$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa File: 438abf06-355b-3925-b81c-ed0f431c4a35.roa (raw, json) Hash identifier: Yi2kJcAJtgQrSktZngTw7QtaFSlcSJtEqlBz9Nc0Kn4= Subject key identifier: D2:6D:3C:A5:55:0B:3D:2C:19:B7:C3:01:84:89:23:15:76:6B:F6:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EED521C4EAA9E12912A6591E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 3223 IP address blocks: 172.94.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1c:4e:aa:9e:12:91:2a:65:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=43241593-991b-49ea-a612-477f0834475a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f3:ab:36:53:b1:73:c8:5d:a3:a8:c9:96:8c: 06:cf:1d:6a:a7:1b:fa:e0:30:fc:1c:b8:90:3c:4d: 19:cc:aa:ff:69:d4:77:46:65:4d:30:0d:00:22:22: d4:49:69:b7:68:b0:af:d2:3d:70:4f:38:65:00:33: 28:cd:4e:fe:54:de:cd:16:30:f3:ed:53:4f:b3:a3: 5b:fc:fe:f6:da:ee:90:b8:b5:1b:1a:2b:96:5f:ae: 97:4a:dc:e8:d1:28:06:71:bc:1d:5a:fa:42:52:96: 36:46:b4:4e:85:4f:55:46:c5:28:9a:df:62:9a:3f: 12:1b:a5:21:17:9a:84:c2:c4:62:56:55:a5:df:f0: 09:fa:9c:c6:6b:03:a6:c4:cb:ee:e4:a4:ea:0b:59: e4:73:71:70:b3:b4:12:75:e9:62:36:6b:93:32:6e: 00:fb:71:7e:c7:0b:78:a3:a8:a4:87:88:8a:ad:3c: 91:28:86:91:4f:a2:62:4f:39:7b:be:fe:d2:f3:8c: f0:f5:f1:6a:99:13:66:1a:6b:55:5b:ff:97:5c:a3: 96:02:67:8c:03:98:4b:90:d4:f0:cf:ab:58:00:49: ce:61:bf:41:47:09:55:64:0a:ab:aa:62:79:cf:41: 35:39:6e:ce:f0:92:53:5d:5f:f9:28:04:0e:ec:71: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:3C:A5:55:0B:3D:2C:19:B7:C3:01:84:89:23:15:76:6B:F6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4e:19:94:3f:1b:bf:1a:4c:e1:2a:c4:5a:57:5f:0b:42:d6: b3:59:49:4b:93:79:06:e6:9b:38:5e:08:a1:22:66:5f:d7:e3: 00:21:5e:b3:20:f6:7a:8f:e5:53:31:dd:58:1a:f2:cb:72:45: 47:67:87:62:b6:a3:66:b4:f3:94:6c:81:07:f9:b7:70:91:39: 97:06:87:1d:c0:1f:df:d7:7d:39:67:32:9b:7b:c6:30:54:71: 2c:ff:f6:fb:51:2d:62:e7:e3:84:61:b2:c2:e4:73:22:7c:71: 5c:13:22:98:11:64:ba:55:76:e6:83:e7:73:fb:e3:eb:f2:0e: 0a:e3:9e:11:24:07:ed:1e:61:30:e6:a2:af:04:c4:10:e6:62: d8:c1:72:72:21:a4:22:44:74:91:9b:ff:1c:be:46:87:6d:e5: 48:89:c9:d4:17:a4:05:cf:4c:5c:f0:07:0d:e2:2c:3e:39:41: 6a:95:37:94:69:65:f0:e2:84:f7:c3:f6:5f:85:ed:3b:72:39: 84:32:ea:0c:78:07:c0:ee:25:63:23:35:bc:d8:ea:81:e5:03: 38:20:d8:18:9a:59:75:4d:93:38:d1:90:5c:f4:00:c5:d5:fd: 05:6e:7f:da:38:25:be:79:28:ad:44:2a:f7:a5:13:4e:e9:9c: ad:d2:53:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhxOqp4SkSplkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NDMyNDE1OTMtOTkxYi00OWVhLWE2MTItNDc3ZjA4MzQ0NzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfOrNlOxc8hdo6jJlowGzx1qpxv64DD8HLiQ PE0ZzKr/adR3RmVNMA0AIiLUSWm3aLCv0j1wTzhlADMozU7+VN7NFjDz7VNPs6Nb /P722u6QuLUbGiuWX66XStzo0SgGcbwdWvpCUpY2RrROhU9VRsUomt9imj8SG6Uh F5qEwsRiVlWl3/AJ+pzGawOmxMvu5KTqC1nkc3Fws7QSdeliNmuTMm4A+3F+xwt4 o6ikh4iKrTyRKIaRT6JiTzl7vv7S84zw9fFqmRNmGmtVW/+XXKOWAmeMA5hLkNTw z6tYAEnOYb9BRwlVZAqrqmJ5z0E1OW7O8JJTXV/5KAQO7HGwRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJtPKVVCz0sGbfDAYSJIxV2a/YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM4YWJmMDYtMzU1Yi0z OTI1LWI4MWMtZWQwZjQzMWM0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9OGZQ/G78aTOEqxFpXXwtC1rNZSUuTeQbmmzheCKEiZl/X4wAhXrMg 9nqP5VMx3Vga8styRUdnh2K2o2a085RsgQf5t3CROZcGhx3AH9/XfTlnMpt7xjBU cSz/9vtRLWLn44RhssLkcyJ8cVwTIpgRZLpVduaD53P74+vyDgrjnhEkB+0eYTDm oq8ExBDmYtjBcnIhpCJEdJGb/xy+Rodt5UiJydQXpAXPTFzwBw3iLD45QWqVN5Rp ZfDihPfD9l+F7TtyOYQy6gx4B8DuJWMjNbzY6oHlAzgg2BiaWXVNkzjRkFz0AMXV /QVuf9o4Jb55KK1EKvelE07pnK3SU50= -----END CERTIFICATE-----Generated at Fri Sep 4 16:43:48 2026 by rpki-client