8d:68:4b:9d:9a:56:51:fb:27:a0:76:bf:5c:87: af:72:34:5d:d2:ba:f6:6b:3d:25:ca:81:13:f6:c4:bd:47:f0: 11:aa:5a:04:b2:71:ec:60:dd:f5:5e:55:b1:4e:ee:21:84:3c: 6c:e6:f1:90:95:e2:86:34:64:68:74:1e:40:5b:91:6d:c7:4d: 6d:87:9a:74:d0:87:4a:f9:da:a3:f2:09:42:69:95:65:61:c7: 57:7f:93:70:b0:97:72:be:b2:15:51:75:99:19:0a:6c:4e:1e: 0d:32:13:bf:e3:da:f4:27:49:01:b5:35:e1:ad:4d:46:96:08: 36:36:c1:33:0e:bd:91:3e:68:82:ef:6b:05:ab:79:f0:3e:6f: 82:92:9d:15:de:96:77:b8:29:84:a1:ca:33:1f:04:86:09:03: a2:d9:3e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUMWHp3ORHOhCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjE5NzU5MTEtZTdiOS00YjBiLThhYWUtYzFjOTdkOWMxZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuHW7d2rFrxmY3h/gy/8xxgvFxjeZz4IrcST 2GueEyKec0HmAGSGtwxuUrHDdYQg2Bq4ayfrcmIlcJVNOpZ5hZRFdHdnKxUmITIO A3RVqL7hsid+VrVQTMsMwdUbhLnkzoQUOEbs3TH1/q4mpa/cyi6/6qJ6guKOjMPL FrqnphKV7bwN+5tNH6wfrLgvmZrcQyjB9tMCXPwmffIoFnHlLxRjLRxMAJ97uj2O mQWcllIAuM+QoBk5H+zhIsQOvzDNtf/YeB1fNXTVRqSiBSDL4oRq0gzIJeA0pNI0 tpA5I9HT0JVf9L6Hd0edbZlPldWKRHlY3NvJMyo7F18JH8wz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHV9/q9uJDbdwNaEoqx/dudKTJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvN2Y2M2Y3NmItNWQ4YS0z YzNlLTliZDMtOTA3Zjk3NWExMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy2GpY/mcMyxH4FqsYx2wNnozG2GdDJKfWC2eicujBxny3MrOMJfQb0 lBxdo4LoyM7scpFD5dIoZm8KHAp+Wk3EfYGIpFwgF65ZnoNlo1liV3JzZxR2ykuI ZpcjWNaNaEudmlZR+yegdr9ch69yNF3SuvZrPSXKgRP2xL1H8BGqWgSycexg3fVe VbFO7iGEPGzm8ZCV4oY0ZGh0HkBbkW3HTW2HmnTQh0r52qPyCUJplWVhx1d/k3Cw l3K+shVRdZkZCmxOHg0yE7/j2vQnSQG1NeGtTUaWCDY2wTMOvZE+aILvawWrefA+ b4KSnRXelne4KYShyjMfBIYJA6LZPpI= -----END CERTIFICATE-----Generated at Wed Oct 14 18:49:27 2026 by rpki-client