$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa File: 32a23c32-30aa-3814-87e4-f5250a5cd155.roa (raw, json) Hash identifier: 2wfje9nqxs3sYuik3dlKDoupuXjPdN48vUcF69NLCnA= Subject key identifier: E2:F7:7E:43:E0:95:4A:C4:E5:1C:38:2E:36:8E:9E:93:EE:20:5B:89 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E9D4A62B7259FF8937C40A100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 9009 IP address blocks: 172.94.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:62:b7:25:9f:f8:93:7c:40:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=ac433dd7-4b32-4e42-8223-126ce23e5615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e3:c7:88:a0:2e:b3:02:cd:38:dd:55:75:af: db:ce:5e:70:dc:1e:ac:8c:17:82:f2:c3:9d:9d:5d: 2f:90:68:f3:e7:d5:7b:15:26:7d:14:d2:49:1c:0c: 28:39:66:3c:4b:20:6e:09:1b:39:c1:0d:70:35:87: c7:02:65:e0:db:c4:40:54:24:42:f7:f8:d8:7c:23: 45:4a:aa:96:28:ce:48:a9:7a:5a:f3:d4:dd:7c:06: 16:90:ce:8f:6c:1d:65:01:49:9b:89:27:16:c5:95: 02:14:42:94:78:15:99:77:20:40:30:bd:56:4f:1c: 99:1b:4b:1b:82:12:22:6b:f1:05:7f:91:59:eb:86: 2d:af:67:dd:98:9f:65:cf:31:70:8d:79:78:e9:c3: ff:b4:c5:f5:05:24:18:16:24:28:52:b8:3a:9c:77: 55:8e:6f:d6:84:7b:95:89:07:79:03:6c:82:c7:75: 1b:94:0d:55:82:11:8d:a2:2e:81:c3:2a:7d:1d:09: 92:20:91:21:dd:3d:98:13:f0:bd:2f:e1:88:6c:c0: be:a2:16:01:2c:fd:e5:7a:16:c6:63:b6:c7:47:58: 0c:9a:e9:f4:40:cf:f7:e4:7c:5f:ab:83:35:8c:46: 45:a5:49:a8:16:c1:50:c1:e1:2e:60:c5:1e:24:9f: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:7E:43:E0:95:4A:C4:E5:1C:38:2E:36:8E:9E:93:EE:20:5B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:63:03:c4:36:56:36:f2:8b:ae:ab:d0:c6:93:38:78:83:93: 0d:2a:40:28:57:58:bc:66:7a:71:20:5f:42:ca:93:94:35:fb: ac:1d:33:19:d3:ff:3f:97:d7:b4:62:cf:80:63:ff:25:4f:af: 90:c7:b2:e9:15:73:00:b0:87:98:a8:a6:3d:db:3b:51:a1:b2: 29:90:56:30:21:23:80:27:fd:5f:1a:10:c1:62:11:74:cc:43: 43:61:c6:cd:c2:4f:9c:12:91:3a:15:34:11:4a:07:3f:76:48: 49:5f:45:d4:62:06:d4:f5:cd:54:33:bf:1b:b7:a7:00:12:a9: 27:e5:3c:b6:29:47:14:ff:94:5e:a1:0a:5f:94:19:7f:14:f8: 69:51:77:3f:5b:63:31:6b:b7:97:87:f6:a1:74:66:3f:37:82: 93:77:ca:21:64:1e:a3:4a:0e:fd:50:a7:7f:63:6f:27:dc:eb: 0e:71:f1:fb:5c:98:d0:a9:45:7b:f1:96:fe:31:81:49:6d:1a: 96:0c:ec:83:2a:58:d1:e1:9f:e5:aa:3d:eb:67:68:9c:cc:ed: 70:f7:4c:39:ba:2e:e2:e5:11:88:73:70:19:d2:17:df:1f:7d: 9d:fa:86:a1:a2:e1:51:6d:db:5f:6a:42:7a:61:e0:53:47:0d: 42:4e:b2:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmK3JZ/4k3xAoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk YWM0MzNkZDctNGIzMi00ZTQyLTgyMjMtMTI2Y2UyM2U1NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuPHiKAuswLNON1Vda/bzl5w3B6sjBeC8sOd nV0vkGjz59V7FSZ9FNJJHAwoOWY8SyBuCRs5wQ1wNYfHAmXg28RAVCRC9/jYfCNF SqqWKM5IqXpa89TdfAYWkM6PbB1lAUmbiScWxZUCFEKUeBWZdyBAML1WTxyZG0sb ghIia/EFf5FZ64Ytr2fdmJ9lzzFwjXl46cP/tMX1BSQYFiQoUrg6nHdVjm/WhHuV iQd5A2yCx3UblA1VghGNoi6Bwyp9HQmSIJEh3T2YE/C9L+GIbMC+ohYBLP3lehbG Y7bHR1gMmun0QM/35Hxfq4M1jEZFpUmoFsFQweEuYMUeJJ8eTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL3fkPglUrE5Rw4LjaOnpPuIFuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzJhMjNjMzItMzBhYS0z ODE0LTg3ZTQtZjUyNTBhNWNkMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5jA8Q2Vjbyi66r0MaTOHiDkw0qQChXWLxmenEgX0LKk5Q1+6wdMxnT /z+X17Riz4Bj/yVPr5DHsukVcwCwh5iopj3bO1GhsimQVjAhI4An/V8aEMFiEXTM Q0Nhxs3CT5wSkToVNBFKBz92SElfRdRiBtT1zVQzvxu3pwASqSflPLYpRxT/lF6h Cl+UGX8U+GlRdz9bYzFrt5eH9qF0Zj83gpN3yiFkHqNKDv1Qp39jbyfc6w5x8ftc mNCpRXvxlv4xgUltGpYM7IMqWNHhn+WqPetnaJzM7XD3TDm6LuLlEYhzcBnSF98f fZ36hqGi4VFt219qQnph4FNHDUJOsu8= -----END CERTIFICATE-----Generated at Wed Jul 29 03:17:08 2026 by rpki-client