$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa File: baa6a648-7ab8-39bf-8357-a787b0346893.roa (raw, json) Hash identifier: E1+y89DRsFEXNof5v+o29ZVLhPLC1Jivn70yrl7Gc0o= Subject key identifier: 7C:CF:10:8A:23:6B:46:FE:14:01:4A:1D:EE:7C:51:25:0F:06:5A:B6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F2EED145ED7BF8542FD3B6E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 3223 IP address blocks: 172.94.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:14:5e:d7:bf:85:42:fd:3b:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=051403be-b2dc-46f3-9d70-ba6002b71e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:65:f5:4e:ff:d7:4c:1b:d2:9f:f8:4c:1f: 9d:a9:ac:49:2d:e5:e0:d9:9f:8c:ae:c2:f2:35:91: fb:1d:dc:0d:e2:68:84:a6:31:c5:bd:e5:3e:4a:0f: 0b:9b:db:de:06:42:98:ab:65:9f:3e:44:67:47:41: 15:5c:3d:4d:97:4d:08:9f:8e:70:a5:99:a8:1e:48: c8:91:44:35:a9:a1:9d:40:2a:eb:f9:08:d7:5d:b0: bd:05:1b:d7:7e:5d:eb:e9:59:47:09:84:2d:fb:a4: 29:cc:e5:b1:4e:36:45:6a:db:ed:30:7d:7a:82:a7: ed:10:b5:07:dc:25:71:e8:f3:2c:da:f1:29:76:44: 3b:bf:8c:ba:d9:91:82:30:be:6b:fa:33:54:07:f8: 7a:59:74:4f:57:80:f7:06:70:7d:a9:e3:8e:ba:81: a1:a2:2d:33:39:87:69:59:86:9f:7a:93:8b:31:6e: 19:59:69:09:6b:23:34:fd:c1:82:72:ee:3d:03:e5: 07:9d:aa:ee:27:9f:1f:28:b4:7c:6d:fe:4f:0b:99: 8c:78:ad:57:f7:84:ae:52:bc:ee:7e:4b:6a:24:c4: 8f:e8:33:bd:a8:31:c9:1f:3c:db:f6:cf:55:a6:dd: f9:53:9b:aa:f3:6d:f2:8b:03:f3:84:f6:33:4d:f7: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CF:10:8A:23:6B:46:FE:14:01:4A:1D:EE:7C:51:25:0F:06:5A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:dc:17:83:13:cd:94:a7:96:43:e2:4e:f2:e9:da:3a:00:67: af:9a:b0:fc:6e:be:7f:7d:2e:9d:47:82:1a:e3:1c:01:62:61: 73:1c:d9:c2:fd:28:1e:22:67:ec:da:22:88:4f:67:a9:4e:c6: 6c:60:da:c3:80:29:79:28:32:4b:ca:a0:7e:0f:84:f3:19:a3: 07:dc:d2:ed:8d:d4:e5:24:6a:ab:57:c9:85:d3:c5:a7:f4:e9: be:1f:9f:87:9f:f5:fe:b3:6b:5d:32:43:dd:07:44:47:eb:94: 74:6e:36:0c:08:66:c2:c5:32:a1:24:3e:7d:53:2c:c1:f1:27: af:92:26:10:22:91:70:89:87:8a:a5:ad:1e:a4:09:a9:e0:e6: 29:6f:e3:b1:0d:9d:26:d0:d0:61:f6:5b:9e:f3:60:7f:e1:a5: 80:a8:9d:ac:3a:ab:a0:b0:cd:99:18:80:bd:ae:f1:86:d3:f8: 48:ca:62:81:19:ca:f9:95:8e:00:1e:74:f7:70:62:11:a0:48: f2:f2:f7:47:cc:1b:75:b7:93:b8:8f:d2:14:7e:29:47:2b:bb: 08:99:80:21:53:01:fb:b5:ee:5f:ef:bd:ae:0a:7e:de:d5:cd: 50:45:1c:7e:08:ae:4b:8d:e3:0d:a5:03:e4:97:c0:06:13:45: e5:7e:25:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RRe17+FQv07bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MDUxNDAzYmUtYjJkYy00NmYzLTlkNzAtYmE2MDAyYjcxZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15hl9U7/10wb0p/4TB+dqaxJLeXg2Z+MrsLy NZH7HdwN4miEpjHFveU+Sg8Lm9veBkKYq2WfPkRnR0EVXD1Nl00In45wpZmoHkjI kUQ1qaGdQCrr+QjXXbC9BRvXfl3r6VlHCYQt+6QpzOWxTjZFatvtMH16gqftELUH 3CVx6PMs2vEpdkQ7v4y62ZGCML5r+jNUB/h6WXRPV4D3BnB9qeOOuoGhoi0zOYdp WYafepOLMW4ZWWkJayM0/cGCcu49A+UHnaruJ58fKLR8bf5PC5mMeK1X94SuUrzu fktqJMSP6DO9qDHJHzzb9s9Vpt35U5uq823yiwPzhPYzTffLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzPEIoja0b+FAFKHe58USUPBlq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmFhNmE2NDgtN2FiOC0z OWJmLTgzNTctYTc4N2IwMzQ2ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDcF4MTzZSnlkPiTvLp2joAZ6+asPxuvn99Lp1HghrjHAFiYXMc2cL9 KB4iZ+zaIohPZ6lOxmxg2sOAKXkoMkvKoH4PhPMZowfc0u2N1OUkaqtXyYXTxaf0 6b4fn4ef9f6za10yQ90HREfrlHRuNgwIZsLFMqEkPn1TLMHxJ6+SJhAikXCJh4ql rR6kCang5ilv47ENnSbQ0GH2W57zYH/hpYConaw6q6CwzZkYgL2u8YbT+EjKYoEZ yvmVjgAedPdwYhGgSPLy90fMG3W3k7iP0hR+KUcruwiZgCFTAfu17l/vva4Kft7V zVBFHH4IrkuN4w2lA+SXwAYTReV+Ja0= -----END CERTIFICATE-----Generated at Sun Sep 20 22:02:27 2026 by rpki-client