$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/38be73b6-1a00-3d6c-b112-1bc4bbd19d7e.roa File: 38be73b6-1a00-3d6c-b112-1bc4bbd19d7e.roa (raw, json) Hash identifier: N7OrlRxACvUqPW7GZ0KSEWrroFymP1x7iaaZ1j0z0HU= Subject key identifier: 1C:2C:FA:57:F8:C0:A5:49:EB:77:6E:18:07:84:6A:45:46:C9:40:EC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352D27B506D2AC23750AA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/38be73b6-1a00-3d6c-b112-1bc4bbd19d7e.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.94.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d2:7b:50:6d:2a:c2:37:50:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=a4ac938f-b756-424b-a6b4-6e43645288d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:e1:4e:0b:de:6f:09:75:8d:4b:cd:ad:f8: 1a:9e:a7:a2:79:58:a5:9a:b2:3f:b1:40:38:c9:63: 25:e5:0c:f5:a7:bd:f1:80:0e:39:51:94:a1:49:d3: b8:8a:c3:3b:e9:0e:4e:c5:fe:4c:84:4d:e9:79:36: 93:77:68:0c:bb:a6:e8:c3:a7:50:2c:00:e1:7c:57: 9e:68:d6:e3:64:93:8d:0b:1f:99:c9:79:24:97:6e: 5f:3b:9c:ea:ae:07:8e:b5:e8:75:ed:6e:38:a6:18: 17:96:78:60:07:32:68:e0:47:f9:b1:a6:04:2f:70: cb:6c:2e:37:ff:3f:c5:9e:7a:9d:af:59:e8:4d:77: b5:58:14:28:35:4e:92:36:3a:1a:a8:d4:bb:51:b2: 15:e8:44:e4:9f:fc:cb:62:48:94:9a:3a:c0:09:67: ca:37:9b:f2:4e:f4:bc:6a:d6:4c:19:f4:5b:84:45: d1:e3:43:df:92:17:16:e5:8e:d6:82:0f:32:43:51: 4e:46:2f:a6:52:ea:a4:c7:d6:c2:08:89:16:62:62: d9:cd:2b:ed:99:14:ba:6a:06:66:10:d4:be:98:df: b6:b2:e8:4c:fa:93:4b:55:70:73:6b:2a:01:17:49: e1:d9:13:94:39:09:5c:84:e2:7a:ff:ad:9c:ca:9f: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2C:FA:57:F8:C0:A5:49:EB:77:6E:18:07:84:6A:45:46:C9:40:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/38be73b6-1a00-3d6c-b112-1bc4bbd19d7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:28:15:54:59:26:6d:84:e8:07:c9:b1:6c:a4:e8:c9:ae:f5: 85:89:4e:14:3c:e6:4d:5d:03:2b:6f:7a:41:e4:d6:3e:26:38: f9:3a:fc:a5:2d:1a:14:df:b9:2c:8e:79:15:ef:e9:9e:60:99: b7:69:90:82:df:ba:61:6e:88:be:e1:16:20:7a:27:32:b5:05: aa:bd:2c:07:21:72:c9:04:76:99:c1:73:f6:58:e9:ce:81:3f: f1:6c:26:aa:f9:27:6e:cd:66:38:ef:13:c3:82:8d:40:8f:24: 2a:f6:1d:60:59:1a:be:c7:a6:13:72:e0:e9:7c:13:d4:26:73: 0b:a5:28:0a:51:36:90:39:8c:47:64:0e:42:e4:70:57:1d:f7: 03:84:96:ab:b0:e4:58:86:77:3c:4a:52:fa:bd:69:12:96:37: 74:96:98:c9:11:8e:68:88:88:6a:e4:a1:96:c5:84:67:28:01: c0:2b:19:42:aa:55:a3:77:13:94:2f:65:d2:5d:41:d5:30:dc: 21:4f:49:bc:fe:a1:23:dd:b4:f2:47:b3:95:b2:be:5b:ab:79: 04:4b:d9:48:2a:e1:52:f2:bb:b0:16:e1:f6:11:63:cf:4a:bd: 24:d6:18:8f:27:7f:1a:55:70:3d:40:92:34:fb:e9:2d:40:4b: 79:ca:f3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtJ7UG0qwjdQqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk YTRhYzkzOGYtYjc1Ni00MjRiLWE2YjQtNmU0MzY0NTI4OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyjhTgvebwl1jUvNrfganqeieVilmrI/sUA4 yWMl5Qz1p73xgA45UZShSdO4isM76Q5Oxf5MhE3peTaTd2gMu6bow6dQLADhfFee aNbjZJONCx+ZyXkkl25fO5zqrgeOteh17W44phgXlnhgBzJo4Ef5saYEL3DLbC43 /z/Fnnqdr1noTXe1WBQoNU6SNjoaqNS7UbIV6ETkn/zLYkiUmjrACWfKN5vyTvS8 atZMGfRbhEXR40PfkhcW5Y7Wgg8yQ1FORi+mUuqkx9bCCIkWYmLZzSvtmRS6agZm ENS+mN+2suhM+pNLVXBzayoBF0nh2ROUOQlchOJ6/62cyp8dLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBws+lf4wKVJ63duGAeEakVGyUDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzhiZTczYjYtMWEwMC0z ZDZjLWIxMTItMWJjNGJiZDE5ZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF50MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4oFVRZJm2E6AfJsWyk6Mmu9YWJThQ85k1dAytvekHk1j4mOPk6/KUt GhTfuSyOeRXv6Z5gmbdpkILfumFuiL7hFiB6JzK1Baq9LAchcskEdpnBc/ZY6c6B P/FsJqr5J27NZjjvE8OCjUCPJCr2HWBZGr7HphNy4Ol8E9QmcwulKApRNpA5jEdk DkLkcFcd9wOElquw5FiGdzxKUvq9aRKWN3SWmMkRjmiIiGrkoZbFhGcoAcArGUKq VaN3E5QvZdJdQdUw3CFPSbz+oSPdtPJHs5WyvlureQRL2Ugq4VLyu7AW4fYRY89K vSTWGI8nfxpVcD1AkjT76S1AS3nK87g= -----END CERTIFICATE-----Generated at Wed Oct 21 21:07:12 2026 by rpki-client