$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa File: cd2df271-2b95-385d-832e-feca68b24c5f.roa (raw, json) Hash identifier: 1wYdrJgLpvwhCT4LcAYX2eYfnYoOnM+HcNkGDopyXkw= Subject key identifier: E0:D3:B6:6A:DD:CD:BC:A7:89:91:1B:CC:55:CC:AA:6B:80:9E:2C:B5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352DA8A8C2E9DE90FCD2500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.94.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:da:8a:8c:2e:9d:e9:0f:cd:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=626105cb-e652-408f-b797-dd2dd6b9a842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:a9:fa:da:0a:99:e2:2f:8a:34:6e:28:48: c5:ce:52:61:8a:5e:37:db:4d:50:ac:88:d4:35:e7: a3:3f:30:6a:79:f6:02:dc:4a:1a:71:f8:ca:14:1d: 0c:70:8e:e3:d9:a3:11:16:1c:76:ec:13:b8:d8:12: 87:cf:37:54:52:4e:48:6f:f5:94:7c:58:1e:d8:51: f6:97:48:58:5d:7c:67:ce:95:47:64:40:d9:df:de: 29:62:8d:b7:95:15:0e:18:17:c2:df:0f:c6:31:26: f0:37:28:5d:47:c3:a1:13:89:61:b0:f3:8c:3c:c1: f5:78:28:07:71:8a:c9:b0:03:ae:02:94:f2:db:86: 67:1c:0d:11:e9:94:aa:d3:02:d1:5c:34:7f:63:17: fe:32:c7:0e:49:45:f6:63:f8:68:56:2f:f1:3a:c6: 0d:e3:c4:e5:a3:cd:7e:c6:36:55:c1:8a:82:61:f0: 9b:f1:aa:94:6a:2c:e5:89:ca:91:cb:71:3d:3c:9f: 08:54:fc:d0:65:c8:cb:db:55:70:18:d4:93:9c:c3: 61:2a:14:90:5f:3c:64:85:75:b5:5d:0a:73:34:43: 90:b6:3a:86:89:b5:16:c5:47:7a:64:4b:74:e8:7d: d9:be:59:72:18:2a:bc:e2:fd:d6:57:d7:cc:7f:aa: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D3:B6:6A:DD:CD:BC:A7:89:91:1B:CC:55:CC:AA:6B:80:9E:2C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1e:ea:87:4e:80:34:eb:fa:24:22:69:be:af:30:36:ce:14: 25:52:ff:18:00:44:38:51:d4:a7:c9:4c:97:00:53:fd:1b:03: f0:be:a2:e4:96:ef:86:d1:10:cf:2a:13:9b:c4:93:c9:04:c7: 78:bf:08:5b:82:f7:80:eb:ff:39:53:45:22:90:3c:05:26:0c: 76:67:50:4a:8b:ae:d6:ce:cf:71:b8:1d:f9:09:c7:29:75:ca: 10:a8:c8:61:49:be:9f:79:e4:51:ec:41:7e:c8:5c:44:76:d4: d3:c1:28:87:7d:ad:97:be:7e:9e:69:08:21:ad:d9:74:c9:9c: 1b:5c:b4:9f:ef:14:14:42:df:14:c4:ad:8f:60:ac:5d:bf:b8: d4:ea:a8:67:3d:6e:e6:bf:f0:e3:99:ec:3b:c7:f1:3a:12:d1: 3e:91:d9:6a:76:e6:2e:14:6a:ef:e6:dd:dc:2b:5d:88:62:be: ec:41:88:11:0c:73:42:61:de:f5:f2:4b:16:35:31:b6:4d:84: 22:4d:eb:4f:d3:83:09:fb:ab:8d:03:45:06:52:bc:55:db:f0: fd:af:70:b6:fe:46:de:76:df:f8:3a:d9:ab:89:2a:05:c7:71: 69:55:52:ea:26:3c:3e:4a:7c:f3:75:f9:84:16:78:3e:be:44: 5c:63:c3:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtqKjC6d6Q/NJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk NjI2MTA1Y2ItZTY1Mi00MDhmLWI3OTctZGQyZGQ2YjlhODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWp+toKmeIvijRuKEjFzlJhil43201QrIjU NeejPzBqefYC3EoacfjKFB0McI7j2aMRFhx27BO42BKHzzdUUk5Ib/WUfFge2FH2 l0hYXXxnzpVHZEDZ394pYo23lRUOGBfC3w/GMSbwNyhdR8OhE4lhsPOMPMH1eCgH cYrJsAOuApTy24ZnHA0R6ZSq0wLRXDR/Yxf+MscOSUX2Y/hoVi/xOsYN48Tlo81+ xjZVwYqCYfCb8aqUaizlicqRy3E9PJ8IVPzQZcjL21VwGNSTnMNhKhSQXzxkhXW1 XQpzNEOQtjqGibUWxUd6ZEt06H3ZvllyGCq84v3WV9fMf6qKPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODTtmrdzbyniZEbzFXMqmuAniy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2QyZGYyNzEtMmI5NS0z ODVkLTgzMmUtZmVjYTY4YjI0YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIe6odOgDTr+iQiab6vMDbOFCVS/xgARDhR1KfJTJcAU/0bA/C+ouSW 74bREM8qE5vEk8kEx3i/CFuC94Dr/zlTRSKQPAUmDHZnUEqLrtbOz3G4HfkJxyl1 yhCoyGFJvp955FHsQX7IXER21NPBKId9rZe+fp5pCCGt2XTJnBtctJ/vFBRC3xTE rY9grF2/uNTqqGc9bua/8OOZ7DvH8ToS0T6R2Wp25i4Uau/m3dwrXYhivuxBiBEM c0Jh3vXySxY1MbZNhCJN60/Tgwn7q40DRQZSvFXb8P2vcLb+Rt523/g62auJKgXH cWlVUuomPD5KfPN1+YQWeD6+RFxjw54= -----END CERTIFICATE-----Generated at Wed Oct 28 16:45:23 2026 by rpki-client