$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa File: ecc2d811-2654-3b7a-a080-044317643aa7.roa (raw, json) Hash identifier: XVbMBL7K0r9oKCOjp0Zyvx+xzaHsuaRny9Dl7ljp2/U= Subject key identifier: 2B:D5:68:5A:F8:16:A7:08:34:94:19:26:DF:D2:49:FC:2E:0E:9F:98 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352E0693927E794FDCBF630 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.94.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e0:69:39:27:e7:94:fd:cb:f6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=1f0955ec-96af-4f2a-8b13-1b4cbae1f177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:fa:7b:ba:27:56:45:e2:f9:4d:6a:26:41: cb:b0:dc:96:3d:75:f2:c6:f0:8a:7b:4c:22:5a:92: c9:24:28:a4:d6:a9:e6:41:5a:02:13:2b:42:96:b8: 19:a2:07:e6:e6:cb:b0:a4:5e:bc:74:fd:1e:eb:23: 34:ec:36:c4:3d:ea:da:ac:bd:b5:ab:f3:02:bf:f4: de:c1:24:26:de:6c:c6:b9:aa:97:d5:f6:3e:aa:43: 98:ec:9f:fe:46:90:c9:f9:70:b5:59:f9:a6:70:99: c9:af:6f:25:fa:2c:0f:86:ba:fe:1e:74:ac:32:5a: 77:1b:0e:4f:14:88:46:80:74:c5:7b:7c:ab:f2:3c: c3:51:b7:43:c8:2d:39:b0:c6:75:5b:60:4c:3f:f5: 22:5e:32:b3:a2:55:2e:7f:ef:93:17:58:67:6b:0e: 33:45:ec:9e:8a:da:9c:73:af:b5:cd:c5:9e:52:3f: 65:f2:0b:d8:94:ca:5e:cd:71:75:26:c6:f7:65:f2: aa:0e:30:72:83:6f:43:7d:0f:cd:26:98:f0:bb:50: 87:d7:6f:a8:6b:9d:b6:4e:a5:ba:d0:59:6d:96:18: b3:d3:3b:f8:f3:12:87:5d:8c:fd:bc:0b:58:f5:bb: 4e:5f:6a:9c:36:4b:76:cf:54:dc:40:3a:ce:44:d3: 57:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:68:5A:F8:16:A7:08:34:94:19:26:DF:D2:49:FC:2E:0E:9F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:6a:45:ba:e0:79:f7:d9:98:15:a9:c6:27:4d:a4:22:19:74: 32:82:98:91:d1:a1:ab:69:6e:50:06:c7:c4:65:68:1e:74:ea: 6f:14:58:09:cd:2b:2c:67:bd:33:2d:dd:bc:67:f2:f5:4f:b4: 00:c7:f0:a3:1b:31:ac:d0:7a:6e:b2:4c:c3:ae:23:c1:63:a3: a8:fa:ed:d6:ec:9f:28:d1:ae:18:db:fe:72:fe:30:53:4f:74: 41:5e:16:cb:ad:ea:a6:fc:c0:f3:e5:1d:82:ec:24:be:e0:1a: 9f:36:4a:76:c7:92:df:24:66:87:de:bd:05:d5:20:7f:00:c3: 55:aa:49:50:63:12:42:81:7b:c2:76:f2:55:48:86:82:48:14: 36:e1:d2:57:6c:d9:38:10:1a:91:cf:de:10:41:27:3b:a8:43: c3:3e:10:f5:37:10:3d:17:fa:99:bd:b3:c4:e4:d7:34:02:55: 25:8a:fa:cf:2c:92:fa:30:d1:89:e3:b8:c7:21:20:5d:b7:11: e7:13:05:cd:86:4d:8d:6f:22:21:9a:44:a1:7b:bb:14:17:04: 2a:76:23:55:34:13:17:95:33:f0:9b:ac:1e:f6:43:e7:0b:8b: 94:f2:9c:32:69:3a:46:f9:91:7a:37:31:14:5e:aa:94:13:42: 8a:0f:f0:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuBpOSfnlP3L9jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MWYwOTU1ZWMtOTZhZi00ZjJhLThiMTMtMWI0Y2JhZTFmMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4L6e7onVkXi+U1qJkHLsNyWPXXyxvCKe0wi WpLJJCik1qnmQVoCEytClrgZogfm5suwpF68dP0e6yM07DbEPerarL21q/MCv/Te wSQm3mzGuaqX1fY+qkOY7J/+RpDJ+XC1WfmmcJnJr28l+iwPhrr+HnSsMlp3Gw5P FIhGgHTFe3yr8jzDUbdDyC05sMZ1W2BMP/UiXjKzolUuf++TF1hnaw4zReyeitqc c6+1zcWeUj9l8gvYlMpezXF1Jsb3ZfKqDjByg29DfQ/NJpjwu1CH12+oa522TqW6 0Fltlhiz0zv48xKHXYz9vAtY9btOX2qcNkt2z1TcQDrORNNX3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvVaFr4FqcINJQZJt/SSfwuDp+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWNjMmQ4MTEtMjY1NC0z YjdhLWEwODAtMDQ0MzE3NjQzYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9qRbrgeffZmBWpxidNpCIZdDKCmJHRoatpblAGx8RlaB506m8UWAnN KyxnvTMt3bxn8vVPtADH8KMbMazQem6yTMOuI8Fjo6j67dbsnyjRrhjb/nL+MFNP dEFeFsut6qb8wPPlHYLsJL7gGp82SnbHkt8kZofevQXVIH8Aw1WqSVBjEkKBe8J2 8lVIhoJIFDbh0lds2TgQGpHP3hBBJzuoQ8M+EPU3ED0X+pm9s8Tk1zQCVSWK+s8s kvow0YnjuMchIF23EecTBc2GTY1vIiGaRKF7uxQXBCp2I1U0ExeVM/CbrB72Q+cL i5TynDJpOkb5kXo3MRReqpQTQooP8Os= -----END CERTIFICATE-----Generated at Mon Oct 26 02:39:05 2026 by rpki-client