$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa File: fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa (raw, json) Hash identifier: Y9EwfDPO2pYey2SXx6h3QlBAr6QkMVSEKZuTU8aKlok= Subject key identifier: 5A:0B:F0:D5:70:E2:ED:29:C7:DC:05:D4:95:11:12:F3:F6:02:CC:3E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F8F3DC8826184598956C6DA70 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 3223 IP address blocks: 172.94.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c8:82:61:84:59:89:56:c6:da:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=6c9cb0d0-bdd8-41b7-8bf5-281b3c6bd80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:f9:ec:00:d1:7f:f4:72:67:3e:4e:9a:6b: 06:96:12:2a:97:c6:3f:f1:ab:43:31:a7:d7:cf:c3: e6:2b:da:ca:b1:50:f0:e9:42:dc:90:b2:86:0b:72: e4:db:9f:49:02:c4:e1:da:78:ad:f6:ba:59:a2:51: a8:57:01:f0:b1:42:bc:9b:e6:f2:24:6b:6f:be:61: b7:8f:9e:8e:ba:14:2e:5e:ca:78:2e:e9:da:ff:d7: 52:80:94:74:d4:f9:d0:6a:09:5a:9c:6c:b6:eb:7e: 9d:ac:bf:e4:e4:95:10:bc:b9:12:d0:4a:3d:2c:a8: 54:71:46:52:9e:23:a2:59:19:2d:0e:fe:cc:76:9e: 38:f4:68:e7:a5:a9:90:91:d3:1e:a9:4e:42:7b:f3: 9a:fd:c3:d1:13:da:7c:c8:d3:0b:29:b2:68:1e:c4: 09:3b:f5:55:52:17:2f:ee:14:83:7e:27:a0:92:60: 44:24:87:9c:70:64:17:30:40:7a:0d:3e:12:96:5c: 26:4c:f1:d2:82:07:06:36:d1:c0:15:54:ae:ed:2f: a0:61:9f:0a:18:af:d6:4c:d6:a7:b4:97:08:bc:ca: d1:84:ad:56:ac:a1:c6:f1:d3:fd:64:4b:30:36:60: 18:af:6f:c6:e8:10:7b:10:6b:29:2b:9f:fd:7b:96: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0B:F0:D5:70:E2:ED:29:C7:DC:05:D4:95:11:12:F3:F6:02:CC:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0f:fe:5c:2b:e3:e8:1e:4a:9d:4d:3c:e5:b6:3e:a3:dd:1b: 98:48:89:d1:45:c3:bf:0a:4a:41:39:08:34:ee:31:87:48:e9: 66:4b:f6:29:54:04:35:f8:ca:cc:d1:f1:62:a8:5c:22:fd:10: b1:0b:5e:9e:9d:d4:17:2f:98:d8:66:f3:cd:42:d0:e7:d8:a5: 7b:53:2e:e2:8c:68:d9:f0:33:16:5d:89:7a:d6:5e:53:c3:42: 27:83:f0:58:1f:6f:78:31:54:1d:a6:93:72:34:e6:47:3b:13: 33:e9:3a:59:33:83:17:46:97:1d:24:ab:62:ce:e7:95:9e:58: f7:a3:a6:42:ed:e0:7e:71:6d:5e:5d:fc:07:3a:9b:63:ec:ac: 25:ab:f8:7a:63:e7:82:e1:e3:39:e0:d7:18:45:1f:b8:5a:61: f5:62:8d:99:04:a2:9a:21:09:6b:e2:00:04:ca:e8:40:3a:70: d8:3e:3f:fc:9b:5b:ce:4a:ee:2f:3d:0c:e7:05:19:1e:56:1a: 33:31:a4:b7:35:2d:47:45:f4:a9:1f:f1:80:af:16:36:99:2c: 8d:00:52:7c:c1:b1:21:f1:04:74:79:81:e1:e0:01:a5:7d:5d: 3e:65:fc:81:84:1c:ca:fc:ab:8a:96:c4:40:d4:43:f1:8e:94: f5:ba:7d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPciCYYRZiVbG2nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NmM5Y2IwZDAtYmRkOC00MWI3LThiZjUtMjgxYjNjNmJkODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu/57ADRf/RyZz5OmmsGlhIql8Y/8atDMafX z8PmK9rKsVDw6ULckLKGC3Lk259JAsTh2nit9rpZolGoVwHwsUK8m+byJGtvvmG3 j56OuhQuXsp4Luna/9dSgJR01PnQaglanGy2636drL/k5JUQvLkS0Eo9LKhUcUZS niOiWRktDv7Mdp449GjnpamQkdMeqU5Ce/Oa/cPRE9p8yNMLKbJoHsQJO/VVUhcv 7hSDfiegkmBEJIeccGQXMEB6DT4SllwmTPHSggcGNtHAFVSu7S+gYZ8KGK/WTNan tJcIvMrRhK1WrKHG8dP9ZEswNmAYr2/G6BB7EGspK5/9e5aiwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoL8NVw4u0px9wF1JUREvP2Asw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmRiZjUzYTktNzJmMi0z OTdmLWEyZjItOTJlYzFkMjM1MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsP/lwr4+geSp1NPOW2PqPdG5hIidFFw78KSkE5CDTuMYdI6WZL9ilU BDX4yszR8WKoXCL9ELELXp6d1BcvmNhm881C0OfYpXtTLuKMaNnwMxZdiXrWXlPD QieD8Fgfb3gxVB2mk3I05kc7EzPpOlkzgxdGlx0kq2LO55WeWPejpkLt4H5xbV5d /Ac6m2PsrCWr+Hpj54Lh4zng1xhFH7haYfVijZkEopohCWviAATK6EA6cNg+P/yb W85K7i89DOcFGR5WGjMxpLc1LUdF9Kkf8YCvFjaZLI0AUnzBsSHxBHR5geHgAaV9 XT5l/IGEHMr8q4qWxEDUQ/GOlPW6fbQ= -----END CERTIFICATE-----Generated at Tue Oct 20 06:53:42 2026 by rpki-client