$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa File: 3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa (raw, json) Hash identifier: 1JQDYlAHVISOj/dSCMZKTMzIwLUDagTer3C815jO6S0= Subject key identifier: 9F:E6:D8:B2:3E:2C:75:48:E7:6D:2A:9D:91:D0:F3:ED:B8:6B:3D:EF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F857870A1754BC796EB2408C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 9009 IP address blocks: 172.94.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:70:a1:75:4b:c7:96:eb:24:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=d7a6ba26-5fb1-470b-81c4-47dc1e120026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:11:ee:5b:51:09:93:24:9f:6c:3c:1e:92: a3:11:2e:94:b0:8a:b1:4f:8c:ff:5b:67:0f:7d:3d: b6:a5:ae:41:96:27:2d:7d:02:e2:b8:80:7b:3a:c2: 11:0e:ea:0e:53:a1:df:9a:3d:78:4a:87:56:d2:b8: 01:70:ea:c3:27:86:76:6f:28:2c:b4:3c:dd:d1:6c: a5:c3:3f:ef:f7:a3:d7:ac:81:61:d5:4d:70:3c:00: 74:03:7e:e9:fd:67:94:3b:4a:4b:47:17:0f:79:89: b8:46:bc:0e:51:7f:21:6b:d4:8d:1e:de:9f:22:98: aa:05:85:ea:62:30:de:08:02:a2:56:6a:a9:5e:47: 46:4d:54:c5:06:d5:c4:1b:54:54:c9:e6:fd:74:81: d6:85:29:b7:36:f7:f9:04:9e:b7:32:8c:69:72:d4: 2a:88:15:f7:7b:5e:c3:c1:af:90:41:8e:42:7f:5c: f8:ba:3b:3b:26:67:71:b8:8c:08:44:6b:91:df:0b: fd:b4:6a:c0:0c:c8:a2:9e:4d:7e:7d:97:f0:d8:0e: b4:63:c1:6f:64:cb:e0:16:04:59:ce:aa:63:1d:7d: c5:e8:34:fb:b7:55:2a:20:32:04:6e:40:a9:3f:2a: 78:fd:1e:16:24:c8:81:43:a2:c7:57:43:a6:40:27: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:D8:B2:3E:2C:75:48:E7:6D:2A:9D:91:D0:F3:ED:B8:6B:3D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b4:7f:39:56:fb:4f:02:b6:46:0c:1c:9a:c3:9e:19:9e:b7: 07:ba:05:86:7b:0f:0a:c9:b4:83:15:ec:66:59:b5:f2:80:fb: d5:f5:01:88:1a:85:ea:6f:03:48:00:be:09:07:d8:b9:fa:91: d6:af:5f:03:d4:8b:41:fd:d2:84:de:24:a1:2b:50:b9:95:2f: a7:dd:26:6c:fb:05:cc:be:07:f7:b3:32:52:39:58:b9:dc:f3: 53:c5:08:76:c6:64:2b:9a:63:a4:4e:c2:71:91:30:fe:b1:56: ef:8d:94:80:59:7f:0f:3f:32:44:4a:29:14:72:3d:ab:95:d6: 7d:55:0c:e7:e8:a7:63:18:20:19:c4:e6:e7:84:c6:71:0e:ae: d5:bc:20:0f:cd:c9:f6:3d:44:8a:96:86:9e:b9:d3:1a:23:8f: 05:21:59:ed:f1:51:77:30:a0:7a:aa:e9:f2:e9:aa:45:0a:c8: 2b:7a:00:7b:97:1d:b2:41:a5:fd:4b:5f:a1:cd:a6:75:7f:7d: eb:16:5d:00:09:dd:00:c2:e1:ea:6b:63:a6:09:b8:a9:0c:cc: 84:cc:59:d2:08:dc:46:83:42:11:25:73:1e:7b:32:12:a2:fe: 8f:f7:a2:4e:2f:8d:da:d0:c6:1a:c2:ef:8a:a3:78:53:17:18: e2:58:d1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHChdUvHluskCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDdhNmJhMjYtNWZiMS00NzBiLTgxYzQtNDdkYzFlMTIwMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn44R7ltRCZMkn2w8HpKjES6UsIqxT4z/W2cP fT22pa5BlictfQLiuIB7OsIRDuoOU6Hfmj14SodW0rgBcOrDJ4Z2bygstDzd0Wyl wz/v96PXrIFh1U1wPAB0A37p/WeUO0pLRxcPeYm4RrwOUX8ha9SNHt6fIpiqBYXq YjDeCAKiVmqpXkdGTVTFBtXEG1RUyeb9dIHWhSm3Nvf5BJ63MoxpctQqiBX3e17D wa+QQY5Cf1z4ujs7JmdxuIwIRGuR3wv9tGrADMiink1+fZfw2A60Y8FvZMvgFgRZ zqpjHX3F6DT7t1UqIDIEbkCpPyp4/R4WJMiBQ6LHV0OmQCcuXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/m2LI+LHVI520qnZHQ8+24az3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2FlYTJkYTAtNWUwZC0z ZGM4LTgyMTAtODBhYTllNjY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi0fzlW+08CtkYMHJrDnhmetwe6BYZ7DwrJtIMV7GZZtfKA+9X1AYga hepvA0gAvgkH2Ln6kdavXwPUi0H90oTeJKErULmVL6fdJmz7Bcy+B/ezMlI5WLnc 81PFCHbGZCuaY6ROwnGRMP6xVu+NlIBZfw8/MkRKKRRyPauV1n1VDOfop2MYIBnE 5ueExnEOrtW8IA/NyfY9RIqWhp650xojjwUhWe3xUXcwoHqq6fLpqkUKyCt6AHuX HbJBpf1LX6HNpnV/fesWXQAJ3QDC4eprY6YJuKkMzITMWdII3EaDQhElcx57MhKi /o/3ok4vjdrQxhrC74qjeFMXGOJY0Yc= -----END CERTIFICATE-----Generated at Wed Oct 21 21:11:23 2026 by rpki-client