$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa File: 728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa (raw, json) Hash identifier: vrO+egk57plniDagTRxR7ltdsuqJd58gV3EA3jvszOs= Subject key identifier: F4:0B:D4:3D:B3:BA:30:82:A4:E1:7C:25:34:EA:E9:E6:AE:F1:26:9E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7A4D9F0050787A7A38E67500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 9009 IP address blocks: 172.94.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9f:00:50:78:7a:7a:38:e6:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=8e406729-96c9-45b2-83cb-8a1ab39a3ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:ed:c8:0c:24:a6:13:d7:1a:b0:c8:96:54: ab:9e:74:d1:af:97:65:74:50:c7:6f:aa:57:02:84: 9d:a1:31:95:b7:f6:84:76:52:f4:90:81:4d:81:29: fd:f9:29:fc:df:0a:3c:e1:0b:89:cd:a1:13:ec:a1: 40:64:6e:53:ea:19:03:8b:f1:74:fc:05:fe:5b:bc: 88:b3:25:f3:5e:9b:38:50:8f:39:c7:8a:81:ac:e6: c1:00:ae:bc:99:14:d9:6e:7c:f5:7d:06:78:cf:c7: c7:1c:49:72:64:3f:3e:74:71:82:ba:ed:27:5a:a1: 71:ab:a2:e1:79:47:f2:b1:8a:63:8a:ee:ef:b4:65: b3:11:2e:b0:e6:f4:56:0d:1b:f0:0a:97:ec:f6:08: 5d:a9:aa:d8:3d:9f:af:1d:d4:2a:ef:01:ba:a0:3d: e6:06:9a:8f:4e:67:8f:ee:2e:46:52:59:6d:ee:38: 29:04:6b:70:e3:fe:50:08:6c:cd:e3:fb:62:e8:a2: 98:cb:62:25:33:c6:11:5d:7c:ec:14:27:04:44:17: 6e:c7:45:01:4a:28:5f:98:df:7f:44:62:1a:03:55: e5:3b:99:db:fa:98:bc:89:9f:f7:6a:60:27:03:57: 91:95:a4:c0:79:14:02:7c:ea:8d:78:20:83:58:35: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0B:D4:3D:B3:BA:30:82:A4:E1:7C:25:34:EA:E9:E6:AE:F1:26:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:62:19:5f:2c:bd:08:cd:0b:11:fe:94:d5:9e:01:29:e9:a3: 95:d2:b3:d6:15:32:2a:de:13:d5:cd:98:2b:79:05:a1:8a:6e: 55:97:1b:6d:a0:36:92:c5:8f:a3:c8:9f:ac:17:51:f6:ba:40: c1:ed:c1:c2:90:58:48:73:90:6b:7a:59:da:ba:92:a0:f1:ec: 4f:5e:1e:85:27:bf:64:c0:75:17:ed:84:19:f7:c2:89:90:6d: 53:9c:9e:a4:af:4f:98:04:c1:32:4f:c7:c5:62:2d:48:31:3a: 33:5a:b9:6a:f5:e7:49:0a:df:00:1c:7c:d0:f1:70:b6:25:47: c9:96:0c:8b:cb:1b:65:1a:e1:fe:9b:9b:2d:3c:83:50:04:04: 1d:8e:48:57:20:01:47:5c:ec:fe:13:e4:db:31:71:1d:40:e1: f7:a2:ab:7d:03:30:65:0e:0d:a8:40:f1:b3:51:d7:60:be:07: 64:80:44:c5:f5:1e:29:d2:00:d3:a0:a4:eb:90:a5:1f:06:6a: af:2d:b6:49:e2:2e:dc:fc:44:4d:ca:19:04:2a:04:43:0d:ee: ef:9b:2d:04:ca:1d:1f:ed:3e:95:2c:8d:b3:26:4e:c6:51:16: 1d:4a:d2:9c:df:0c:4c:3b:00:0e:01:6e:03:07:ab:b3:10:ed: 20:51:f5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZ8AUHh6ejjmdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OGU0MDY3MjktOTZjOS00NWIyLTgzY2ItOGExYWIzOWEzZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvDtyAwkphPXGrDIllSrnnTRr5dldFDHb6pX AoSdoTGVt/aEdlL0kIFNgSn9+Sn83wo84QuJzaET7KFAZG5T6hkDi/F0/AX+W7yI syXzXps4UI85x4qBrObBAK68mRTZbnz1fQZ4z8fHHElyZD8+dHGCuu0nWqFxq6Lh eUfysYpjiu7vtGWzES6w5vRWDRvwCpfs9ghdqarYPZ+vHdQq7wG6oD3mBpqPTmeP 7i5GUllt7jgpBGtw4/5QCGzN4/ti6KKYy2IlM8YRXXzsFCcERBdux0UBSihfmN9/ RGIaA1XlO5nb+pi8iZ/3amAnA1eRlaTAeRQCfOqNeCCDWDUCOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQL1D2zujCCpOF8JTTq6eau8SaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzI4YTZkZGMtNmRmMy0z MWJiLWI5YWEtNTNkYzkzYTU3NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINiGV8svQjNCxH+lNWeASnpo5XSs9YVMireE9XNmCt5BaGKblWXG22g NpLFj6PIn6wXUfa6QMHtwcKQWEhzkGt6Wdq6kqDx7E9eHoUnv2TAdRfthBn3womQ bVOcnqSvT5gEwTJPx8ViLUgxOjNauWr150kK3wAcfNDxcLYlR8mWDIvLG2Ua4f6b my08g1AEBB2OSFcgAUdc7P4T5NsxcR1A4feiq30DMGUODahA8bNR12C+B2SARMX1 HinSANOgpOuQpR8Gaq8ttkniLtz8RE3KGQQqBEMN7u+bLQTKHR/tPpUsjbMmTsZR Fh1K0pzfDEw7AA4BbgMHq7MQ7SBR9XE= -----END CERTIFICATE-----Generated at Tue Oct 27 09:08:34 2026 by rpki-client