$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e107485b-5e10-31d2-bbee-2155abd87d6f.roa File: e107485b-5e10-31d2-bbee-2155abd87d6f.roa (raw, json) Hash identifier: rOU3VFgEbf20SEkp16z6a/45+PB2dr1uLvYHYL1t3JA= Subject key identifier: 2E:3B:A6:7F:29:48:EF:6F:D6:F1:F4:45:6A:1D:6C:93:29:34:F8:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352E354CBCC48EF92AA08C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e107485b-5e10-31d2-bbee-2155abd87d6f.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.94.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e3:54:cb:cc:48:ef:92:aa:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=bf47bf14-453c-4e4b-9d22-944d1fd93ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:b5:2f:11:3a:12:ee:49:20:3d:3a:7c:85: e8:2b:8e:3d:00:97:9e:6e:f3:aa:02:7b:73:10:0b: 93:28:e5:4b:43:03:87:27:69:5f:b8:68:17:1c:01: ab:ae:ec:e4:a1:a4:68:3b:17:9d:31:f6:d5:13:fd: 73:13:6f:3c:c9:73:a2:3b:b4:85:0b:e6:c7:1b:0e: ed:6c:dc:79:35:56:d9:f8:36:3a:d4:2d:a6:f6:27: d8:be:52:eb:59:76:72:a0:d0:ff:af:f4:51:17:f4: a3:a8:63:b6:c7:52:db:52:69:ab:9e:44:c4:7e:e6: 28:44:08:70:51:26:71:de:a6:dd:5d:e0:96:e6:61: 22:a1:41:2c:1c:49:2b:74:ae:46:91:f1:85:d3:ed: 79:17:1e:49:e7:9e:b2:47:e2:60:89:da:35:70:4e: f2:b3:a3:91:fe:ec:0a:9b:fa:90:6b:e2:4f:74:34: 52:eb:1b:4f:a4:2b:24:17:e5:69:90:f1:d8:ab:7f: 98:97:07:ae:f2:dd:34:64:bb:b7:d6:0e:91:98:d7: ed:96:3b:73:8d:2b:26:1b:94:90:8b:8e:fa:9d:1b: 60:da:14:9b:d7:fb:e4:c5:4f:1f:fa:8f:89:d2:85: d9:82:96:58:d8:95:29:1e:59:c2:ae:c7:56:96:36: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3B:A6:7F:29:48:EF:6F:D6:F1:F4:45:6A:1D:6C:93:29:34:F8:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e107485b-5e10-31d2-bbee-2155abd87d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6b:cd:13:a6:7e:ac:3b:34:c9:52:6d:8a:48:13:57:5e:00: 29:b2:a3:31:1c:9e:bb:97:7c:d4:24:0a:8a:bc:6f:e8:45:43: 09:9d:2a:85:ad:e1:31:db:93:14:44:6e:7b:19:eb:a9:37:d3: 82:0f:67:85:f1:be:2a:ca:f2:7d:37:9a:dc:a0:4a:22:0f:e3: 45:a0:44:a0:13:f3:0e:0c:0f:a7:8a:66:1f:ed:86:96:e1:31: 41:6b:6b:72:a7:d6:3a:2e:e6:ae:67:a3:1a:3b:20:07:25:22: 4a:92:de:75:b0:ef:56:3d:c8:30:0e:d8:f8:c2:e2:fe:09:be: 8a:4c:f0:5f:52:9d:35:62:cb:13:e0:12:5b:40:0f:ac:92:93: 5f:c1:84:23:5e:ad:ee:73:a2:a9:55:13:82:0a:a6:36:f0:dc: 84:99:23:e5:41:87:cb:5f:12:b6:b5:1d:8f:c3:50:96:5f:4b: 8c:c7:62:6e:3a:ef:8d:df:ed:cf:67:97:83:2d:fc:9c:af:1d: 4d:f6:37:42:a4:34:d4:e1:0e:a0:9e:53:3c:ab:24:3e:2e:9a: c9:9d:c3:0e:36:19:d4:76:71:11:4b:8f:14:f7:2b:8d:75:bc: e0:6f:31:55:e3:e6:dd:62:d7:83:e7:69:9c:1e:58:b5:e9:8c: 82:f2:26:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuNUy8xI75KqCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk YmY0N2JmMTQtNDUzYy00ZTRiLTlkMjItOTQ0ZDFmZDkzZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozm1LxE6Eu5JID06fIXoK449AJeebvOqAntz EAuTKOVLQwOHJ2lfuGgXHAGrruzkoaRoOxedMfbVE/1zE288yXOiO7SFC+bHGw7t bNx5NVbZ+DY61C2m9ifYvlLrWXZyoND/r/RRF/SjqGO2x1LbUmmrnkTEfuYoRAhw USZx3qbdXeCW5mEioUEsHEkrdK5GkfGF0+15Fx5J556yR+Jgido1cE7ys6OR/uwK m/qQa+JPdDRS6xtPpCskF+VpkPHYq3+Ylweu8t00ZLu31g6RmNftljtzjSsmG5SQ i476nRtg2hSb1/vkxU8f+o+J0oXZgpZY2JUpHlnCrsdWljYb3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC47pn8pSO9v1vH0RWodbJMpNPjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTEwNzQ4NWItNWUxMC0z MWQyLWJiZWUtMjE1NWFiZDg3ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF52MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVrzROmfqw7NMlSbYpIE1deACmyozEcnruXfNQkCoq8b+hFQwmdKoWt 4THbkxREbnsZ66k304IPZ4XxvirK8n03mtygSiIP40WgRKAT8w4MD6eKZh/thpbh MUFra3Kn1jou5q5noxo7IAclIkqS3nWw71Y9yDAO2PjC4v4JvopM8F9SnTViyxPg EltAD6ySk1/BhCNere5zoqlVE4IKpjbw3ISZI+VBh8tfEra1HY/DUJZfS4zHYm46 743f7c9nl4Mt/JyvHU32N0KkNNThDqCeUzyrJD4umsmdww42GdR2cRFLjxT3K411 vOBvMVXj5t1i14PnaZweWLXpjILyJlE= -----END CERTIFICATE-----Generated at Mon Oct 26 08:35:54 2026 by rpki-client