$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1df60a99-b459-3fe4-8b73-ea4a1abea315.roa File: 1df60a99-b459-3fe4-8b73-ea4a1abea315.roa (raw, json) Hash identifier: NFjdrlTxU2/EJsXit8ETemO1zZqOynZTYyA5TFUlAzg= Subject key identifier: 28:16:E8:DD:59:5D:79:8C:42:AF:69:78:31:AA:39:B3:7C:B3:08:64 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F498A95BE0537BEEEEFA427E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1df60a99-b459-3fe4-8b73-ea4a1abea315.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3223 IP address blocks: 172.94.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:95:be:05:37:be:ee:ef:a4:27:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f7afc8d4-814f-441c-a82c-6285647b5785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:fa:9e:a1:34:e3:77:7d:27:99:b3:2b:5c: 24:4e:84:f8:dd:f3:22:f3:7c:8b:f4:44:ed:00:9b: ff:8b:eb:25:88:1c:39:5e:d4:37:5b:50:15:90:40: 99:e8:e0:33:d3:b3:de:23:12:3f:9d:01:4c:f5:e8: 7c:9d:9e:39:31:01:d6:4d:f2:53:d7:5c:e3:5d:64: 97:26:f8:1b:5e:3f:e9:80:e2:af:a6:fb:f3:da:29: e8:ca:e9:d8:fe:43:47:c7:20:b7:ad:1d:ec:80:06: f0:f2:68:e5:9b:9f:db:a3:e0:c8:eb:26:35:5b:5a: 47:ff:cb:0b:dd:2f:94:bd:a7:1a:d5:c0:9f:a0:89: 97:ab:2c:f7:fb:d0:6c:72:c7:d9:36:9d:8e:2e:53: f9:d3:a1:b3:70:b9:b4:51:12:04:24:95:b6:36:70: dd:53:9d:4f:59:53:80:a1:8b:84:35:f2:42:46:6a: c3:e0:34:07:3b:61:6c:5b:c2:e6:38:51:ba:68:18: f6:f1:6e:d3:a9:6e:21:fa:06:5c:ee:64:21:7d:0b: c2:be:a0:3b:9c:82:cc:d7:ef:5a:3b:e9:40:b3:d2: 41:69:b3:8e:9f:97:c2:0b:c7:87:d8:f2:44:19:7f: ee:ec:8a:47:2e:0e:2d:d4:fb:5c:34:90:fc:fc:dd: c4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:16:E8:DD:59:5D:79:8C:42:AF:69:78:31:AA:39:B3:7C:B3:08:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1df60a99-b459-3fe4-8b73-ea4a1abea315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e4:23:b2:fa:cd:b4:34:da:4d:e8:91:5f:f2:47:b8:f1:af: 4e:b3:b9:b3:80:e5:ab:c3:29:17:f3:76:93:01:1e:44:22:3c: 9d:45:a2:cf:90:4c:14:8c:c9:8f:63:c0:3b:89:8e:e7:82:5c: 7c:75:6a:fc:1a:34:e2:fd:86:b8:fe:5a:7a:ae:b7:c5:d0:b6: 98:ed:aa:99:60:60:9b:58:0b:a0:0d:55:9a:61:0f:fc:5c:bc: b0:15:4f:7b:38:f1:59:c6:da:f9:86:4a:82:5c:db:e2:7b:a4: 1a:78:04:fc:96:d1:3f:d2:22:45:a1:3f:73:7b:b8:a6:89:ec: 77:ff:c3:13:02:39:a4:ff:14:69:eb:e8:e5:05:50:77:5c:67: db:ca:46:93:f0:11:f3:58:47:bd:01:db:d3:56:19:02:48:d1: f9:0a:9d:47:e5:fc:00:c6:14:33:9c:a1:2f:45:6c:f8:33:54: 0b:0c:2d:e8:d8:74:e7:73:8e:30:f1:75:71:b2:ca:3c:cb:9f: 77:f5:d5:c1:ba:2a:24:7b:c8:5b:cd:7a:9d:1b:39:26:ab:82: c1:ea:b7:7b:27:4c:81:7b:70:bf:52:01:cf:94:2b:1a:73:ac: e4:50:f6:cb:eb:08:75:56:eb:0c:ed:91:c2:3e:d3:02:25:b6: d6:cd:c4:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JipW+BTe+7u+kJ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjdhZmM4ZDQtODE0Zi00NDFjLWE4MmMtNjI4NTY0N2I1Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokn6nqE043d9J5mzK1wkToT43fMi83yL9ETt AJv/i+sliBw5XtQ3W1AVkECZ6OAz07PeIxI/nQFM9eh8nZ45MQHWTfJT11zjXWSX JvgbXj/pgOKvpvvz2inoyunY/kNHxyC3rR3sgAbw8mjlm5/bo+DI6yY1W1pH/8sL 3S+Uvaca1cCfoImXqyz3+9BscsfZNp2OLlP506GzcLm0URIEJJW2NnDdU51PWVOA oYuENfJCRmrD4DQHO2FsW8LmOFG6aBj28W7TqW4h+gZc7mQhfQvCvqA7nILM1+9a O+lAs9JBabOOn5fCC8eH2PJEGX/u7IpHLg4t1PtcNJD8/N3EGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgW6N1ZXXmMQq9peDGqObN8swhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWRmNjBhOTktYjQ1OS0z ZmU0LThiNzMtZWE0YTFhYmVhMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHkI7L6zbQ02k3okV/yR7jxr06zubOA5avDKRfzdpMBHkQiPJ1Fos+Q TBSMyY9jwDuJjueCXHx1avwaNOL9hrj+Wnqut8XQtpjtqplgYJtYC6ANVZphD/xc vLAVT3s48VnG2vmGSoJc2+J7pBp4BPyW0T/SIkWhP3N7uKaJ7Hf/wxMCOaT/FGnr 6OUFUHdcZ9vKRpPwEfNYR70B29NWGQJI0fkKnUfl/ADGFDOcoS9FbPgzVAsMLejY dOdzjjDxdXGyyjzLn3f11cG6KiR7yFvNep0bOSargsHqt3snTIF7cL9SAc+UKxpz rORQ9svrCHVW6wztkcI+0wIlttbNxMM= -----END CERTIFICATE-----Generated at Tue Oct 20 06:54:43 2026 by rpki-client