$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa File: 8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa (raw, json) Hash identifier: VflRYGm8Xc5Qra7qLwdaiM0kPW24TtnmLK02M2K5jsY= Subject key identifier: 23:84:A5:3D:9F:BC:8F:FB:80:49:C4:99:AA:D0:D2:C0:3A:CB:B4:B1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F1467A01556DC05E4A6036440 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 212238 IP address blocks: 172.94.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a0:15:56:dc:05:e4:a6:03:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=c62c8a07-433d-4ec0-9c31-9279394c63b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:18:45:95:4c:f6:55:65:3f:20:85:51:8e: e4:17:63:16:21:af:45:59:cc:fc:f5:48:fc:9e:99: 9c:8d:bf:5e:86:ab:b2:ec:82:74:10:ad:83:df:82: c6:a3:5c:15:9b:31:b8:bf:1f:e6:72:f4:ec:59:1c: 65:ab:c5:79:cd:11:8c:af:7b:13:16:9b:5c:3f:3d: 0e:6c:37:ee:a2:a5:10:66:74:9f:18:cb:6a:d3:8f: f9:2a:60:65:e9:21:4c:e3:7c:90:93:9a:ac:fd:1d: 7a:e8:62:13:50:86:12:23:84:34:bd:db:1b:16:3a: b3:4a:ec:4d:c6:7e:a8:8c:b9:7f:bd:e2:00:08:2d: d0:5a:fe:01:5d:e1:e5:08:41:00:9a:29:f6:65:b8: ce:77:e7:9b:20:56:b7:b0:22:2f:14:c8:75:a8:0e: 71:fb:2c:c1:2c:9c:84:d6:be:eb:a4:d6:f7:06:ba: e1:58:42:df:6e:98:14:63:2f:5f:24:10:82:2f:99: 51:fe:cf:9b:75:6f:41:76:9e:c8:8d:b8:da:6c:01: 9b:f1:4d:a5:b9:0c:3e:f0:eb:97:90:0b:13:de:03: c0:e0:76:2c:8a:1c:86:37:a1:a7:96:55:9e:ad:99: 73:85:74:ed:35:1f:bd:e5:a9:58:d1:fd:a0:44:e0: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:84:A5:3D:9F:BC:8F:FB:80:49:C4:99:AA:D0:D2:C0:3A:CB:B4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:94:0a:76:78:ac:76:e1:65:75:20:22:a0:d0:5e:25:cd:7c: aa:c3:dd:65:83:ff:cc:a6:4d:06:8b:87:d3:2c:b6:f9:2b:98: e1:44:fc:a7:0b:59:90:89:ea:fd:af:16:d4:0c:9d:dd:6c:ac: 54:c1:d7:14:80:5d:24:60:9b:ef:bc:7c:79:b0:fe:b3:2c:90: fc:71:2a:24:ef:a4:be:94:19:03:53:19:d9:e1:23:90:40:aa: 7d:b9:04:0a:de:b7:c4:8e:ee:c6:d9:a9:bc:e8:65:02:31:3d: 4e:90:a6:25:18:ca:46:92:9d:10:cb:cf:77:38:a3:7b:1e:1d: dc:97:db:59:14:af:1e:ac:31:57:ec:27:2c:29:17:c3:22:35: 30:dc:da:a0:b5:50:94:1f:cd:f6:04:34:cd:6d:05:18:e3:d8: 88:a8:22:4e:01:0c:ad:50:ef:f5:79:40:37:b7:37:06:59:ee: 7f:a1:40:5f:78:53:fd:a1:49:cf:7e:3a:f3:93:fa:b4:5c:98: b9:fa:74:87:02:1d:65:2d:cd:81:c3:55:f1:ae:22:af:03:b3: c8:4e:4e:78:2f:da:2c:f3:2d:e0:29:ec:bf:de:84:9a:56:e4: 4f:d9:22:ac:9d:37:d1:5e:2d:75:69:28:7f:02:d5:7e:6f:a3: b0:03:7d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6AVVtwF5KYDZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YzYyYzhhMDctNDMzZC00ZWMwLTljMzEtOTI3OTM5NGM2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6kYRZVM9lVlPyCFUY7kF2MWIa9FWcz89Uj8 npmcjb9ehquy7IJ0EK2D34LGo1wVmzG4vx/mcvTsWRxlq8V5zRGMr3sTFptcPz0O bDfuoqUQZnSfGMtq04/5KmBl6SFM43yQk5qs/R166GITUIYSI4Q0vdsbFjqzSuxN xn6ojLl/veIACC3QWv4BXeHlCEEAmin2ZbjOd+ebIFa3sCIvFMh1qA5x+yzBLJyE 1r7rpNb3BrrhWELfbpgUYy9fJBCCL5lR/s+bdW9Bdp7IjbjabAGb8U2luQw+8OuX kAsT3gPA4HYsihyGN6GnllWerZlzhXTtNR+95alY0f2gROAMEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOEpT2fvI/7gEnEmarQ0sA6y7SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGIzM2Y5ZTktMTViYy0z NWEzLThjNjUtZGYyODAyZTUzYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6UCnZ4rHbhZXUgIqDQXiXNfKrD3WWD/8ymTQaLh9MstvkrmOFE/KcL WZCJ6v2vFtQMnd1srFTB1xSAXSRgm++8fHmw/rMskPxxKiTvpL6UGQNTGdnhI5BA qn25BAret8SO7sbZqbzoZQIxPU6QpiUYykaSnRDLz3c4o3seHdyX21kUrx6sMVfs JywpF8MiNTDc2qC1UJQfzfYENM1tBRjj2IioIk4BDK1Q7/V5QDe3NwZZ7n+hQF94 U/2hSc9+OvOT+rRcmLn6dIcCHWUtzYHDVfGuIq8Ds8hOTngv2izzLeAp7L/ehJpW 5E/ZIqydN9FeLXVpKH8C1X5vo7ADfTQ= -----END CERTIFICATE-----Generated at Thu Sep 24 04:42:33 2026 by rpki-client