$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ff5652a-5221-3179-83f7-94be4ac19809.roa File: 1ff5652a-5221-3179-83f7-94be4ac19809.roa (raw, json) Hash identifier: vob1sKKQQk57xw884XXwvCNl4LkVF7sKIMZo8sKQz6o= Subject key identifier: A9:DC:02:3D:39:2C:6A:7A:8B:39:B2:A0:3A:86:66:38:80:AE:DD:6B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EA787F30C8BC33C53806EBF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ff5652a-5221-3179-83f7-94be4ac19809.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 132372 IP address blocks: 172.94.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f3:0c:8b:c3:3c:53:80:6e:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b6986a60-366b-486f-9768-3d59e4749bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:36:e2:4d:d9:6a:ef:40:88:49:6e:cf:42: 12:0f:78:0c:b0:26:25:62:1a:9c:3f:b2:2b:6d:82: 79:ca:28:19:ea:a1:bb:81:78:e4:43:10:36:94:27: 1c:2a:e0:d9:a9:9a:cd:de:2d:ac:40:89:35:f4:2a: 23:60:ac:3d:97:e5:2e:ab:b1:93:97:da:8c:21:c8: 19:1e:62:75:d5:53:f2:2f:76:5b:2e:f9:a9:73:8e: 73:95:a0:15:2d:a9:06:d6:ee:27:f8:9c:01:1c:d8: 29:49:27:a4:71:37:08:3a:96:5d:ff:76:d2:be:5d: 30:75:46:4a:17:c3:30:9b:90:a5:d6:a9:49:e0:44: 1d:17:86:c9:5f:d0:f4:ac:ec:b2:02:43:1e:be:e7: ab:39:78:f0:16:1f:5b:8e:ff:5a:f1:62:da:e0:7c: d0:85:a1:56:bc:ed:5b:4e:32:5c:6b:86:ec:a4:8c: 52:47:4b:a9:fd:7b:44:54:bb:8d:78:ab:ff:17:0b: d6:10:44:71:d9:b0:6a:9e:47:c2:7a:99:be:86:b8: ca:27:1f:54:75:c8:af:01:d6:c0:23:ff:61:dc:05: 77:75:3f:2c:dd:73:d7:9b:71:a0:56:cc:a7:24:52: 92:7a:79:1f:6a:1f:68:1f:90:34:13:7c:52:26:c2: 0f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DC:02:3D:39:2C:6A:7A:8B:39:B2:A0:3A:86:66:38:80:AE:DD:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ff5652a-5221-3179-83f7-94be4ac19809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:40:97:69:08:ac:b4:b3:85:2c:6c:25:54:45:41:4b:50:db: 06:d5:81:a5:1b:61:f3:00:eb:36:ba:8e:cb:63:0b:ab:25:2a: 8f:1f:6b:7e:52:7c:98:68:e8:46:2b:6c:f0:31:f3:9f:89:fa: 76:55:23:cf:5b:35:ba:a9:ee:9d:cc:8e:27:a6:37:dc:0e:63: ce:25:8f:7c:4b:e5:7a:f0:f5:f6:f9:94:bd:45:55:3b:19:f6: 36:2f:41:3a:3e:8a:8f:16:88:14:e9:c7:2a:d5:75:da:da:51: 00:76:32:8f:01:6e:00:dd:07:92:d4:d8:fa:4c:ca:9e:7b:d6: eb:fb:72:9c:9e:38:c9:65:2a:9b:a3:98:a6:64:87:92:5f:b0: a3:ef:e9:9b:18:14:d1:17:8b:87:d0:67:46:96:a7:a6:b5:f7: a9:78:af:94:92:83:6e:de:8c:2f:a2:c9:d4:d6:20:53:10:f6: ed:89:f3:64:c5:90:51:84:83:9b:2a:18:f9:cd:28:a5:99:5e: ba:03:ac:6a:11:7d:9d:94:71:01:90:73:84:4c:62:01:82:6d: 08:26:e2:75:f3:f2:0a:76:e0:b8:d6:bc:74:f5:41:c7:c2:38: ca:b3:23:49:42:0c:e6:63:8b:68:31:e0:20:f3:67:ea:60:49: 21:7d:8d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/MMi8M8U4BuvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjY5ODZhNjAtMzY2Yi00ODZmLTk3NjgtM2Q1OWU0NzQ5YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0I24k3Zau9AiEluz0ISD3gMsCYlYhqcP7Ir bYJ5yigZ6qG7gXjkQxA2lCccKuDZqZrN3i2sQIk19CojYKw9l+Uuq7GTl9qMIcgZ HmJ11VPyL3ZbLvmpc45zlaAVLakG1u4n+JwBHNgpSSekcTcIOpZd/3bSvl0wdUZK F8Mwm5Cl1qlJ4EQdF4bJX9D0rOyyAkMevuerOXjwFh9bjv9a8WLa4HzQhaFWvO1b TjJca4bspIxSR0up/XtEVLuNeKv/FwvWEERx2bBqnkfCepm+hrjKJx9UdcivAdbA I/9h3AV3dT8s3XPXm3GgVsynJFKSenkfah9oH5A0E3xSJsIPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKncAj05LGp6izmyoDqGZjiArt1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWZmNTY1MmEtNTIyMS0z MTc5LTgzZjctOTRiZTRhYzE5ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtAl2kIrLSzhSxsJVRFQUtQ2wbVgaUbYfMA6za6jstjC6slKo8fa35S fJho6EYrbPAx85+J+nZVI89bNbqp7p3MjiemN9wOY84lj3xL5Xrw9fb5lL1FVTsZ 9jYvQTo+io8WiBTpxyrVddraUQB2Mo8BbgDdB5LU2PpMyp571uv7cpyeOMllKpuj mKZkh5JfsKPv6ZsYFNEXi4fQZ0aWp6a196l4r5SSg27ejC+iydTWIFMQ9u2J82TF kFGEg5sqGPnNKKWZXroDrGoRfZ2UcQGQc4RMYgGCbQgm4nXz8gp24LjWvHT1QcfC OMqzI0lCDOZji2gx4CDzZ+pgSSF9jTg= -----END CERTIFICATE-----Generated at Wed Jul 29 05:55:00 2026 by rpki-client