$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18fc389c-60a1-399a-acf3-c66cb0048a53.roa File: 18fc389c-60a1-399a-acf3-c66cb0048a53.roa (raw, json) Hash identifier: Ww6K5KDkT7IM3T2PqV8LeY1dECaYuXYH16+OjoIj1NU= Subject key identifier: 58:A6:69:F4:13:C7:4C:9F:74:C3:84:80:17:8B:58:5A:24:96:FF:D4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EA787D7E7EE7650CD034CA580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18fc389c-60a1-399a-acf3-c66cb0048a53.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 137409 IP address blocks: 172.94.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d7:e7:ee:76:50:cd:03:4c:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=48bf6af5-2ffd-467c-ac08-0beccc137546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:a2:66:e9:9f:21:99:69:d8:53:46:f5:b0: 6e:40:de:c0:38:73:56:a5:17:20:25:eb:6e:cb:95: 12:be:08:7f:ce:bf:c7:e3:90:93:b6:37:19:eb:ea: 03:da:8b:38:66:2a:29:e4:86:65:c9:f4:cd:a8:de: 8f:eb:7d:7b:74:fd:d8:cd:1a:f6:b9:8d:b1:3f:55: 6f:23:b1:9e:4d:b2:4a:0b:de:36:76:fa:26:85:46: d7:70:eb:fe:c0:af:75:77:5e:a4:13:f0:b4:0d:5d: 06:39:7c:24:87:c2:6f:d6:0e:66:27:01:07:7f:bd: ab:52:24:84:1f:8c:25:91:29:b9:b4:5d:a0:73:b3: ed:9b:cb:f8:ae:e4:43:88:76:5f:54:87:bc:a0:23: 22:75:c4:d8:63:c5:1b:ed:36:95:ce:b8:9c:98:a9: 27:f6:46:e1:83:87:7a:e3:39:06:10:9b:5b:7a:5e: da:9c:af:5e:dd:e9:e2:6b:8f:65:a2:72:f5:6a:29: 18:21:10:93:a0:b0:10:7e:97:eb:6d:5a:95:34:f1: c5:0d:e8:82:43:9c:e3:36:d4:65:5a:fa:fa:e1:b3: 43:a0:01:4d:e5:a4:dc:0e:93:12:80:b6:48:0c:24: 5a:d1:4d:ec:2d:e1:6a:1c:2f:41:83:72:ec:fd:57: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:69:F4:13:C7:4C:9F:74:C3:84:80:17:8B:58:5A:24:96:FF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18fc389c-60a1-399a-acf3-c66cb0048a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c4:8e:43:2d:bb:95:70:b4:9f:a5:fb:c9:f7:5d:49:f1:6e: ce:a1:5d:f8:da:a2:84:26:ec:ca:2b:d9:c1:db:0d:7b:a7:37: 2f:4d:aa:77:0e:c1:04:b1:41:53:67:d2:c9:e0:26:18:fa:ca: 9c:4c:24:4f:3c:9f:57:5c:20:e2:c4:b8:63:bf:c3:60:9e:77: 7b:fd:21:9f:e7:61:f6:9c:95:fe:f6:39:64:d4:03:77:75:cc: 7f:6d:f4:df:73:2a:33:97:d7:33:78:a4:a7:04:b1:19:19:a3: 59:b2:2a:d9:4a:c0:21:01:14:56:46:1d:dd:b5:7d:78:7c:60: ff:28:3d:5d:b1:17:f4:d3:e2:a7:dc:f7:0b:db:48:51:22:b4: 1a:64:2c:52:e7:82:15:95:f8:4e:72:4a:56:0c:f6:e7:90:5a: 0e:01:c4:14:32:fd:7f:cb:a1:b5:77:fb:18:c5:99:01:e2:b1: a3:4e:95:0f:85:c2:bb:47:a1:da:63:b4:47:be:ae:2a:7f:0d: 93:9e:98:65:2b:b4:d0:46:f2:9a:21:4e:18:18:1c:0c:88:03: c6:3f:69:d4:32:3b:12:d9:a4:2a:4b:78:ec:72:a8:2c:54:20: 4e:0d:fc:cf:ad:20:13:5a:b1:2b:dc:4a:72:f5:05:86:0c:df: ba:e9:bc:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9fn7nZQzQNMpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDhiZjZhZjUtMmZmZC00NjdjLWFjMDgtMGJlY2NjMTM3NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwiiZumfIZlp2FNG9bBuQN7AOHNWpRcgJetu y5USvgh/zr/H45CTtjcZ6+oD2os4Ziop5IZlyfTNqN6P6317dP3YzRr2uY2xP1Vv I7GeTbJKC942dvomhUbXcOv+wK91d16kE/C0DV0GOXwkh8Jv1g5mJwEHf72rUiSE H4wlkSm5tF2gc7Ptm8v4ruRDiHZfVIe8oCMidcTYY8Ub7TaVzricmKkn9kbhg4d6 4zkGEJtbel7anK9e3enia49lonL1aikYIRCToLAQfpfrbVqVNPHFDeiCQ5zjNtRl Wvr64bNDoAFN5aTcDpMSgLZIDCRa0U3sLeFqHC9Bg3Ls/Ve7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFimafQTx0yfdMOEgBeLWFoklv/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMThmYzM4OWMtNjBhMS0z OTlhLWFjZjMtYzY2Y2IwMDQ4YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvEjkMtu5VwtJ+l+8n3XUnxbs6hXfjaooQm7Mor2cHbDXunNy9NqncO wQSxQVNn0sngJhj6ypxMJE88n1dcIOLEuGO/w2Ced3v9IZ/nYfaclf72OWTUA3d1 zH9t9N9zKjOX1zN4pKcEsRkZo1myKtlKwCEBFFZGHd21fXh8YP8oPV2xF/TT4qfc 9wvbSFEitBpkLFLnghWV+E5ySlYM9ueQWg4BxBQy/X/LobV3+xjFmQHisaNOlQ+F wrtHodpjtEe+rip/DZOemGUrtNBG8pohThgYHAyIA8Y/adQyOxLZpCpLeOxyqCxU IE4N/M+tIBNasSvcSnL1BYYM37rpvGM= -----END CERTIFICATE-----Generated at Sat Sep 5 01:20:59 2026 by rpki-client