$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa File: d3472d91-6027-3989-8e71-4dc7c885f1fa.roa (raw, json) Hash identifier: fxFJjL02e5QUYZ8wZvDJa7RQmcQ4M6yNU3EsgXWce1E= Subject key identifier: F9:2E:E0:76:BD:00:99:D6:8F:25:42:4F:72:5E:75:78:FE:77:76:F3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F6F22EB9CDD170A7DACABC280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 9009 IP address blocks: 172.94.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:eb:9c:dd:17:0a:7d:ac:ab:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=651f3108-0dbf-4e45-98a2-c93f42badb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f7:7e:d3:13:02:25:42:78:f2:8e:9c:b4:3e: 65:d3:c6:a8:60:ef:e6:a8:89:18:cf:97:3a:ea:56: a9:36:10:4f:59:6d:59:3a:b6:3c:d8:7b:79:ec:62: e4:4b:1f:8f:87:00:1e:9b:69:90:67:57:48:1d:f0: c2:38:a2:54:26:94:f4:31:86:68:c2:f6:55:7f:4e: 46:ed:60:26:f3:e1:33:10:12:1f:63:c8:86:0f:24: 95:1d:0d:cf:fc:1a:08:fd:29:ee:24:47:bd:ca:ec: 40:d7:cb:82:2f:17:e6:26:cf:45:68:95:c0:68:72: 12:c9:50:c4:37:00:2d:6c:db:3a:d2:e1:93:53:60: 96:89:3b:c3:7d:ed:95:d6:e9:bc:5f:60:c6:7b:b8: 28:c5:dc:f4:41:4a:66:8c:ca:c3:75:98:a8:3d:e3: ba:34:c4:c6:1e:28:89:e3:5c:8b:aa:65:05:80:b5: 2e:4a:de:73:c5:72:d5:aa:fa:90:e1:0a:78:b1:9c: 69:3f:78:ee:a6:16:07:11:34:17:30:af:c6:82:17: 59:8e:8a:10:63:0d:30:ce:a5:4f:88:60:fd:91:6d: e5:0b:cc:92:ee:d2:af:0a:ff:61:ad:b5:b2:a3:a1: e3:47:ad:d1:a9:0b:fe:9f:30:6f:6c:61:19:b3:a3: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2E:E0:76:BD:00:99:D6:8F:25:42:4F:72:5E:75:78:FE:77:76:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:51:cd:e5:f2:7d:dd:d6:14:e6:36:1b:c5:60:d5:8f:51:6d: 41:29:3b:c3:03:0e:51:89:db:e7:f4:b0:73:98:57:9e:95:84: f4:a1:5f:fe:f2:4e:a2:5f:35:23:e8:05:33:01:4b:3b:d9:ff: 7a:27:fc:05:53:8b:6b:a2:f8:db:72:b2:71:c0:fa:77:7a:7b: 13:93:24:b4:06:ec:26:5a:8e:c0:1b:cc:0e:96:89:d4:d9:40: be:f7:1b:ee:43:dc:65:3f:81:82:ee:84:db:f9:c0:c6:f8:11: 59:19:7b:d5:74:8e:b0:86:5d:e5:67:87:1a:70:dd:4b:50:98: 17:29:78:da:27:04:35:70:ca:57:3d:17:fd:26:20:4f:db:87: f6:13:0c:96:dd:7d:52:b3:6d:e8:05:97:d5:67:f9:ce:37:83: 6e:b2:4a:c4:9b:17:9d:9e:dc:7f:98:11:85:05:03:78:f5:59: 45:cf:9f:91:2f:a2:23:cc:73:7a:e3:99:ac:de:45:89:fd:27: 1b:e5:f8:d1:9a:af:54:6d:a2:e4:3d:75:60:1f:59:e1:a0:c5: ab:66:4a:46:43:6c:94:8a:aa:ad:6a:7b:02:7c:a9:a9:3f:8f: a3:6b:2c:a0:b4:51:67:f9:f4:67:ac:d9:f4:ac:a7:9d:1c:f5: 34:ad:30:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuuc3RcKfayrwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjUxZjMxMDgtMGRiZi00ZTQ1LTk4YTItYzkzZjQyYmFkYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPd+0xMCJUJ48o6ctD5l08aoYO/mqIkYz5c6 6lapNhBPWW1ZOrY82Ht57GLkSx+PhwAem2mQZ1dIHfDCOKJUJpT0MYZowvZVf05G 7WAm8+EzEBIfY8iGDySVHQ3P/BoI/SnuJEe9yuxA18uCLxfmJs9FaJXAaHISyVDE NwAtbNs60uGTU2CWiTvDfe2V1um8X2DGe7goxdz0QUpmjMrDdZioPeO6NMTGHiiJ 41yLqmUFgLUuSt5zxXLVqvqQ4Qp4sZxpP3juphYHETQXMK/GghdZjooQYw0wzqVP iGD9kW3lC8yS7tKvCv9hrbWyo6HjR63RqQv+nzBvbGEZs6McXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPku4Ha9AJnWjyVCT3JedXj+d3bzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDM0NzJkOTEtNjAyNy0z OTg5LThlNzEtNGRjN2M4ODVmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBRzeXyfd3WFOY2G8Vg1Y9RbUEpO8MDDlGJ2+f0sHOYV56VhPShX/7y TqJfNSPoBTMBSzvZ/3on/AVTi2ui+NtysnHA+nd6exOTJLQG7CZajsAbzA6WidTZ QL73G+5D3GU/gYLuhNv5wMb4EVkZe9V0jrCGXeVnhxpw3UtQmBcpeNonBDVwylc9 F/0mIE/bh/YTDJbdfVKzbegFl9Vn+c43g26ySsSbF52e3H+YEYUFA3j1WUXPn5Ev oiPMc3rjmazeRYn9Jxvl+NGar1RtouQ9dWAfWeGgxatmSkZDbJSKqq1qewJ8qak/ j6NrLKC0UWf59Ges2fSsp50c9TStMIw= -----END CERTIFICATE-----Generated at Wed Oct 28 10:49:18 2026 by rpki-client