$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64cc4dc0-b942-373c-921f-50d20e0b05ad.roa File: 64cc4dc0-b942-373c-921f-50d20e0b05ad.roa (raw, json) Hash identifier: bSrVZaRdMkfZ86DjClyWQGHSPkrlYY+uxGxNkbxZsJw= Subject key identifier: 2E:CA:30:99:9E:F9:94:23:C7:98:E6:71:85:1B:DE:7F:CD:90:F8:FA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F549D54C21C418500EF11AD80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64cc4dc0-b942-373c-921f-50d20e0b05ad.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.94.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:54:c2:1c:41:85:00:ef:11:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d4be232d-8180-41cf-9aa2-82bbca0bf7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:d4:55:f5:27:13:1d:bf:8f:90:67:36:7a: 00:73:40:06:8e:a6:0b:e5:89:58:d0:53:22:e6:14: 7f:c8:65:25:f0:75:c5:1e:17:15:df:15:06:36:06: 5c:d7:90:e5:7b:0f:9c:d0:99:b4:cd:57:7c:2d:0d: f9:bc:a6:5f:7d:bb:5e:fc:e9:37:8d:94:01:a9:ed: ee:29:04:e0:84:c9:bd:92:e7:3b:72:b9:7f:3c:89: ef:50:eb:ef:96:b6:0a:d8:3e:f2:5c:09:6d:19:83: 26:c4:33:49:16:b6:89:f9:97:d3:bc:51:08:56:72: a6:ff:ac:12:93:3f:c1:cf:07:a2:d5:ca:ab:15:0a: 1b:7e:8a:6c:5d:c8:b0:6c:a8:23:ce:68:62:7d:0c: c1:40:08:7a:fa:9b:68:21:3d:0b:84:04:70:6b:a4: bf:9b:51:25:bb:04:ae:03:b3:68:d7:68:d8:b1:6c: 1a:93:33:b7:a4:c9:9f:be:58:70:78:17:38:17:29: 7a:84:7b:40:ef:99:0a:0a:14:03:57:bf:eb:45:49: 20:95:1e:82:84:69:eb:94:8f:69:cc:c7:1d:43:fc: 73:af:da:01:39:95:0d:06:ba:14:5a:bc:14:34:ce: b1:73:29:a8:53:e6:9d:e3:da:56:27:24:c1:46:85: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CA:30:99:9E:F9:94:23:C7:98:E6:71:85:1B:DE:7F:CD:90:F8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64cc4dc0-b942-373c-921f-50d20e0b05ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7d:e2:c3:8a:a8:fe:4b:5d:33:47:d0:f5:c1:c6:58:3c:f2: d4:b2:70:e9:a6:a9:71:00:06:4d:0d:1a:95:69:af:a9:2a:35: 20:22:05:2d:12:c5:10:bf:23:6b:81:4b:64:ec:fd:ba:51:bc: f1:89:e5:5f:41:e9:49:10:61:8c:49:5e:6a:14:cf:83:97:9f: 2e:f6:da:46:dc:6e:9e:ab:a9:f9:51:ea:9b:25:b3:75:b0:0c: b4:32:99:4a:2d:09:6b:dc:50:69:c3:92:3a:82:bb:2a:2d:ee: 8e:93:db:fc:85:ad:16:ed:7d:6c:01:88:e5:1a:25:f3:34:cb: 9b:b3:31:76:15:0a:94:bc:a7:62:8d:87:20:42:03:ce:92:c3: ef:30:fd:be:25:11:3b:49:a4:19:d1:76:57:26:bc:9a:d9:0b: b9:c6:45:91:52:c9:44:d1:ff:ca:d6:45:af:a6:71:8f:44:e6: cd:a2:4b:63:61:a3:e6:3d:b7:6e:9c:3e:36:9e:53:0d:b6:34: 09:58:c9:87:55:1f:e7:8b:e5:47:87:eb:68:90:4c:d1:3a:18: 00:85:e5:99:50:c5:7e:cd:23:7e:60:a0:2c:ed:df:3d:a9:90: d8:75:28:6d:66:a4:ab:ba:49:3f:42:51:e0:12:34:1f:63:52: 86:33:16:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVTCHEGFAO8RrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDRiZTIzMmQtODE4MC00MWNmLTlhYTItODJiYmNhMGJmN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS3UVfUnEx2/j5BnNnoAc0AGjqYL5YlY0FMi 5hR/yGUl8HXFHhcV3xUGNgZc15Dlew+c0Jm0zVd8LQ35vKZffbte/Ok3jZQBqe3u KQTghMm9kuc7crl/PInvUOvvlrYK2D7yXAltGYMmxDNJFraJ+ZfTvFEIVnKm/6wS kz/Bzwei1cqrFQobfopsXciwbKgjzmhifQzBQAh6+ptoIT0LhARwa6S/m1EluwSu A7No12jYsWwakzO3pMmfvlhweBc4Fyl6hHtA75kKChQDV7/rRUkglR6ChGnrlI9p zMcdQ/xzr9oBOZUNBroUWrwUNM6xcymoU+ad49pWJyTBRoXAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7KMJme+ZQjx5jmcYUb3n/NkPj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjRjYzRkYzAtYjk0Mi0z NzNjLTkyMWYtNTBkMjBlMGIwNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB94sOKqP5LXTNH0PXBxlg88tSycOmmqXEABk0NGpVpr6kqNSAiBS0S xRC/I2uBS2Ts/bpRvPGJ5V9B6UkQYYxJXmoUz4OXny722kbcbp6rqflR6psls3Ww DLQymUotCWvcUGnDkjqCuyot7o6T2/yFrRbtfWwBiOUaJfM0y5uzMXYVCpS8p2KN hyBCA86Sw+8w/b4lETtJpBnRdlcmvJrZC7nGRZFSyUTR/8rWRa+mcY9E5s2iS2Nh o+Y9t26cPjaeUw22NAlYyYdVH+eL5UeH62iQTNE6GACF5ZlQxX7NI35goCzt3z2p kNh1KG1mpKu6ST9CUeASNB9jUoYzFhE= -----END CERTIFICATE-----Generated at Mon Oct 26 08:45:30 2026 by rpki-client