$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa File: a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa (raw, json) Hash identifier: OXtGN1RICvA/SHyUoYhk4RUxgJ2MgO8iX9uagmF7Tgs= Subject key identifier: 12:4A:6C:DA:40:82:D4:A7:4B:ED:9F:F1:D9:7C:D4:3E:96:26:0F:ED Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584FA593400FC2B364D9B556AC40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 40676 IP address blocks: 172.94.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:40:0f:c2:b3:64:d9:b5:56:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=7eedce96-54b6-4bd1-b76e-73dc5a78c00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2c:12:6d:a2:2f:4e:d6:6d:81:fc:6f:07:c4: 2f:fd:f4:16:31:6e:16:d6:07:ec:16:26:e5:b9:ef: f8:12:bd:b2:4c:bf:9f:66:02:c3:ab:83:00:18:32: f6:80:80:04:69:bc:da:15:ce:54:af:06:3b:d9:9b: 5d:dd:30:c9:63:a4:8b:17:d9:4f:ed:1d:ac:7a:fa: 2d:25:f4:bc:aa:1f:8c:83:25:1b:87:4f:47:3f:47: 17:1f:4e:99:6e:2c:3d:5d:c3:a3:30:83:bf:fd:4f: 94:78:48:5d:d6:6f:77:15:78:5d:d3:61:c8:d2:38: ed:1c:a1:ec:85:ff:12:5b:ed:c5:f6:55:3d:aa:8f: af:d9:b6:4a:02:4e:c1:38:d1:62:aa:7b:f4:e7:e4: 53:45:16:ca:0c:e9:29:ca:6d:b9:5a:3a:a2:60:64: bd:23:41:8c:ed:15:70:7a:b0:0e:24:0b:ff:97:f3: a4:d1:34:3a:5e:1d:44:84:73:30:e9:30:15:a2:03: 93:04:c6:09:e3:61:d5:9d:e1:dc:13:32:82:fb:e3: 58:44:fe:2e:92:15:08:9d:cc:81:33:cd:ce:e2:e0: 0b:1e:04:01:63:65:0e:e8:3b:69:32:2e:5f:d0:5f: 87:1e:03:79:d9:0d:35:a5:a9:8e:11:dd:a2:d2:22: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4A:6C:DA:40:82:D4:A7:4B:ED:9F:F1:D9:7C:D4:3E:96:26:0F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ff:1a:08:79:20:6a:97:a6:30:ec:e5:59:37:cb:1b:0c:ff: 75:88:72:af:17:f4:e9:3a:67:f9:6a:6a:96:f3:27:6b:55:da: 0b:30:72:5c:cf:9d:82:1f:8f:83:4b:9e:0e:70:a9:aa:67:1b: ec:de:6f:9e:55:4f:0f:d0:96:ff:fa:40:10:9f:8d:19:0d:1d: 77:42:5f:d2:bd:63:e0:c5:3c:8d:95:5a:02:d4:bb:29:63:2e: 1d:97:54:7a:1c:8c:cf:4f:63:de:6a:6b:68:6e:37:aa:1f:b0: 07:ec:7f:3d:99:37:18:51:99:67:45:d5:f5:8e:4f:91:b9:3f: b2:21:9b:bf:08:45:f5:20:89:48:be:da:da:90:51:d1:88:71: 33:56:ea:88:02:9d:91:81:7b:a3:f7:9b:65:cf:13:7b:7d:d3: 24:bc:1f:12:65:5d:f0:c4:3f:7d:a5:d6:fd:95:93:f4:8a:ea: ea:98:ad:4c:f1:81:4c:09:cb:40:25:ad:80:83:3c:df:4a:85: f7:69:d4:80:75:1d:e1:bb:3d:70:50:fe:e0:aa:2b:81:57:3e: 83:31:d8:8c:57:65:b1:0e:af:14:d9:be:28:b4:e8:cf:b2:0d: 77:8f:aa:be:9a:92:fa:f4:b3:0b:0c:1b:ba:50:d2:bd:cd:0f: 23:98:86:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lk0APwrNk2bVWrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk N2VlZGNlOTYtNTRiNi00YmQxLWI3NmUtNzNkYzVhNzhjMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCwSbaIvTtZtgfxvB8Qv/fQWMW4W1gfsFibl ue/4Er2yTL+fZgLDq4MAGDL2gIAEabzaFc5UrwY72Ztd3TDJY6SLF9lP7R2sevot JfS8qh+MgyUbh09HP0cXH06Zbiw9XcOjMIO//U+UeEhd1m93FXhd02HI0jjtHKHs hf8SW+3F9lU9qo+v2bZKAk7BONFiqnv05+RTRRbKDOkpym25WjqiYGS9I0GM7RVw erAOJAv/l/Ok0TQ6Xh1EhHMw6TAVogOTBMYJ42HVneHcEzKC++NYRP4ukhUIncyB M83O4uALHgQBY2UO6DtpMi5f0F+HHgN52Q01pamOEd2i0iLj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJKbNpAgtSnS+2f8dl81D6WJg/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTg3ZWEzZDQtOGVmMi0z Y2VkLTlkYzgtYWEyM2QyNjZiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL/Ggh5IGqXpjDs5Vk3yxsM/3WIcq8X9Ok6Z/lqapbzJ2tV2gswclzP nYIfj4NLng5wqapnG+zeb55VTw/Qlv/6QBCfjRkNHXdCX9K9Y+DFPI2VWgLUuylj Lh2XVHocjM9PY95qa2huN6ofsAfsfz2ZNxhRmWdF1fWOT5G5P7Ihm78IRfUgiUi+ 2tqQUdGIcTNW6ogCnZGBe6P3m2XPE3t90yS8HxJlXfDEP32l1v2Vk/SK6uqYrUzx gUwJy0AlrYCDPN9Khfdp1IB1HeG7PXBQ/uCqK4FXPoMx2IxXZbEOrxTZvii06M+y DXePqr6akvr0swsMG7pQ0r3NDyOYhnE= -----END CERTIFICATE-----Generated at Thu Nov 5 16:57:13 2026 by rpki-client