$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa File: d2eba7e0-6a87-3e70-9830-21cdb930b252.roa (raw, json) Hash identifier: gxIX3u0AaZ+B13K34oFv1gOtbdYfSeX+8/knUNAkSqg= Subject key identifier: 4A:CE:81:25:1D:18:84:DB:43:F7:E4:F7:F9:76:22:DF:F8:2F:88:9C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F6C5839A5600B6982AEB13F00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 9009 IP address blocks: 172.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:39:a5:60:0b:69:82:ae:b1:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c46a315a-359f-44c7-9e84-501d5a52080f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:cd:c7:54:34:0e:81:23:14:87:6c:d6:b2: 58:28:26:e8:a2:09:0e:36:14:19:2e:fd:de:87:94: 24:ab:77:ad:39:83:60:50:11:25:2a:94:eb:25:3c: 8e:f6:61:1d:a3:b4:c8:09:37:07:a8:90:1d:37:ab: e0:f2:3a:03:ca:da:40:82:40:d8:d2:09:e3:7e:a4: 9e:64:34:e0:f6:ab:4a:d8:ff:fb:97:db:bb:c4:01: 74:f7:c6:94:4d:d2:ca:69:1d:76:e3:8f:6c:bf:52: 1a:03:b2:7c:0a:10:f8:0d:b0:c9:df:bc:06:e0:b6: cf:fc:a5:16:89:2d:c4:e6:bf:78:92:12:e5:de:ca: 45:77:de:cf:ea:6b:58:95:f5:7d:31:27:f4:5b:f4: 4a:b7:a1:a6:22:34:5b:c6:02:69:46:a6:56:b6:d1: f0:71:b7:04:25:30:d3:0a:89:d9:3d:7e:0a:30:d2: b5:eb:dc:10:70:d3:de:b5:ea:df:01:2d:e1:2a:44: 2d:4a:72:3d:e6:f6:67:09:7a:ed:0f:e2:81:0b:03: b1:93:dc:aa:c4:c6:fb:3e:08:f8:e7:30:b0:41:82: a3:4f:d5:ff:4a:28:d5:b5:16:89:bc:f9:61:32:ea: 25:fc:91:f0:15:4c:32:37:a0:13:8e:97:ec:19:94: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CE:81:25:1D:18:84:DB:43:F7:E4:F7:F9:76:22:DF:F8:2F:88:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3c:75:74:34:d4:26:7d:a1:05:3f:94:18:21:fe:fe:ac:f7: 97:36:42:49:6a:3c:8d:9d:3d:e0:db:d8:28:85:33:6e:67:31: eb:c2:71:27:30:60:35:68:db:ee:08:61:22:57:95:6f:aa:d7: 3a:63:1b:87:f3:c0:57:ec:ea:bb:65:61:18:ad:1e:82:a1:17: 7c:ab:b3:3b:c7:1c:fb:72:a2:6f:c0:bc:f2:f6:02:8f:43:0f: 8b:ea:41:9b:38:98:4d:ba:10:29:03:cc:cd:0f:30:38:15:a2: bd:bd:d2:da:a1:41:31:b6:42:12:54:47:bf:c1:49:73:5b:5a: 52:d3:b9:29:a4:c1:e1:be:86:77:b8:c8:95:2e:cb:4e:cb:02: 72:fb:4d:e4:95:91:51:aa:df:fa:67:e5:23:6e:2d:91:f9:b9: 6e:6e:b6:35:8d:5f:fc:07:8b:df:30:d7:23:39:92:a5:32:71: 6a:69:ad:be:a7:6d:4d:ac:60:ba:46:49:f6:60:6a:05:55:81: 80:33:b5:1e:d3:f4:d6:a1:0a:2e:8b:62:8d:f6:72:ed:9b:4a: e9:a5:24:57:c3:74:63:50:7a:74:c6:d0:e2:3b:a1:bd:51:4e: 64:38:a0:a0:a6:11:1f:45:2c:bb:41:38:65:0c:30:fe:60:0a: 91:69:cf:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDmlYAtpgq6xPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YzQ2YTMxNWEtMzU5Zi00NGM3LTllODQtNTAxZDVhNTIwODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbbNx1Q0DoEjFIds1rJYKCboogkONhQZLv3e h5Qkq3etOYNgUBElKpTrJTyO9mEdo7TICTcHqJAdN6vg8joDytpAgkDY0gnjfqSe ZDTg9qtK2P/7l9u7xAF098aUTdLKaR12449sv1IaA7J8ChD4DbDJ37wG4LbP/KUW iS3E5r94khLl3spFd97P6mtYlfV9MSf0W/RKt6GmIjRbxgJpRqZWttHwcbcEJTDT ConZPX4KMNK169wQcNPeterfAS3hKkQtSnI95vZnCXrtD+KBCwOxk9yqxMb7Pgj4 5zCwQYKjT9X/SijVtRaJvPlhMuol/JHwFUwyN6ATjpfsGZTUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErOgSUdGITbQ/fk9/l2It/4L4icMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDJlYmE3ZTAtNmE4Ny0z ZTcwLTk4MzAtMjFjZGI5MzBiMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY8dXQ01CZ9oQU/lBgh/v6s95c2QklqPI2dPeDb2CiFM25nMevCcScw YDVo2+4IYSJXlW+q1zpjG4fzwFfs6rtlYRitHoKhF3yrszvHHPtyom/AvPL2Ao9D D4vqQZs4mE26ECkDzM0PMDgVor290tqhQTG2QhJUR7/BSXNbWlLTuSmkweG+hne4 yJUuy07LAnL7TeSVkVGq3/pn5SNuLZH5uW5utjWNX/wHi98w1yM5kqUycWpprb6n bU2sYLpGSfZgagVVgYAztR7T9NahCi6LYo32cu2bSumlJFfDdGNQenTG0OI7ob1R TmQ4oKCmER9FLLtBOGUMMP5gCpFpzy0= -----END CERTIFICATE-----Generated at Wed Oct 28 11:45:35 2026 by rpki-client