$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9029871a-7d38-3a88-b949-3bbcd02340c8.roa File: 9029871a-7d38-3a88-b949-3bbcd02340c8.roa (raw, json) Hash identifier: s+1NOqm1noZQW3hDItlsvuSx9aP1amyFjLyKJAbJA20= Subject key identifier: E6:9A:13:A0:DC:DF:4D:65:44:B1:88:4E:D1:3F:33:3C:AB:FA:E2:73 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F2B7016024331884066A9FDC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9029871a-7d38-3a88-b949-3bbcd02340c8.roa Signing time: Mon 14 Sep 2026 07:01:03 +0000 ROA not before: Mon 14 Sep 2026 07:01:03 +0000 ROA not after: Sun 13 Dec 2026 08:01:03 +0000 asID: 205960 IP address blocks: 172.94.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2b:70:16:02:43:31:88:40:66:a9:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 14 07:01:03 2026 GMT Not After : Dec 13 08:01:03 2026 GMT Subject: CN=12c8d19b-eddf-4816-aad8-2de2129f4f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:fb:cf:34:20:e5:a6:b5:b8:3c:28:79:f6: 9a:20:3c:11:f5:de:91:f5:e7:fd:ed:bc:f3:37:13: f6:f3:12:a1:1a:04:84:04:35:c6:5f:a1:ca:d9:67: ed:03:06:8c:75:09:50:30:61:c8:4c:b4:c1:8a:6f: b5:7c:78:c0:37:42:a1:fc:b2:0b:43:24:41:de:18: 56:3e:2f:ea:6e:07:ee:b8:e7:af:f2:b8:d4:2c:8c: 5b:74:03:66:90:24:de:c5:fb:98:fd:48:b2:7b:31: c7:9a:57:e0:dc:46:d5:e0:3b:9b:fb:67:6a:20:51: 4b:57:d1:fa:05:67:5f:14:13:01:b4:e8:c8:a8:50: 13:eb:43:18:92:49:c1:d9:e3:19:b3:65:be:b1:cf: a8:0c:60:04:8a:21:ea:d0:e2:18:c8:85:5d:3a:bc: 90:74:2d:e1:b8:e2:b2:46:c3:18:8a:7b:31:e0:65: a5:c5:47:ac:54:f4:40:d2:8f:ad:5c:14:cc:ee:87: df:48:b5:1a:77:fe:96:45:b4:25:51:18:cd:7e:2f: 69:03:8d:94:cd:cb:c5:f9:23:5c:04:50:c8:ea:8a: 44:e3:5f:31:45:fe:92:d8:5c:22:fa:ee:a2:77:9e: ea:fd:bb:88:c8:01:99:84:f3:1d:8d:39:cc:54:be: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9A:13:A0:DC:DF:4D:65:44:B1:88:4E:D1:3F:33:3C:AB:FA:E2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9029871a-7d38-3a88-b949-3bbcd02340c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:16:eb:93:7a:a4:7e:3f:ac:d0:f4:ed:00:59:83:b6:22:7e: 6b:db:0f:4b:f5:46:38:b2:21:66:e8:f7:ad:ca:d0:1d:d1:94: 3a:eb:48:e8:ec:4b:a0:fa:f9:b2:ed:f5:1d:52:f0:7d:cd:05: bb:e8:a8:a4:44:b4:2e:42:62:bf:63:af:2d:4d:c2:77:43:9c: aa:ab:98:6f:4d:4d:dc:46:47:41:b6:24:64:1c:d1:c0:f5:97: a6:02:cb:ca:54:16:00:84:a1:5b:24:80:89:29:b4:01:10:f3: 1a:33:65:09:2e:62:69:54:66:73:ed:28:98:7e:52:13:bb:14: 60:2e:c1:f7:c0:d7:e1:04:53:77:25:0f:2b:bc:a9:56:66:54: 7b:05:19:11:76:72:83:79:3e:32:cc:c3:64:06:6f:c0:13:09: 5b:cd:14:3b:a3:5c:49:f2:d0:0a:33:bc:b4:2b:9f:7e:88:ef: 3a:35:18:f6:cc:b6:9b:e4:12:c4:a4:72:d0:19:16:79:cc:8c: f1:f1:7f:9d:fe:12:db:de:19:70:12:8d:d1:97:d7:51:68:d1: b6:f5:58:ab:d7:eb:6f:a0:bf:b5:af:3f:b4:36:9c:ca:31:83: 4f:2b:37:96:3d:6f:57:9c:d1:8c:3a:f8:53:99:ca:2f:b7:92: 89:e1:de:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8rcBYCQzGIQGap/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxNDA3MDEwM1oXDTI2MTIxMzA4MDEwM1owLzEtMCsGA1UEAxMk MTJjOGQxOWItZWRkZi00ODE2LWFhZDgtMmRlMjEyOWY0ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA/7zzQg5aa1uDwoefaaIDwR9d6R9ef97bzz NxP28xKhGgSEBDXGX6HK2WftAwaMdQlQMGHITLTBim+1fHjAN0Kh/LILQyRB3hhW Pi/qbgfuuOev8rjULIxbdANmkCTexfuY/UiyezHHmlfg3EbV4Dub+2dqIFFLV9H6 BWdfFBMBtOjIqFAT60MYkknB2eMZs2W+sc+oDGAEiiHq0OIYyIVdOryQdC3huOKy RsMYinsx4GWlxUesVPRA0o+tXBTM7offSLUad/6WRbQlURjNfi9pA42UzcvF+SNc BFDI6opE418xRf6S2Fwi+u6id57q/buIyAGZhPMdjTnMVL7NTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaaE6Dc301lRLGITtE/Mzyr+uJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAyOTg3MWEtN2QzOC0z YTg4LWI5NDktM2JiY2QwMjM0MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMW65N6pH4/rND07QBZg7YifmvbD0v1RjiyIWbo963K0B3RlDrrSOjs S6D6+bLt9R1S8H3NBbvoqKREtC5CYr9jry1NwndDnKqrmG9NTdxGR0G2JGQc0cD1 l6YCy8pUFgCEoVskgIkptAEQ8xozZQkuYmlUZnPtKJh+UhO7FGAuwffA1+EEU3cl Dyu8qVZmVHsFGRF2coN5PjLMw2QGb8ATCVvNFDujXEny0AozvLQrn36I7zo1GPbM tpvkEsSkctAZFnnMjPHxf53+EtveGXASjdGX11Fo0bb1WKvX62+gv7WvP7Q2nMox g08rN5Y9b1ec0Yw6+FOZyi+3konh3nA= -----END CERTIFICATE-----Generated at Mon Sep 21 18:01:37 2026 by rpki-client