$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5961c68e-bcfb-3004-9caa-880f2461db47.roa File: 5961c68e-bcfb-3004-9caa-880f2461db47.roa (raw, json) Hash identifier: 16mkoksSKlaCPMnxPuDNdlJindd/4IhZdInfL6jySN0= Subject key identifier: 06:DF:13:A1:8A:D4:4B:75:A9:74:7B:30:C4:73:30:F3:1C:BE:B6:DD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352E1CF97E292CB78A1C900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5961c68e-bcfb-3004-9caa-880f2461db47.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.94.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e1:cf:97:e2:92:cb:78:a1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=a2afa267-d6ab-4529-9384-d840b848ab81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:0c:b7:93:4d:33:99:bc:2a:40:c0:9f:14: bb:8a:9e:3b:33:d6:8b:d8:8e:c1:87:8d:f6:df:5b: b5:f7:2d:9f:a4:27:7c:29:30:c2:ba:6c:57:5d:4c: be:e9:23:90:f8:c0:fd:67:64:68:a0:24:f0:be:39: 9e:40:19:a4:e0:c5:1b:a2:9c:e1:20:a2:42:ed:88: 8b:54:e9:a1:7b:42:5d:3c:97:4d:97:bd:dc:d9:62: e3:24:10:b0:5d:70:60:48:4d:14:3a:4b:1a:09:f1: 7e:5f:c3:2e:f5:5d:3c:4e:c7:1c:4f:80:98:7a:e2: 46:a1:b3:00:6d:63:c5:14:30:da:5c:38:f1:65:80: 1e:d0:ef:73:5f:b9:ae:8e:2d:36:fc:87:eb:a7:56: a5:d3:a0:d8:5d:81:ea:b4:15:ab:ca:32:86:b1:1a: ec:4a:05:04:8d:60:06:1e:ec:8d:7a:37:80:e3:2a: 66:63:61:7f:5e:46:0b:6d:d6:73:38:8e:8c:5d:cd: 90:b6:2b:47:86:d2:bf:68:9b:84:f2:a5:f2:27:59: 3f:4f:d3:39:5f:53:a5:af:92:46:21:42:6a:f8:18: 95:5a:a4:c9:e0:ca:26:a2:8f:c7:74:fd:60:b8:ab: e0:f8:fc:c8:1c:c7:5d:b7:a0:b9:9b:2d:a2:a3:0f: f0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:13:A1:8A:D4:4B:75:A9:74:7B:30:C4:73:30:F3:1C:BE:B6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5961c68e-bcfb-3004-9caa-880f2461db47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:53:88:76:61:da:e3:b3:60:18:a8:75:29:21:39:91:c0:6d: 25:7b:99:b2:a6:42:9d:4d:a9:47:22:b6:5b:43:71:ec:ff:ae: 83:ab:3f:d2:d3:05:32:f4:80:45:53:1b:54:36:aa:6d:97:5a: d7:29:92:78:f7:d7:23:93:c2:9c:ec:bf:d5:89:50:7f:e0:90: 08:dc:6c:c6:28:8d:53:6a:84:f0:59:55:9e:ee:dc:bd:63:c8: d4:39:40:f1:bb:f5:7b:9f:b5:88:24:bc:38:1d:f3:0d:de:b9: 51:39:72:b6:22:77:70:2b:93:cc:04:8f:05:77:56:cc:56:cf: 84:0f:95:4f:9f:03:94:4b:b3:1b:4b:b1:61:8c:6b:9f:3e:82: 87:5e:61:98:d6:fd:98:f2:e3:38:34:92:7e:d8:eb:35:60:04: 83:f1:61:8f:ee:88:63:e9:4c:02:ed:b9:11:e1:07:7d:e3:44: e1:f1:31:01:91:8c:ba:fa:1c:b6:4a:19:86:ef:8e:39:70:36: 66:81:a0:e1:02:73:77:78:4e:6b:b1:0a:d9:94:b1:f3:22:81: 8b:6a:f1:b2:3a:c2:87:3b:5f:d5:75:1e:98:37:e2:2b:9f:9c: ab:93:5d:7a:d1:b9:f2:69:fd:f8:8f:c1:bd:40:c5:30:f9:9e: 2d:60:06:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuHPl+KSy3ihyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk YTJhZmEyNjctZDZhYi00NTI5LTkzODQtZDg0MGI4NDhhYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgYMt5NNM5m8KkDAnxS7ip47M9aL2I7Bh432 31u19y2fpCd8KTDCumxXXUy+6SOQ+MD9Z2RooCTwvjmeQBmk4MUbopzhIKJC7YiL VOmhe0JdPJdNl73c2WLjJBCwXXBgSE0UOksaCfF+X8Mu9V08TsccT4CYeuJGobMA bWPFFDDaXDjxZYAe0O9zX7muji02/Ifrp1al06DYXYHqtBWryjKGsRrsSgUEjWAG HuyNejeA4ypmY2F/XkYLbdZzOI6MXc2QtitHhtK/aJuE8qXyJ1k/T9M5X1Olr5JG IUJq+BiVWqTJ4Momoo/HdP1guKvg+PzIHMddt6C5my2iow/wLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbfE6GK1Et1qXR7MMRzMPMcvrbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTk2MWM2OGUtYmNmYi0z MDA0LTljYWEtODgwZjI0NjFkYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNTiHZh2uOzYBiodSkhOZHAbSV7mbKmQp1NqUcitltDcez/roOrP9LT BTL0gEVTG1Q2qm2XWtcpknj31yOTwpzsv9WJUH/gkAjcbMYojVNqhPBZVZ7u3L1j yNQ5QPG79XuftYgkvDgd8w3euVE5crYid3Ark8wEjwV3VsxWz4QPlU+fA5RLsxtL sWGMa58+godeYZjW/Zjy4zg0kn7Y6zVgBIPxYY/uiGPpTALtuRHhB33jROHxMQGR jLr6HLZKGYbvjjlwNmaBoOECc3d4TmuxCtmUsfMigYtq8bI6woc7X9V1Hpg34iuf nKuTXXrRufJp/fiPwb1AxTD5ni1gBs0= -----END CERTIFICATE-----Generated at Mon Oct 26 08:45:34 2026 by rpki-client