$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa File: 9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa (raw, json) Hash identifier: fcOJxky3uH2WZSuE49dxNp+4HeObDNR8UYMAYbXULQk= Subject key identifier: 42:FA:14:ED:06:7B:1D:7E:EA:C6:22:CC:47:E8:DE:80:AF:A2:0B:92 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F1897AA34A96790CA97EF98C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 172.94.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:aa:34:a9:67:90:ca:97:ef:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=0c54bf23-ad4a-45fa-b888-443686d3f3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:54:20:30:5c:a7:f3:22:37:6c:90:9b:2d: 99:00:3f:76:30:4a:cd:f8:9b:a3:94:b7:99:c1:c7: e2:48:92:89:2b:0d:02:13:e5:9b:22:51:0e:c5:e8: 8a:1d:5b:2c:ec:31:34:60:b5:5c:85:9f:d6:36:4f: 37:0d:af:87:58:cf:07:e4:8e:b9:5d:c5:84:a6:1a: d4:1d:6a:0a:50:83:33:3b:cc:7e:19:23:e6:6d:cb: 0f:d8:cc:46:e0:89:15:fb:05:ad:a0:02:0c:4d:a4: 89:69:4a:ef:dc:74:e5:6f:8b:03:e3:4b:8c:71:ab: 1b:b5:f9:67:e3:a6:2e:d8:d5:94:5b:5f:2e:1a:fa: dc:cc:5d:02:18:32:73:51:e6:7d:b7:05:03:f6:ff: b6:c2:18:ac:dc:95:7b:b9:bd:57:69:ea:7d:0e:fa: 5b:88:2e:b7:e1:32:f5:7b:fd:2e:e5:39:a3:6c:38: 83:f5:63:c9:16:94:4a:d6:0f:10:d6:d8:c3:db:00: f9:8e:e3:6c:31:d9:23:56:22:fe:f6:48:93:8c:52: 55:bc:67:fd:0e:bd:3b:47:f9:58:e2:b5:4a:e5:04: 62:da:a0:6d:34:d6:b9:58:11:1c:54:24:9b:0b:7e: 90:a9:4a:39:dd:22:ee:cf:a6:d5:3e:26:b9:ba:9b: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FA:14:ED:06:7B:1D:7E:EA:C6:22:CC:47:E8:DE:80:AF:A2:0B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6e:81:fa:3f:5d:28:82:25:5c:46:74:79:49:38:f1:58:9b: b8:55:7e:46:fe:d6:c0:18:28:b0:63:f7:7d:9f:79:72:2a:d0: 74:7a:46:88:f5:eb:f9:a8:e0:a4:72:67:01:e5:19:0c:3a:12: de:52:f8:c3:e2:ca:c3:00:ba:97:eb:68:8b:b5:03:5d:93:12: 43:c7:bf:82:45:40:72:51:0d:cb:52:d3:03:06:24:7a:0d:87: 03:2c:50:ac:17:87:70:21:28:80:63:5a:ae:12:26:3c:e3:83: 29:51:3c:f3:94:f4:62:9b:e0:74:92:ac:65:c6:7d:6e:fb:ee: c3:d9:56:45:64:39:80:97:68:03:e3:a3:5e:90:1d:fd:96:1b: 4a:e7:b6:98:ed:8d:48:94:69:5c:76:7e:a0:62:c5:aa:71:d6: 01:d8:a1:c8:da:46:7a:4a:f5:66:f6:d3:e9:87:da:a0:f2:22: 3d:74:85:9d:f4:e6:07:96:76:69:bb:f5:3e:b8:3c:f0:d4:53: ff:da:4f:a8:c2:32:d9:84:24:61:cb:25:8f:ba:42:d7:51:41: 28:aa:6e:8b:20:00:78:1c:cd:ca:57:27:fe:be:8f:bd:7e:ea: 78:3b:db:ab:87:59:01:21:be:c7:ff:bf:8b:62:52:46:0b:7d: 36:b2:a2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6o0qWeQypfvmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MGM1NGJmMjMtYWQ0YS00NWZhLWI4ODgtNDQzNjg2ZDNmM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcZUIDBcp/MiN2yQmy2ZAD92MErN+JujlLeZ wcfiSJKJKw0CE+WbIlEOxeiKHVss7DE0YLVchZ/WNk83Da+HWM8H5I65XcWEphrU HWoKUIMzO8x+GSPmbcsP2MxG4IkV+wWtoAIMTaSJaUrv3HTlb4sD40uMcasbtfln 46Yu2NWUW18uGvrczF0CGDJzUeZ9twUD9v+2whis3JV7ub1Xaep9DvpbiC634TL1 e/0u5TmjbDiD9WPJFpRK1g8Q1tjD2wD5juNsMdkjViL+9kiTjFJVvGf9Dr07R/lY 4rVK5QRi2qBtNNa5WBEcVCSbC36QqUo53SLuz6bVPia5upuEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL6FO0Gex1+6sYizEfo3oCvoguSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQwODc2YWEtOWM2ZC0z MzU1LTlkZWEtMDg2MmMwZTJiMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF59MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdugfo/XSiCJVxGdHlJOPFYm7hVfkb+1sAYKLBj932feXIq0HR6Roj1 6/mo4KRyZwHlGQw6Et5S+MPiysMAupfraIu1A12TEkPHv4JFQHJRDctS0wMGJHoN hwMsUKwXh3AhKIBjWq4SJjzjgylRPPOU9GKb4HSSrGXGfW777sPZVkVkOYCXaAPj o16QHf2WG0rntpjtjUiUaVx2fqBixapx1gHYocjaRnpK9Wb20+mH2qDyIj10hZ30 5geWdmm79T64PPDUU//aT6jCMtmEJGHLJY+6QtdRQSiqbosgAHgczcpXJ/6+j71+ 6ng726uHWQEhvsf/v4tiUkYLfTayouw= -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:30 2026 by rpki-client