$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa File: 85e02586-1263-3d5a-8bb9-97511820530e.roa (raw, json) Hash identifier: 7gK5C//q3wecoX+JXW9maWwlqXoMecZ1MLVMief1tsc= Subject key identifier: 0E:12:20:8E:3C:B5:DC:E6:9E:28:88:6B:1F:BB:98:07:C4:43:C4:36 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352E24E7244DB36CFBE7D00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.94.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e2:4e:72:44:db:36:cf:be:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=70b63b94-2110-4e6a-b98f-d03ba7b2b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:60:8a:f5:73:e1:e6:79:60:75:df:5f:1b: 38:f5:26:06:b9:65:a0:4e:81:1d:ef:6e:01:93:bc: 58:d1:5b:ef:9a:59:32:ca:6e:d7:84:17:8f:d6:ff: b5:86:4b:a4:fa:ad:17:43:fb:94:ed:66:a2:07:2c: e5:30:0c:c9:0d:b3:79:29:3f:d4:5a:01:12:b2:7c: 29:bd:80:45:c9:27:40:86:b5:9a:5e:5c:07:54:65: 0c:0b:52:ae:8d:1f:9b:b4:e9:22:1f:de:4e:2f:87: ea:b8:7d:09:7a:d6:68:ca:bb:30:d4:a9:37:e5:41: c8:54:ad:be:b5:bf:ae:c9:bb:a5:77:c1:99:69:00: 67:0b:ef:09:d1:b5:73:a6:d9:d2:d7:4e:88:39:c7: 3b:c8:3f:84:df:2b:63:4a:3f:16:3a:87:9f:89:01: 08:8e:8c:50:e2:bd:ce:26:31:56:dd:93:09:e7:ad: eb:77:94:cf:a1:89:55:3f:d7:0a:e3:02:bb:23:ca: a7:c5:be:f2:07:b9:bb:6d:64:41:07:b6:72:3e:61: 68:56:57:94:d4:f8:f6:aa:83:21:00:b4:52:3b:dd: 48:5d:fa:98:ba:90:79:5f:47:8e:99:dd:44:80:f2: 36:a0:41:8d:90:ea:f2:d7:bd:67:90:d8:19:be:88: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:12:20:8E:3C:B5:DC:E6:9E:28:88:6B:1F:BB:98:07:C4:43:C4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8f:05:e8:d1:17:53:65:82:8f:88:56:a8:fe:fc:58:a7:c5: e3:c9:73:2a:fb:88:3d:9c:21:8b:7b:1f:17:f3:09:e4:56:98: 23:d6:31:eb:db:cf:d9:8a:58:5a:7f:d9:65:d5:cb:e2:66:e4: 3c:f6:b7:4b:6f:9f:dd:a5:54:bc:64:22:0e:e0:4f:a9:c6:74: 2d:e9:97:b4:c5:2f:6b:7f:e8:81:29:01:46:8c:0e:5f:1b:e1: d7:bc:a4:cd:b3:d2:40:d6:a8:57:ba:ca:5d:0f:4b:d1:8b:c6: d6:e7:4c:b5:a7:f3:33:4c:e3:df:f1:78:32:0c:e1:bc:12:6f: e9:52:e0:ad:8c:25:ff:06:7a:c6:66:e1:07:b4:bc:f1:e1:39: 61:48:5a:40:4c:a9:b0:71:37:23:f9:11:c6:bb:61:bf:61:d0: 6a:dc:17:7b:f8:44:1e:0d:c5:fd:c2:c1:c3:5a:91:05:87:15: 81:53:a4:1d:da:c8:34:7e:d4:c0:fb:da:51:c2:35:c4:de:cf: 85:b4:4c:00:52:4c:39:fe:7c:aa:9e:bc:9e:d6:9b:5d:af:c3: ba:73:08:bd:36:b2:5b:da:7c:33:90:05:de:9b:39:c3:29:4e: a3:48:91:7a:09:d7:f8:17:f3:67:a2:25:15:d0:05:15:aa:bd: 29:fb:56:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuJOckTbNs++fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk NzBiNjNiOTQtMjExMC00ZTZhLWI5OGYtZDAzYmE3YjJiNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD9givVz4eZ5YHXfXxs49SYGuWWgToEd724B k7xY0Vvvmlkyym7XhBeP1v+1hkuk+q0XQ/uU7WaiByzlMAzJDbN5KT/UWgESsnwp vYBFySdAhrWaXlwHVGUMC1KujR+btOkiH95OL4fquH0JetZoyrsw1Kk35UHIVK2+ tb+uybuld8GZaQBnC+8J0bVzptnS106IOcc7yD+E3ytjSj8WOoefiQEIjoxQ4r3O JjFW3ZMJ563rd5TPoYlVP9cK4wK7I8qnxb7yB7m7bWRBB7ZyPmFoVleU1Pj2qoMh ALRSO91IXfqYupB5X0eOmd1EgPI2oEGNkOry171nkNgZvoiNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4SII48tdzmniiIax+7mAfEQ8Q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODVlMDI1ODYtMTI2My0z ZDVhLThiYjktOTc1MTE4MjA1MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2PBejRF1Nlgo+IVqj+/FinxePJcyr7iD2cIYt7HxfzCeRWmCPWMevb z9mKWFp/2WXVy+Jm5Dz2t0tvn92lVLxkIg7gT6nGdC3pl7TFL2t/6IEpAUaMDl8b 4de8pM2z0kDWqFe6yl0PS9GLxtbnTLWn8zNM49/xeDIM4bwSb+lS4K2MJf8GesZm 4Qe0vPHhOWFIWkBMqbBxNyP5Eca7Yb9h0GrcF3v4RB4Nxf3CwcNakQWHFYFTpB3a yDR+1MD72lHCNcTez4W0TABSTDn+fKqevJ7Wm12vw7pzCL02slvafDOQBd6bOcMp TqNIkXoJ1/gX82eiJRXQBRWqvSn7Vjc= -----END CERTIFICATE-----Generated at Wed Oct 28 04:52:17 2026 by rpki-client