$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901872c3-1d91-33b1-9de3-9dca0cc4312c.roa File: 901872c3-1d91-33b1-9de3-9dca0cc4312c.roa (raw, json) Hash identifier: Ercyp0kFC03gMAIHEBkXYkV1RX5XhTXZ5gVmI+FoV4w= Subject key identifier: 1A:80:66:03:4A:0F:99:5D:E4:21:53:4F:08:40:7E:F6:F1:A5:29:4F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F49732A3770B8C09C16BF1EC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901872c3-1d91-33b1-9de3-9dca0cc4312c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3223 IP address blocks: 172.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2a:37:70:b8:c0:9c:16:bf:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=adb77250-9811-4110-bcf1-8b107fc4f7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:ba:d3:7e:18:36:d1:c4:26:2c:78:ae:2f: d0:5c:cd:5e:db:03:7e:d9:0f:86:9f:10:75:7a:df: 76:84:58:a4:66:b6:4f:6a:46:ed:08:58:f0:e3:6c: 12:17:15:9e:0d:32:4e:63:67:68:79:92:05:0c:7a: de:db:83:5e:12:07:8d:1a:31:9d:d0:05:40:97:8c: 69:76:ec:ac:b0:6b:7f:a3:6d:0a:4e:a3:aa:e0:cb: 41:d0:1e:a4:36:26:95:66:64:2a:34:18:6e:5c:d7: 79:c7:16:a3:b8:18:8a:ef:af:75:d1:98:ba:f1:7d: f1:81:4c:6f:9f:e5:fa:de:8e:af:ad:40:d7:fb:f5: 14:f7:c8:19:fd:58:2e:7a:f2:df:2c:38:e0:89:ea: 24:53:3c:f9:9b:e5:c6:03:f9:1d:bc:77:e8:f0:78: f6:da:1d:36:da:a2:a6:be:66:8c:bf:f2:9a:f8:c9: 1d:58:27:0b:cd:39:f4:14:ce:79:59:96:87:f7:ae: 76:52:ad:e4:8c:c1:2e:17:d2:6e:a4:c2:b3:2c:d3: 61:84:53:1d:c2:e5:b8:57:61:0a:00:8a:99:e4:ad: c6:d2:a3:67:ae:9a:c4:3c:9d:cb:64:f3:c6:f3:55: 85:81:f0:cf:d0:75:81:61:c9:a8:a2:57:e8:e8:a4: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:80:66:03:4A:0F:99:5D:E4:21:53:4F:08:40:7E:F6:F1:A5:29:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901872c3-1d91-33b1-9de3-9dca0cc4312c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:75:59:41:6e:20:a6:54:e6:24:8d:8d:b9:92:56:3d:e7:a4: 4b:6f:e8:5f:db:69:0e:78:59:ae:88:f3:b7:fc:af:86:3a:40: 77:25:aa:2a:76:8a:fd:c1:42:8d:e2:d1:51:8e:be:72:9c:57: d5:02:8e:0d:26:1a:35:4a:f2:0e:96:a8:30:a6:bb:45:be:f0: cc:c2:10:34:ee:b0:ca:37:9c:fa:53:1b:dc:c4:68:6f:17:0b: ff:1d:73:35:d9:e8:f8:51:a2:6a:5a:b3:44:5d:ba:96:33:a4: 70:f6:c3:87:8f:d1:6b:08:a0:b2:f0:1c:20:ac:61:c1:0a:2b: ff:6f:b2:e1:13:6c:e7:60:fd:44:b7:d3:12:1d:13:2a:60:e3: 97:82:83:26:68:b0:b5:87:30:0d:c3:51:f1:97:ba:db:74:0f: 5d:da:43:2c:96:66:0c:a1:de:70:fe:23:61:ba:57:b9:87:15: 39:c9:25:f2:05:13:32:b5:05:86:70:9c:40:f0:ad:b8:84:ae: 81:d0:d9:67:91:8b:67:80:7c:a3:87:0d:3c:5c:44:e4:ff:80: ed:01:14:3e:da:19:00:96:1e:5f:2d:0f:0f:7a:c5:71:73:70: 93:29:11:a7:4f:41:71:ff:eb:e1:6a:d7:9c:0c:5d:bd:87:90: a7:c2:a9:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcyo3cLjAnBa/HsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWRiNzcyNTAtOTgxMS00MTEwLWJjZjEtOGIxMDdmYzRmN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUS6034YNtHEJix4ri/QXM1e2wN+2Q+GnxB1 et92hFikZrZPakbtCFjw42wSFxWeDTJOY2doeZIFDHre24NeEgeNGjGd0AVAl4xp duyssGt/o20KTqOq4MtB0B6kNiaVZmQqNBhuXNd5xxajuBiK76910Zi68X3xgUxv n+X63o6vrUDX+/UU98gZ/VguevLfLDjgieokUzz5m+XGA/kdvHfo8Hj22h022qKm vmaMv/Ka+MkdWCcLzTn0FM55WZaH9652Uq3kjMEuF9JupMKzLNNhhFMdwuW4V2EK AIqZ5K3G0qNnrprEPJ3LZPPG81WFgfDP0HWBYcmoolfo6KThzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqAZgNKD5ld5CFTTwhAfvbxpSlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxODcyYzMtMWQ5MS0z M2IxLTlkZTMtOWRjYTBjYzQzMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd1WUFuIKZU5iSNjbmSVj3npEtv6F/baQ54Wa6I87f8r4Y6QHclqip2 iv3BQo3i0VGOvnKcV9UCjg0mGjVK8g6WqDCmu0W+8MzCEDTusMo3nPpTG9zEaG8X C/8dczXZ6PhRompas0RdupYzpHD2w4eP0WsIoLLwHCCsYcEKK/9vsuETbOdg/US3 0xIdEypg45eCgyZosLWHMA3DUfGXutt0D13aQyyWZgyh3nD+I2G6V7mHFTnJJfIF EzK1BYZwnEDwrbiEroHQ2WeRi2eAfKOHDTxcROT/gO0BFD7aGQCWHl8tDw96xXFz cJMpEadPQXH/6+Fq15wMXb2HkKfCqZ8= -----END CERTIFICATE-----Generated at Tue Oct 20 01:51:40 2026 by rpki-client