$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa File: bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa (raw, json) Hash identifier: kHh+R58BBhqCITydav8IMzXXXP9cyH+ZmR3aqV5v/Ko= Subject key identifier: A4:51:0C:15:94:26:FF:80:97:86:7A:0B:31:82:63:08:7C:84:5A:2A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F1467A3DA445810F9503D3D40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 9009 IP address blocks: 172.94.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a3:da:44:58:10:f9:50:3d:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=2a55f9ba-861b-412a-a81f-26a50bd50e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:a9:b6:cf:41:fa:a6:76:11:20:36:bc:ca: 77:38:8a:34:7f:06:da:4c:b7:7f:b4:ce:4c:35:3a: 89:03:53:72:49:e6:8b:f5:0d:bb:07:ba:52:11:e0: 8f:47:ae:dd:ee:b6:e9:1e:a8:9a:22:e2:b7:ad:9c: 0f:30:22:c0:5c:1a:bd:37:be:d3:8d:ac:cb:35:15: 8d:4c:ba:6b:f7:a9:b8:51:e6:45:f4:9d:03:36:15: 57:85:8a:2c:02:85:4b:72:cc:ee:a5:98:11:4b:b3: cc:63:3a:56:00:35:b8:37:47:66:90:02:ce:14:88: 7f:34:50:1d:d7:d3:2e:5f:ef:c3:3a:9d:0c:de:ae: d3:be:ec:b3:9b:b2:87:38:55:f6:15:ba:66:7e:72: fb:24:c6:85:26:7a:ca:bc:6c:c7:16:66:66:67:36: e9:1d:ea:6a:31:7f:9f:9b:75:34:a8:38:9a:fd:a3: 0f:b0:c5:dc:69:93:bc:6b:d6:c6:f7:f2:23:8d:f3: 88:2c:3b:7a:99:35:8e:be:4b:85:89:28:5e:1c:4c: f0:a9:71:87:61:10:1e:dc:77:4d:95:1e:e3:db:ea: be:93:f0:8a:fb:59:e4:d5:00:e8:f8:ab:b6:e9:0f: cc:84:67:be:9f:8b:c8:68:22:e3:15:90:c2:65:e0: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:0C:15:94:26:FF:80:97:86:7A:0B:31:82:63:08:7C:84:5A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:65:8c:d0:28:c5:1d:d1:48:30:e5:a6:e1:6a:d4:5e:59:54: f6:1a:12:9f:62:91:39:d2:95:90:33:c6:98:28:a4:eb:45:3e: a0:48:50:f8:b5:52:37:62:a9:79:47:fd:f0:01:9a:89:d3:ff: 80:7c:3b:4d:cf:ff:9f:60:64:d3:d5:a1:8e:b3:39:ad:90:ce: 21:d4:0c:b6:17:62:a4:6e:82:d1:72:4f:d7:8a:7c:1c:94:fe: 8b:b0:bd:34:6d:90:eb:64:4a:aa:b5:89:01:91:3f:88:d0:7c: 5a:c1:db:67:8f:96:06:04:5a:01:9f:85:d2:a4:ee:d5:b4:0d: 80:60:34:fe:f6:1d:9e:b3:85:1f:2a:1d:e8:e8:f6:39:3d:09: eb:0f:6b:29:6f:f7:d5:be:01:ec:d9:8b:d0:1b:c4:c4:7a:db: b3:93:42:52:7c:f6:96:fb:50:e2:6d:70:ac:28:ab:72:f4:cf: ad:25:91:b6:54:62:cb:0d:b0:6f:22:0a:cb:5a:33:1f:7f:50: 1e:65:6c:af:6c:45:24:05:1b:9a:99:13:32:32:bc:31:01:b3: 17:da:46:48:ce:3d:c9:aa:04:7c:04:73:6c:4e:a5:73:86:93: d8:8e:07:6b:42:99:8c:81:1b:3e:d8:c4:9d:63:36:df:1f:f3: 25:45:82:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6PaRFgQ+VA9PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MmE1NWY5YmEtODYxYi00MTJhLWE4MWYtMjZhNTBiZDUwZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA6pts9B+qZ2ESA2vMp3OIo0fwbaTLd/tM5M NTqJA1NySeaL9Q27B7pSEeCPR67d7rbpHqiaIuK3rZwPMCLAXBq9N77TjazLNRWN TLpr96m4UeZF9J0DNhVXhYosAoVLcszupZgRS7PMYzpWADW4N0dmkALOFIh/NFAd 19MuX+/DOp0M3q7Tvuyzm7KHOFX2FbpmfnL7JMaFJnrKvGzHFmZmZzbpHepqMX+f m3U0qDia/aMPsMXcaZO8a9bG9/IjjfOILDt6mTWOvkuFiSheHEzwqXGHYRAe3HdN lR7j2+q+k/CK+1nk1QDo+Ku26Q/MhGe+n4vIaCLjFZDCZeB+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRRDBWUJv+Al4Z6CzGCYwh8hFoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY1OWRhYjctY2Q5Zi0z ZGMwLTg1ZDktMjZiNWNjOWI0ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFljNAoxR3RSDDlpuFq1F5ZVPYaEp9ikTnSlZAzxpgopOtFPqBIUPi1 UjdiqXlH/fABmonT/4B8O03P/59gZNPVoY6zOa2QziHUDLYXYqRugtFyT9eKfByU /ouwvTRtkOtkSqq1iQGRP4jQfFrB22ePlgYEWgGfhdKk7tW0DYBgNP72HZ6zhR8q Hejo9jk9CesPaylv99W+AezZi9AbxMR627OTQlJ89pb7UOJtcKwoq3L0z60lkbZU YssNsG8iCstaMx9/UB5lbK9sRSQFG5qZEzIyvDEBsxfaRkjOPcmqBHwEc2xOpXOG k9iOB2tCmYyBGz7YxJ1jNt8f8yVFgmM= -----END CERTIFICATE-----Generated at Thu Sep 24 01:31:44 2026 by rpki-client