$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1df60a99-b459-3fe4-8b73-ea4a1abea315.roa File: 1df60a99-b459-3fe4-8b73-ea4a1abea315.roa (raw, json) Hash identifier: XhyLE84GmmbrgMfNwNjeqk9Z6MqTXR78P4owTE1jShQ= Subject key identifier: D3:6A:6B:C6:0E:0B:0A:25:5C:0F:0E:58:2E:0D:62:FF:3A:EA:9D:F7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EA78FDC033F261D84BD805680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1df60a99-b459-3fe4-8b73-ea4a1abea315.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3223 IP address blocks: 172.94.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:dc:03:3f:26:1d:84:bd:80:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5b63cb36-4173-4a26-95e1-d2072ffb4fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:29:6a:53:00:32:5e:4f:e6:89:66:87:7c: b0:d4:1b:7b:cb:c5:8a:28:25:c5:9e:3a:66:dc:1d: 2e:06:fe:d5:b4:48:4c:a4:2e:0a:66:f0:66:2a:a5: 8c:bd:c4:c0:95:78:17:21:0b:3f:b5:d6:ea:a5:a8: 1c:cd:2c:0f:cb:4d:20:fd:45:17:fc:bd:b1:b2:79: f6:6b:95:82:72:d4:7b:5e:93:35:a7:ac:78:0a:b2: 4e:c4:6f:85:d0:ed:14:80:c9:8f:16:dd:b5:ef:1e: 47:e1:27:91:43:e4:24:15:00:7f:29:6d:e8:d7:17: 3c:a3:b5:02:1d:2d:88:04:05:15:5e:39:7c:49:b8: db:f9:ba:fe:c8:88:65:25:3b:f1:ad:34:61:92:73: 95:1f:65:1a:1b:39:22:c2:87:70:04:81:71:21:2f: e6:1e:90:99:2b:14:23:49:1b:8f:5b:eb:37:33:b1: e0:2f:4e:0e:1c:c6:1e:8c:4d:ae:46:d1:63:c7:6b: ed:6c:6b:56:38:b1:e2:7a:02:f7:97:17:b0:e7:70: 1b:81:91:0a:1a:50:06:78:f3:77:ce:43:b1:86:5d: d5:37:d0:b3:ce:38:0e:85:5d:c8:4d:13:1b:d0:e0: cf:39:18:12:d7:07:4d:5b:7b:46:1c:25:ec:96:56: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6A:6B:C6:0E:0B:0A:25:5C:0F:0E:58:2E:0D:62:FF:3A:EA:9D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1df60a99-b459-3fe4-8b73-ea4a1abea315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:29:93:a5:9e:0a:4f:78:fe:ba:ff:a5:dd:33:df:d4:e4:b5: 26:2f:67:0b:19:db:cc:7d:72:1e:90:f1:77:f8:cd:a6:7e:e2: 0a:d6:66:b0:97:1c:13:fc:d5:bd:92:18:ea:ee:d6:a2:2d:ee: 19:ae:83:9b:6f:38:b4:4d:6e:7e:fb:30:ba:43:6d:86:98:0b: e7:fc:b8:91:5d:e6:fd:38:14:78:39:35:7a:48:29:ad:2f:b0: 0a:fb:bd:6b:3e:f0:a8:34:0b:c9:ae:a4:12:82:34:5c:38:3d: 17:d5:90:11:86:58:3e:36:a9:30:05:73:7c:c6:d5:ba:7d:70: d5:95:c9:c1:7f:26:51:ce:2a:97:dc:31:7b:25:c2:bd:e7:e7: d3:a4:c5:86:17:d9:27:2d:ce:5f:bb:59:f7:14:46:a6:cc:b2: fa:24:31:4e:14:6f:be:95:4c:20:f1:c8:e4:5c:78:8b:32:0d: 58:3f:37:bd:36:69:59:58:04:26:e3:d2:14:d0:1e:ed:88:d5: 40:4e:da:16:de:fb:17:92:94:e6:dc:c7:0e:10:5a:09:22:6c: af:1f:26:67:2a:cb:19:da:2e:55:54:05:dc:6b:25:f7:9f:91: 4c:b7:86:b5:63:aa:59:e8:f8:42:9e:a9:7f:e0:f7:66:d7:e9: e1:fb:a8:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj9wDPyYdhL2AVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWI2M2NiMzYtNDE3My00YTI2LTk1ZTEtZDIwNzJmZmI0ZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYkpalMAMl5P5olmh3yw1Bt7y8WKKCXFnjpm 3B0uBv7VtEhMpC4KZvBmKqWMvcTAlXgXIQs/tdbqpagczSwPy00g/UUX/L2xsnn2 a5WCctR7XpM1p6x4CrJOxG+F0O0UgMmPFt217x5H4SeRQ+QkFQB/KW3o1xc8o7UC HS2IBAUVXjl8Sbjb+br+yIhlJTvxrTRhknOVH2UaGzkiwodwBIFxIS/mHpCZKxQj SRuPW+s3M7HgL04OHMYejE2uRtFjx2vtbGtWOLHiegL3lxew53AbgZEKGlAGePN3 zkOxhl3VN9CzzjgOhV3ITRMb0ODPORgS1wdNW3tGHCXsllahvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNqa8YOCwolXA8OWC4NYv866p33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWRmNjBhOTktYjQ1OS0z ZmU0LThiNzMtZWE0YTFhYmVhMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwpk6WeCk94/rr/pd0z39TktSYvZwsZ28x9ch6Q8Xf4zaZ+4grWZrCX HBP81b2SGOru1qIt7hmug5tvOLRNbn77MLpDbYaYC+f8uJFd5v04FHg5NXpIKa0v sAr7vWs+8Kg0C8mupBKCNFw4PRfVkBGGWD42qTAFc3zG1bp9cNWVycF/JlHOKpfc MXslwr3n59OkxYYX2Sctzl+7WfcURqbMsvokMU4Ub76VTCDxyORceIsyDVg/N702 aVlYBCbj0hTQHu2I1UBO2hbe+xeSlObcxw4QWgkibK8fJmcqyxnaLlVUBdxrJfef kUy3hrVjqlno+EKeqX/g92bX6eH7qDQ= -----END CERTIFICATE-----Generated at Fri Sep 4 13:22:41 2026 by rpki-client