$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa File: b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa (raw, json) Hash identifier: wRR35INX+kGLSCJSKZjksvfggARYEv9wYJxAEMUGPQc= Subject key identifier: A9:C0:45:74:B0:ED:8A:57:CD:C6:80:4E:B9:FB:19:E1:24:DB:CF:9C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F1897AA294586600294632040 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 172.94.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:aa:29:45:86:60:02:94:63:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=91d0ac58-9354-4988-b137-22fb761b7ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2f:81:74:5a:6b:55:8c:60:ed:ff:c8:32:f6: a9:af:16:60:c5:92:e7:f5:4f:2d:9e:9f:d1:6b:48: 01:d3:9c:7b:1a:4e:51:a5:c2:57:48:85:20:49:b8: 8d:b4:62:5f:ca:57:cd:71:c0:86:61:15:95:29:15: 25:f8:de:a9:48:80:e1:c6:00:e2:5c:49:2c:f5:3d: 6b:f9:43:36:41:5d:9b:c1:12:a3:0c:d7:cf:68:8c: f4:47:cf:1f:c1:fc:76:95:20:60:91:6d:f2:83:53: ec:df:68:a2:c2:ea:68:c8:86:3b:b8:92:82:ee:c5: c5:fc:6b:cc:ac:20:6b:bc:f1:ce:e0:07:5d:ac:f1: 92:98:7f:91:12:78:fb:7e:03:0b:fb:81:8a:d5:19: ea:f0:1c:fc:12:f7:72:81:58:b2:a5:9a:ac:d9:76: f5:bc:d3:f0:6e:19:de:13:c6:2e:60:86:ed:57:2d: b7:0f:6a:67:ea:f3:bc:25:78:66:c3:22:22:eb:a0: 1b:1f:b4:3c:01:cc:ef:b2:7e:6c:68:0f:9e:77:97: 3e:32:67:5a:49:92:bc:13:e8:0f:50:9e:09:37:3f: 4a:7d:34:0b:b7:74:9e:fe:fa:4d:cd:8a:0e:2e:03: 22:21:e5:f3:06:95:09:f0:a2:cb:67:76:80:8c:17: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:45:74:B0:ED:8A:57:CD:C6:80:4E:B9:FB:19:E1:24:DB:CF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:14:1f:a2:7e:ca:63:fc:a3:aa:00:dc:19:82:e0:1a:de:87: 55:cb:b0:63:23:d6:3b:71:73:b1:24:e5:38:fc:db:09:21:a6: f4:1e:88:0e:c6:01:1b:b1:e3:c8:ce:ec:13:c7:a6:06:08:07: ce:ba:d2:95:17:9a:d3:de:8b:b0:ca:7d:85:15:14:11:d0:15: 92:89:27:26:2a:dd:a8:02:cb:cd:41:49:61:8a:ec:5f:8d:09: aa:1b:a1:f4:05:01:16:f8:fd:10:5a:ce:42:31:fe:8a:05:99: 1c:09:47:b5:c1:4b:06:2b:a8:d1:ad:20:3a:73:0a:af:bb:6f: 97:30:b0:ad:86:63:33:eb:4e:e2:83:df:29:65:be:d8:4a:86: 93:c8:8c:c2:a6:6c:ba:94:35:b7:16:53:2a:98:cb:b6:fd:d2: b7:0d:58:04:ec:9a:03:da:35:49:e9:00:64:55:d8:d8:fe:20: ca:14:bc:87:5e:1b:bc:75:f7:04:53:6c:c5:db:80:31:59:f0: 9f:ad:11:0f:80:54:cc:d4:79:9c:ed:fb:97:0e:8f:cb:0b:28: 27:60:b6:14:cc:9f:32:95:df:ea:db:5e:d1:e7:6a:cc:b5:0b: 4e:da:53:eb:3c:05:e1:eb:49:e8:6e:f6:fd:43:29:bf:53:00: ee:8f:93:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6opRYZgApRjIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTFkMGFjNTgtOTM1NC00OTg4LWIxMzctMjJmYjc2MWI3ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy+BdFprVYxg7f/IMvaprxZgxZLn9U8tnp/R a0gB05x7Gk5RpcJXSIUgSbiNtGJfylfNccCGYRWVKRUl+N6pSIDhxgDiXEks9T1r +UM2QV2bwRKjDNfPaIz0R88fwfx2lSBgkW3yg1Ps32iiwupoyIY7uJKC7sXF/GvM rCBrvPHO4AddrPGSmH+REnj7fgML+4GK1Rnq8Bz8EvdygViypZqs2Xb1vNPwbhne E8YuYIbtVy23D2pn6vO8JXhmwyIi66AbH7Q8Aczvsn5saA+ed5c+MmdaSZK8E+gP UJ4JNz9KfTQLt3Se/vpNzYoOLgMiIeXzBpUJ8KLLZ3aAjBcIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnARXSw7YpXzcaATrn7GeEk28+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjdmOWQyNmUtMmQwZS0z ZWM3LWIwMmItMzI0ZTE2MDE3NDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMUH6J+ymP8o6oA3BmC4Breh1XLsGMj1jtxc7Ek5Tj82wkhpvQeiA7G ARux48jO7BPHpgYIB8660pUXmtPei7DKfYUVFBHQFZKJJyYq3agCy81BSWGK7F+N CaobofQFARb4/RBazkIx/ooFmRwJR7XBSwYrqNGtIDpzCq+7b5cwsK2GYzPrTuKD 3yllvthKhpPIjMKmbLqUNbcWUyqYy7b90rcNWATsmgPaNUnpAGRV2Nj+IMoUvIde G7x19wRTbMXbgDFZ8J+tEQ+AVMzUeZzt+5cOj8sLKCdgthTMnzKV3+rbXtHnasy1 C07aU+s8BeHrSehu9v1DKb9TAO6Pk7k= -----END CERTIFICATE-----Generated at Tue Sep 22 16:30:28 2026 by rpki-client