$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa File: 28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa (raw, json) Hash identifier: /KTK0mkGeA+XeOwr7GXg4BTdpg20L7LFTnJf5bL2suI= Subject key identifier: 53:F7:35:48:5D:5F:07:04:31:44:BC:FE:D1:CB:C1:3A:ED:6F:07:8B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F8F3DC95293E2195FD6648080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 40676 IP address blocks: 172.94.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c9:52:93:e2:19:5f:d6:64:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=4c619185-f19c-4d34-9a3c-85db679a2308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:88:23:fe:3b:3c:4f:0c:8b:82:a3:34:36: 72:75:8f:d7:62:ed:2f:08:a0:7d:40:1e:9f:6c:89: 55:ec:0d:f2:7f:2d:35:f2:1b:6d:28:6f:86:b7:d0: b8:aa:48:09:b9:e3:6e:57:55:50:b7:5c:2d:c6:d5: 69:6c:2e:ac:89:5d:b4:01:8c:57:f3:94:48:df:ad: aa:a7:d0:a1:b6:55:f6:56:37:2c:0b:6b:ea:b5:b4: 03:ce:b6:5b:8f:87:72:81:4b:26:e1:6e:4c:42:aa: 95:6a:59:9b:16:d0:56:f2:40:d3:2b:ca:42:74:7c: fd:68:a7:69:66:cb:3d:95:a8:bd:6a:be:84:e8:36: 8e:42:cd:99:6e:4b:2d:74:ea:3f:f4:37:f0:1b:de: 58:26:0a:c5:f3:65:3b:a3:b7:f2:82:77:3b:d6:f2: 51:2d:f4:b3:55:54:9a:f8:53:df:c2:a6:ad:e8:64: e1:09:e9:3f:3c:36:23:1a:d3:b3:7c:5f:5a:9c:00: a6:a0:55:52:78:27:cd:26:b4:31:93:10:95:80:95: 26:cf:e2:03:28:8d:e9:e1:91:4d:c0:0e:a0:ca:33: 0a:d3:e2:46:76:a2:4d:6b:06:4e:89:c5:47:a9:b5: 75:fb:2f:2a:a9:6d:df:8f:72:81:72:b7:ac:ab:80: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F7:35:48:5D:5F:07:04:31:44:BC:FE:D1:CB:C1:3A:ED:6F:07:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:be:3e:56:da:09:26:10:ac:15:16:70:7e:b4:5f:08:70:29: 3a:a0:c8:af:93:c3:c9:ef:8f:c8:f7:18:a9:35:00:7e:f7:fb: 89:d6:3c:2d:c2:e9:e8:ab:7d:3e:27:9a:ab:d6:55:d6:69:61: 31:eb:71:b5:d9:45:22:65:c4:48:ef:c0:33:96:6f:e4:14:e9: d4:ff:f7:3b:1e:6b:c6:52:5c:09:8a:3f:16:7e:98:52:25:ab: 3e:bb:31:bb:91:3b:bf:fa:86:86:11:f1:39:8d:75:11:af:ff: f0:e3:5f:d8:d4:da:49:10:18:15:4e:c3:fa:84:c8:27:d5:80: bb:8d:6d:8f:9a:be:ad:7f:76:e5:d8:0b:df:5a:f1:b5:91:ae: 79:62:34:2d:e2:78:57:51:ff:21:bd:c1:8d:b7:79:eb:36:30: a5:e6:76:3c:e8:7b:0a:c2:63:df:e9:cd:e5:ec:97:73:18:78: 79:73:e2:3d:53:31:1c:05:c9:06:56:71:f3:e2:37:86:59:a4: 33:e0:5d:c8:af:23:7f:0c:19:29:2e:7c:e4:5c:d8:14:90:be: 2e:61:9c:d0:7b:43:02:cd:75:2c:e5:7b:8b:6b:39:0c:53:1e: 1b:57:ff:28:a9:ad:f3:2d:53:49:02:15:56:76:05:d7:c4:0b: de:63:7d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPclSk+IZX9ZkgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NGM2MTkxODUtZjE5Yy00ZDM0LTlhM2MtODVkYjY3OWEyMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd6II/47PE8Mi4KjNDZydY/XYu0vCKB9QB6f bIlV7A3yfy018httKG+Gt9C4qkgJueNuV1VQt1wtxtVpbC6siV20AYxX85RI362q p9ChtlX2VjcsC2vqtbQDzrZbj4dygUsm4W5MQqqValmbFtBW8kDTK8pCdHz9aKdp Zss9lai9ar6E6DaOQs2ZbkstdOo/9DfwG95YJgrF82U7o7fygnc71vJRLfSzVVSa +FPfwqat6GThCek/PDYjGtOzfF9anACmoFVSeCfNJrQxkxCVgJUmz+IDKI3p4ZFN wA6gyjMK0+JGdqJNawZOicVHqbV1+y8qqW3fj3KBcresq4AoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP3NUhdXwcEMUS8/tHLwTrtbweLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjgyMTVhYmItNGNiMS0z YjUyLWFhYzUtNWEwM2MxYzYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK+PlbaCSYQrBUWcH60XwhwKTqgyK+Tw8nvj8j3GKk1AH73+4nWPC3C 6eirfT4nmqvWVdZpYTHrcbXZRSJlxEjvwDOWb+QU6dT/9zsea8ZSXAmKPxZ+mFIl qz67MbuRO7/6hoYR8TmNdRGv//DjX9jU2kkQGBVOw/qEyCfVgLuNbY+avq1/duXY C99a8bWRrnliNC3ieFdR/yG9wY23ees2MKXmdjzoewrCY9/pzeXsl3MYeHlz4j1T MRwFyQZWcfPiN4ZZpDPgXcivI38MGSkufORc2BSQvi5hnNB7QwLNdSzle4trOQxT HhtX/yiprfMtU0kCFVZ2BdfEC95jfTk= -----END CERTIFICATE-----Generated at Mon Oct 26 02:27:36 2026 by rpki-client