$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa File: 53e525d4-39a8-3e09-a5e2-111cbb592081.roa (raw, json) Hash identifier: BIQuA2As0IXLkxB4uRXj1/xQXJZeEocwzsmVFzrtICQ= Subject key identifier: 3B:6B:25:5A:CF:AD:C2:18:1D:51:5D:B5:70:C9:47:FB:90:5F:41:A7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F506D556876F9EC3B56CF2E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 45671 IP address blocks: 172.94.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:55:68:76:f9:ec:3b:56:cf:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=01c1dec0-1f08-4bda-a3f7-7608227382be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:72:5f:14:ae:52:e5:87:c1:dd:ae:d9:7f: 99:55:ee:a8:43:a4:b7:e5:a6:24:93:68:60:c0:cd: f9:9e:a6:ec:a0:94:99:02:d0:52:7c:d5:13:b6:56: a6:0b:06:b3:a9:e4:e5:af:d3:dc:36:33:2d:dc:b9: 7e:47:2d:03:3d:46:1d:e5:f3:66:e6:99:9e:26:d3: ac:fa:c5:2c:1e:22:d3:28:b6:b9:e2:0e:0c:6c:a2: da:da:d2:5a:fd:3e:1c:ad:eb:96:33:11:23:d5:f1: 60:3f:45:31:83:58:83:70:a2:6e:2f:0d:cc:26:0c: 0c:66:70:71:c4:0f:27:c8:fd:a3:82:21:0b:ca:51: 4e:8a:77:f7:ea:c6:5e:8e:da:c2:1f:3b:31:9b:71: 70:54:d8:2b:c7:ab:00:55:9b:c7:07:34:71:10:4e: 4e:a3:0c:71:95:42:67:5d:95:d2:49:2e:1f:ca:b7: 87:5b:a1:e5:20:fc:74:9f:84:bd:af:02:1d:b7:b8: 91:cf:37:c7:c0:2c:cc:40:45:66:3c:5f:7a:73:3d: 7e:3a:d5:ea:78:f9:68:20:5e:28:f4:e9:f2:3b:33: c5:86:00:1e:d1:a2:ac:01:93:a6:37:8c:cf:65:42: 2e:5c:60:e7:9a:a4:ee:56:6f:22:07:56:8c:10:9e: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6B:25:5A:CF:AD:C2:18:1D:51:5D:B5:70:C9:47:FB:90:5F:41:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:58:b3:b3:5c:b2:13:c5:84:c8:26:3f:bb:e2:ac:a5:03:ed: 30:3b:ba:25:5d:a1:8e:87:ba:07:e4:b8:b4:05:65:56:4c:49: 90:5e:3c:f7:20:4d:8d:d6:29:81:7a:21:10:fa:15:14:7e:a2: 3f:6b:37:81:1c:dd:33:61:ae:08:12:bb:62:aa:68:59:92:22: f2:9c:b9:9a:9a:64:a6:ae:f1:f3:6e:47:6b:aa:40:42:93:05: df:47:e6:18:bf:ee:0d:a9:d0:d4:ef:e5:75:63:1b:58:0d:0c: 50:68:88:d7:25:07:d3:f8:8f:28:b1:a8:db:04:c8:96:d0:4f: 66:19:7c:a1:09:e9:06:f7:7f:83:13:6e:56:1c:ea:11:a9:32: dc:5e:3f:03:b7:a1:22:63:fd:b2:fe:34:fa:41:72:cc:c9:84: 40:13:c8:96:00:3d:f6:12:92:6b:fd:67:5e:7d:15:56:8d:c4: cf:41:15:fd:74:60:8d:6c:b4:41:40:02:cc:fa:c6:b2:60:8c: 03:79:31:70:4e:75:0c:ac:81:0b:d1:66:f9:9c:5a:18:86:13: fe:f4:e1:0f:8c:e1:93:c2:75:43:75:25:5e:4e:a0:ad:7f:65: 39:27:84:d0:58:14:3b:f5:13:9d:bb:ea:71:13:5f:10:32:ea: 91:c5:09:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVVodvnsO1bPLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MDFjMWRlYzAtMWYwOC00YmRhLWEzZjctNzYwODIyNzM4MmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBhyXxSuUuWHwd2u2X+ZVe6oQ6S35aYkk2hg wM35nqbsoJSZAtBSfNUTtlamCwazqeTlr9PcNjMt3Ll+Ry0DPUYd5fNm5pmeJtOs +sUsHiLTKLa54g4MbKLa2tJa/T4creuWMxEj1fFgP0Uxg1iDcKJuLw3MJgwMZnBx xA8nyP2jgiELylFOinf36sZejtrCHzsxm3FwVNgrx6sAVZvHBzRxEE5OowxxlUJn XZXSSS4fyreHW6HlIPx0n4S9rwIdt7iRzzfHwCzMQEVmPF96cz1+OtXqePloIF4o 9OnyOzPFhgAe0aKsAZOmN4zPZUIuXGDnmqTuVm8iB1aMEJ7mZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtrJVrPrcIYHVFdtXDJR/uQX0GnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTNlNTI1ZDQtMzlhOC0z ZTA5LWE1ZTItMTExY2JiNTkyMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhYs7NcshPFhMgmP7virKUD7TA7uiVdoY6HugfkuLQFZVZMSZBePPcg TY3WKYF6IRD6FRR+oj9rN4Ec3TNhrggSu2KqaFmSIvKcuZqaZKau8fNuR2uqQEKT Bd9H5hi/7g2p0NTv5XVjG1gNDFBoiNclB9P4jyixqNsEyJbQT2YZfKEJ6Qb3f4MT blYc6hGpMtxePwO3oSJj/bL+NPpBcszJhEATyJYAPfYSkmv9Z159FVaNxM9BFf10 YI1stEFAAsz6xrJgjAN5MXBOdQysgQvRZvmcWhiGE/704Q+M4ZPCdUN1JV5OoK1/ ZTknhNBYFDv1E5276nETXxAy6pHFCco= -----END CERTIFICATE-----Generated at Tue Oct 20 22:09:28 2026 by rpki-client