$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json) Hash identifier: kH+Fryg1TGwndxyCd1nO0vt/KFajTbwfXiWBkfyFFaM= Subject key identifier: 13:4E:84:77:9F:60:4B:7F:09:A2:FF:89:D0:A9:49:11:95:AD:28:48 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E6C6F699F411C88F7895CF400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 9009 IP address blocks: 172.94.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:69:9f:41:1c:88:f7:89:5c:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=28f11edf-eca4-4e9c-b42d-165aefd694fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:d8:c3:2b:73:9d:d4:58:14:e4:d9:b3:68: a2:0a:30:a4:53:5a:c3:a7:35:ed:46:d7:69:77:ac: ac:ee:b3:53:60:48:8a:04:ca:14:77:0a:20:0e:f4: 95:4e:8c:af:24:f6:24:71:ff:28:42:d7:af:a0:e2: df:09:13:f8:d1:83:e9:eb:38:8b:c2:fa:64:b1:76: d7:c1:98:ff:b9:6a:91:1d:6b:68:8f:41:13:91:45: 37:02:26:81:c4:18:a8:25:27:ab:84:fd:b7:1d:c6: 5c:2d:21:30:14:f6:3d:c0:32:87:2e:3a:f8:a5:5e: 02:03:5f:59:5d:34:6c:26:54:dc:63:8b:0c:a7:2c: 1d:f1:d5:d7:b0:62:c7:40:37:ce:0c:b7:1b:4f:ba: 36:db:2c:85:15:b4:ea:17:a1:c5:80:47:84:c5:f6: 3c:5f:aa:a5:63:28:08:44:30:ca:ae:f4:7a:2d:55: ba:d7:db:3f:8e:04:29:9e:a5:7b:05:75:99:a0:02: 41:ab:aa:f8:f2:f5:c4:de:4f:3a:9c:e0:07:71:73: 3d:e7:85:48:1c:f3:1a:fa:95:dd:1a:1b:5d:42:c2: ea:a3:bf:0f:f7:24:ba:47:01:79:12:05:31:d6:88: 1c:89:2f:db:a8:a6:2a:a2:58:78:cd:54:60:52:48: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4E:84:77:9F:60:4B:7F:09:A2:FF:89:D0:A9:49:11:95:AD:28:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c4:0c:85:52:e6:a3:e6:0a:a2:20:96:d4:2b:50:6f:10:21: 9e:2f:61:4d:a4:96:03:48:33:e9:56:1a:fe:da:ab:85:42:e3: e3:7d:08:65:b0:14:8f:b5:da:87:97:37:08:d1:d6:a3:09:91: 42:53:2e:21:56:99:b0:af:fc:73:4e:c5:8c:5a:21:87:b2:91: 43:d4:d3:f4:c0:c0:13:98:3c:a7:54:1d:fa:0a:83:24:4d:52: 7d:4b:ed:6f:9f:bf:7d:93:02:cd:e9:f5:eb:73:52:4a:57:e9: 51:ca:98:01:99:f0:bb:c8:38:6c:69:7a:ad:a9:99:58:4a:a3: d9:cc:c1:2b:d1:20:96:c0:7c:2e:6f:dc:78:bc:67:ba:5e:ac: 2d:be:33:28:18:d8:98:e6:43:27:c1:03:91:69:5a:7c:90:45: b6:21:c7:03:1a:e3:28:a0:80:2e:9c:a2:6a:fa:a5:db:5d:61: fc:d7:cc:d8:85:af:bf:1d:aa:ea:d3:29:02:1f:1a:ce:8c:e2: 26:4b:42:1f:b9:73:dd:d2:f2:bf:c6:e2:0c:50:f8:79:90:23: 09:4a:6f:9a:13:9b:a4:d0:b6:58:85:68:86:b9:94:a3:c9:8c: 20:09:3a:47:73:1d:f8:25:7c:7e:da:e8:af:32:06:48:c1:c7: 70:8a:c6:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2mfQRyI94lc9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk MjhmMTFlZGYtZWNhNC00ZTljLWI0MmQtMTY1YWVmZDY5NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+vYwytzndRYFOTZs2iiCjCkU1rDpzXtRtdp d6ys7rNTYEiKBMoUdwogDvSVToyvJPYkcf8oQtevoOLfCRP40YPp6ziLwvpksXbX wZj/uWqRHWtoj0ETkUU3AiaBxBioJSerhP23HcZcLSEwFPY9wDKHLjr4pV4CA19Z XTRsJlTcY4sMpywd8dXXsGLHQDfODLcbT7o22yyFFbTqF6HFgEeExfY8X6qlYygI RDDKrvR6LVW619s/jgQpnqV7BXWZoAJBq6r48vXE3k86nOAHcXM954VIHPMa+pXd GhtdQsLqo78P9yS6RwF5EgUx1ogciS/bqKYqolh4zVRgUkiDbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNOhHefYEt/CaL/idCpSRGVrShIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXEDIVS5qPmCqIgltQrUG8QIZ4vYU2klgNIM+lWGv7aq4VC4+N9CGWw FI+12oeXNwjR1qMJkUJTLiFWmbCv/HNOxYxaIYeykUPU0/TAwBOYPKdUHfoKgyRN Un1L7W+fv32TAs3p9etzUkpX6VHKmAGZ8LvIOGxpeq2pmVhKo9nMwSvRIJbAfC5v 3Hi8Z7perC2+MygY2JjmQyfBA5FpWnyQRbYhxwMa4yiggC6comr6pdtdYfzXzNiF r78dqurTKQIfGs6M4iZLQh+5c93S8r/G4gxQ+HmQIwlKb5oTm6TQtliFaIa5lKPJ jCAJOkdzHfglfH7a6K8yBkjBx3CKxp0= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:10 2026 by rpki-client