$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa File: 739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa (raw, json) Hash identifier: sD5zbT0Jsb/kHhq/iF1dPhrQ+3SluPJuHOq20oyse00= Subject key identifier: 31:F1:A3:63:50:AA:E5:E1:A4:CC:27:2E:2D:93:F1:29:74:90:90:CC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F2957BDCC77FF5AF72E504800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 137409 IP address blocks: 172.94.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bd:cc:77:ff:5a:f7:2e:50:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=c1d85650-c66f-4616-8218-bb14b8c35cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9b:7c:84:bd:40:57:12:4b:a3:63:3e:46:71: 3d:1e:07:ba:cf:f5:3c:1e:67:aa:5e:4b:16:31:b4: 39:b4:89:b4:07:2b:82:5c:79:ec:f0:48:47:d1:79: a4:4e:a4:8f:c7:20:79:6c:0a:39:e0:41:e3:4b:f8: 0f:81:ca:c4:9d:a2:68:43:0d:03:5e:ef:95:25:e0: e9:96:f0:d2:76:3f:74:a4:5a:2e:a7:01:44:5d:1f: a7:13:47:95:32:ad:ce:cc:b7:f5:68:8c:05:1e:7c: ca:2e:7a:18:c9:ad:19:3a:44:59:6c:8c:09:b4:1c: 63:aa:e5:54:98:34:2e:11:83:87:06:be:86:e4:48: b9:61:cc:47:c4:a4:c7:7f:68:28:90:9a:4c:aa:c7: 19:02:a4:6c:4b:bd:35:19:ab:ac:ab:77:96:6c:dd: 92:ad:34:c2:45:b5:06:9c:80:a5:e2:9e:32:51:30: 77:48:67:00:3c:80:c8:3e:04:a0:73:3e:a8:8d:11: 7f:8c:53:9a:69:97:dd:f4:e7:15:e5:fd:ac:cd:19: aa:f0:1c:3f:3a:9f:fa:35:6c:23:85:64:fe:c4:08: 12:74:d7:2e:4f:a5:46:0a:0a:5c:7b:de:86:29:90: fa:35:a6:55:49:91:9a:4f:46:65:07:cf:f8:aa:e5: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F1:A3:63:50:AA:E5:E1:A4:CC:27:2E:2D:93:F1:29:74:90:90:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:31:7b:6a:1e:9f:21:00:99:00:37:86:71:c4:8f:52:46:80: 2d:75:36:a3:ee:d6:81:e7:7b:51:8e:99:b6:dd:09:d0:5d:bd: 20:1a:10:48:9a:15:e1:ac:56:92:dc:4e:86:32:fe:bf:7d:e9: 58:76:93:49:25:4c:5e:a1:d5:11:30:a5:15:2c:10:c0:1a:53: 4c:41:d4:d7:a4:04:01:0e:7f:9e:5e:dd:3f:42:65:c6:2d:ce: fd:e7:c3:ab:44:78:9b:54:95:db:44:da:be:30:b0:56:09:e2: 62:2d:75:cb:6c:dd:5d:1e:18:c3:a2:54:52:2c:7f:6b:ed:ec: b8:f0:c9:c9:00:86:ed:be:c7:fb:73:46:7d:fa:16:4a:59:d0: b1:e1:02:9c:ef:86:a8:56:04:47:21:10:3c:6a:06:c1:80:89: df:03:74:7b:4d:72:af:a7:ff:af:6f:97:b8:1d:d5:9a:da:97: 8d:c1:ee:d0:fe:2a:40:f5:56:66:d4:e2:91:96:8f:c2:53:60: be:76:a9:08:3a:7a:e5:19:89:5a:9c:52:6f:cb:4a:f0:fd:f9: b2:df:a9:24:9a:7a:65:19:a7:65:7d:4a:cf:e5:a0:ab:10:ea: e3:34:82:84:a4:0a:d0:ac:ea:3b:e3:f3:57:62:40:a0:1e:e0: ad:a1:b3:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV73Md/9a9y5QSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YzFkODU2NTAtYzY2Zi00NjE2LTgyMTgtYmIxNGI4YzM1Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpt8hL1AVxJLo2M+RnE9Hge6z/U8HmeqXksW MbQ5tIm0ByuCXHns8EhH0XmkTqSPxyB5bAo54EHjS/gPgcrEnaJoQw0DXu+VJeDp lvDSdj90pFoupwFEXR+nE0eVMq3OzLf1aIwFHnzKLnoYya0ZOkRZbIwJtBxjquVU mDQuEYOHBr6G5Ei5YcxHxKTHf2gokJpMqscZAqRsS701Gausq3eWbN2SrTTCRbUG nICl4p4yUTB3SGcAPIDIPgSgcz6ojRF/jFOaaZfd9OcV5f2szRmq8Bw/Op/6NWwj hWT+xAgSdNcuT6VGCgpce96GKZD6NaZVSZGaT0ZlB8/4quUfwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHxo2NQquXhpMwnLi2T8Sl0kJDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzM5ZjBhYzYtOWRkNC0z MmI5LWI0YTctZjM3NWVhNzFhNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAxe2oenyEAmQA3hnHEj1JGgC11NqPu1oHne1GOmbbdCdBdvSAaEEia FeGsVpLcToYy/r996Vh2k0klTF6h1REwpRUsEMAaU0xB1NekBAEOf55e3T9CZcYt zv3nw6tEeJtUldtE2r4wsFYJ4mItdcts3V0eGMOiVFIsf2vt7LjwyckAhu2+x/tz Rn36FkpZ0LHhApzvhqhWBEchEDxqBsGAid8DdHtNcq+n/69vl7gd1Zral43B7tD+ KkD1VmbU4pGWj8JTYL52qQg6euUZiVqcUm/LSvD9+bLfqSSaemUZp2V9Ss/loKsQ 6uM0goSkCtCs6jvj81diQKAe4K2hsyI= -----END CERTIFICATE-----Generated at Mon Sep 21 17:18:37 2026 by rpki-client