$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa File: 3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa (raw, json) Hash identifier: 7wroidkyXUQMjAYDYfZ7CFiHVc0KUOIFN3btIcsKozo= Subject key identifier: 96:BB:6E:88:FB:A0:29:02:7A:CF:1A:86:91:DB:CF:37:01:60:AD:AD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EE38CA7258DD65A4325090220 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 9009 IP address blocks: 172.94.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a7:25:8d:d6:5a:43:25:09:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=9cdcd599-2c35-4226-8815-b1a5c386386a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:3c:4a:22:ee:0a:8a:65:e8:c1:98:17:90: a9:34:ce:0c:70:5b:60:90:c6:83:5c:b2:95:df:02: 57:91:63:da:56:9b:1b:e6:cd:b8:d7:1d:ff:b7:8c: d2:30:3d:c4:78:5c:0d:74:8e:d4:05:3d:7d:f6:f0: 64:49:86:cf:57:63:29:67:fb:cb:f9:9e:e9:60:86: 98:af:02:43:e7:e0:42:4d:de:12:31:47:74:31:3f: 4c:7c:d4:d7:b1:55:03:a7:7c:1c:b1:ff:fb:a1:71: 09:b0:50:8a:d0:40:59:61:3d:04:f4:18:af:62:9c: 49:1f:d4:8f:bf:b3:f7:9c:a3:c0:22:55:ed:82:61: 37:18:68:f9:cf:49:d1:82:4d:43:68:b0:33:8f:35: 75:0f:e2:f4:00:ca:a9:5c:e5:1c:da:43:77:1c:6f: dc:d6:16:90:82:88:29:79:25:a7:d2:09:6d:9f:63: 2f:fe:ba:01:9b:87:a9:bf:71:45:2c:da:53:4b:87: b9:1f:cb:6c:23:14:50:36:9f:38:42:f8:d8:a3:e4: 3c:15:c5:37:67:8d:30:ec:8a:bd:da:84:e3:22:2f: 06:c2:5a:f9:56:32:80:c2:1a:43:73:8e:67:73:9a: 58:22:33:b5:6a:75:c1:e8:50:f5:6c:2e:da:96:b2: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BB:6E:88:FB:A0:29:02:7A:CF:1A:86:91:DB:CF:37:01:60:AD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:11:90:de:64:d2:4c:d4:07:a1:28:8a:e6:c5:bb:a6:93:36: bb:10:cd:b3:dc:27:df:76:33:2a:55:b7:f5:0a:5f:0a:87:df: 44:6c:fd:45:2a:61:b6:05:59:17:9d:b9:5a:82:05:b2:c5:ef: 33:b7:ca:cb:97:34:95:b0:57:51:8a:85:2c:e4:a3:14:74:ff: 02:7a:98:f2:cf:5b:1a:eb:05:85:9f:cf:46:7b:78:3f:a3:a2: 71:d0:c0:33:2c:a7:29:7d:f9:72:c6:9e:3c:45:c5:14:30:7c: 48:b3:a7:19:29:80:39:32:75:5c:f3:0f:62:ca:36:ed:13:4b: e7:32:dd:18:87:32:4b:a8:54:2b:57:d7:db:1c:f1:68:ea:70: 0f:ef:26:35:8f:c4:d9:7b:71:07:f9:54:e9:a6:c6:f5:42:60: db:29:65:03:2d:a7:63:52:54:63:17:2f:2c:6a:86:ee:49:51: 10:a1:4b:49:ed:1b:41:74:6e:32:09:12:44:1b:47:35:69:76: 40:80:46:8c:7a:94:92:36:2b:f0:8f:0b:32:d1:ee:c8:68:1f: 08:5f:ae:23:18:f4:1e:a5:d9:05:12:92:da:35:6e:6c:2d:26: a1:c2:9e:c6:f3:32:31:bd:e9:5c:a5:eb:36:77:aa:cf:96:90: e1:74:3e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKcljdZaQyUJAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk OWNkY2Q1OTktMmMzNS00MjI2LTg4MTUtYjFhNWMzODYzODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxI8SiLuCopl6MGYF5CpNM4McFtgkMaDXLKV 3wJXkWPaVpsb5s241x3/t4zSMD3EeFwNdI7UBT199vBkSYbPV2MpZ/vL+Z7pYIaY rwJD5+BCTd4SMUd0MT9MfNTXsVUDp3wcsf/7oXEJsFCK0EBZYT0E9BivYpxJH9SP v7P3nKPAIlXtgmE3GGj5z0nRgk1DaLAzjzV1D+L0AMqpXOUc2kN3HG/c1haQgogp eSWn0gltn2Mv/roBm4epv3FFLNpTS4e5H8tsIxRQNp84QvjYo+Q8FcU3Z40w7Iq9 2oTjIi8Gwlr5VjKAwhpDc45nc5pYIjO1anXB6FD1bC7alrLEHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa7boj7oCkCes8ahpHbzzcBYK2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2FlYTJkYTAtNWUwZC0z ZGM4LTgyMTAtODBhYTllNjY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQRkN5k0kzUB6EoiubFu6aTNrsQzbPcJ992MypVt/UKXwqH30Rs/UUq YbYFWReduVqCBbLF7zO3ysuXNJWwV1GKhSzkoxR0/wJ6mPLPWxrrBYWfz0Z7eD+j onHQwDMspyl9+XLGnjxFxRQwfEizpxkpgDkydVzzD2LKNu0TS+cy3RiHMkuoVCtX 19sc8WjqcA/vJjWPxNl7cQf5VOmmxvVCYNspZQMtp2NSVGMXLyxqhu5JURChS0nt G0F0bjIJEkQbRzVpdkCARox6lJI2K/CPCzLR7shoHwhfriMY9B6l2QUSkto1bmwt JqHCnsbzMjG96Vyl6zZ3qs+WkOF0PjM= -----END CERTIFICATE-----Generated at Fri Sep 4 22:26:29 2026 by rpki-client