$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d43f093e-aa1f-38fb-985b-08b23c2d1995.roa File: d43f093e-aa1f-38fb-985b-08b23c2d1995.roa (raw, json) Hash identifier: ebqLI90EHpY7xcbx4Z764iVRweiInHu/VMxrcAOCoq0= Subject key identifier: 9A:3E:BF:A8:3E:36:91:22:A7:73:E7:BE:1F:1B:3C:52:B6:94:E2:90 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352DF33B5D276A1B7D8F580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d43f093e-aa1f-38fb-985b-08b23c2d1995.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.94.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:df:33:b5:d2:76:a1:b7:d8:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=346333a8-16eb-4a2c-9ad1-e0b512bf2834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:e7:da:c8:9e:97:97:e0:d6:dc:4e:d3:0c: f1:e0:0f:6c:4f:8c:5d:5f:ac:f4:ad:04:08:e5:ed: 25:9c:90:00:7f:96:0d:e6:93:b5:2d:b3:a3:1a:3c: 15:7d:f1:76:33:e0:90:61:f6:ad:42:d5:5a:20:88: 63:36:f1:de:2b:f3:ff:6e:8d:66:0f:2d:2e:80:9f: 67:72:52:fc:9b:ad:c0:b5:0c:83:24:e4:7f:d7:d2: 28:26:8d:15:d7:99:4b:65:17:28:4e:cd:02:e9:06: 3e:89:d1:4c:e2:65:39:81:00:9f:95:de:a5:64:67: d7:b3:fe:04:cd:47:53:ce:65:36:2a:51:1a:d6:2b: b4:90:5e:90:ce:99:bb:76:77:6b:88:ef:13:85:7e: 62:00:3b:be:b0:c1:9c:22:68:7f:24:58:a3:53:ef: 21:9b:1c:f5:9e:8d:d1:a5:bc:99:c6:11:98:cf:87: a3:1d:bf:14:fe:64:22:b9:a0:81:1c:e6:d6:64:db: bb:f5:e7:52:2f:79:f4:fe:37:67:f8:ca:93:5f:09: c3:40:ba:56:f8:3f:cc:6a:76:ac:29:38:5b:3e:71: f3:89:4f:e9:e3:c3:59:d1:9b:99:81:01:25:b3:f4: b4:10:5b:ad:f1:5c:73:e2:50:ad:6e:bc:10:b6:10: e1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3E:BF:A8:3E:36:91:22:A7:73:E7:BE:1F:1B:3C:52:B6:94:E2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d43f093e-aa1f-38fb-985b-08b23c2d1995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:41:49:f1:20:a2:ad:bc:ca:b5:d3:2e:fb:17:d0:e6:57:be: 16:f6:75:6c:0a:91:fe:f2:23:75:ce:ab:93:e1:96:1b:7f:5e: 6e:c8:e4:f5:cc:43:8e:15:67:eb:10:bc:a4:45:35:49:2a:2d: 7f:7c:1c:3b:74:2d:91:59:56:0c:b8:63:f9:dd:77:66:ee:1d: 2c:87:a7:eb:cd:24:93:82:3e:0a:35:d4:be:91:ee:43:1d:e1: 09:3d:40:d0:a9:f9:8d:0a:b6:55:5b:e6:fe:dc:e8:05:f4:ae: 3d:9f:d7:bd:45:c8:5e:38:f6:f6:a3:8d:fd:a2:58:ac:eb:4c: d3:8d:d6:df:2f:19:60:33:ee:05:7d:04:4c:86:1e:fb:a3:b0: 5d:ce:5a:87:48:54:c4:a7:4b:b2:23:51:e7:04:8a:70:93:2e: b1:be:ea:4a:92:f6:94:2c:8a:50:14:6e:40:2c:09:64:49:b2: 0e:bd:85:cf:4d:14:e7:2a:39:fa:0c:ee:e9:0c:8d:77:4b:e8: e6:88:20:1d:37:ee:f2:ad:1d:66:a9:a8:70:5a:69:d7:26:77: 9e:38:fe:eb:79:89:50:ee:52:39:9e:91:2d:b2:16:7d:95:12: 61:e9:c5:be:b5:78:83:cf:35:0f:ef:de:be:91:bd:85:08:6e: e4:31:22:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUt8ztdJ2obfY9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MzQ2MzMzYTgtMTZlYi00YTJjLTlhZDEtZTBiNTEyYmYyODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/zn2siel5fg1txO0wzx4A9sT4xdX6z0rQQI 5e0lnJAAf5YN5pO1LbOjGjwVffF2M+CQYfatQtVaIIhjNvHeK/P/bo1mDy0ugJ9n clL8m63AtQyDJOR/19IoJo0V15lLZRcoTs0C6QY+idFM4mU5gQCfld6lZGfXs/4E zUdTzmU2KlEa1iu0kF6Qzpm7dndriO8ThX5iADu+sMGcImh/JFijU+8hmxz1no3R pbyZxhGYz4ejHb8U/mQiuaCBHObWZNu79edSL3n0/jdn+MqTXwnDQLpW+D/Manas KThbPnHziU/p48NZ0ZuZgQEls/S0EFut8Vxz4lCtbrwQthDhJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo+v6g+NpEip3Pnvh8bPFK2lOKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDQzZjA5M2UtYWExZi0z OGZiLTk4NWItMDhiMjNjMmQxOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1BSfEgoq28yrXTLvsX0OZXvhb2dWwKkf7yI3XOq5Phlht/Xm7I5PXM Q44VZ+sQvKRFNUkqLX98HDt0LZFZVgy4Y/ndd2buHSyHp+vNJJOCPgo11L6R7kMd 4Qk9QNCp+Y0KtlVb5v7c6AX0rj2f171FyF449vajjf2iWKzrTNON1t8vGWAz7gV9 BEyGHvujsF3OWodIVMSnS7IjUecEinCTLrG+6kqS9pQsilAUbkAsCWRJsg69hc9N FOcqOfoM7ukMjXdL6OaIIB037vKtHWapqHBaadcmd544/ut5iVDuUjmekS2yFn2V EmHpxb61eIPPNQ/v3r6RvYUIbuQxIgw= -----END CERTIFICATE-----Generated at Mon Oct 26 11:45:18 2026 by rpki-client