$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa File: 821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa (raw, json) Hash identifier: sx4vqF9sdgUzGcTlM3Gvt1rF5Asj/Xag/7/Z9tftUVM= Subject key identifier: 5A:30:2E:DA:B1:D0:88:59:19:61:FE:F9:E1:41:BE:FA:EB:49:BA:CA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E885A49F6A77AC181BBC24040 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 9009 IP address blocks: 172.94.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:49:f6:a7:7a:c1:81:bb:c2:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=099811bc-cd9e-46cb-9ae2-5b84ca83e215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:ad:2d:56:85:f7:45:ac:29:ce:11:ad:4c: 7a:ae:da:58:87:bd:da:cb:94:32:d4:8f:62:61:97: 8d:1f:0b:08:fa:65:28:b8:35:ca:83:04:b8:d9:0e: 96:ec:71:10:22:85:74:55:f0:20:24:35:19:ea:f6: 79:a5:73:80:cf:93:11:02:8e:2d:31:d5:32:3c:1f: a8:ea:04:28:d5:f2:5b:62:92:4e:69:5c:46:75:4f: f8:8e:74:0a:aa:78:b5:d6:4a:f8:e3:8e:61:2b:4d: 51:64:02:be:a7:73:18:92:cb:a1:b4:13:06:b8:d9: d6:98:f7:be:1b:5e:e5:43:1c:23:eb:a9:36:bc:72: 21:fe:91:93:e4:58:f9:6e:9a:c9:a8:3d:39:f1:19: f4:ed:e7:c1:36:4e:5b:a2:18:3f:3e:42:09:d2:98: 8e:3f:ee:53:e1:6c:9c:7a:62:5a:31:7a:fe:48:70: f4:dc:e6:6a:42:1b:a5:45:7a:45:83:5e:49:4e:b9: 4f:e3:40:24:62:41:d3:01:7a:33:a6:51:6a:1e:10: 54:88:7c:99:7a:e6:fb:72:56:ab:93:c9:36:fb:f2: 6d:95:3f:b8:cc:23:07:e3:66:7b:a8:48:a1:f4:d5: e8:4c:19:ef:0d:6a:84:69:5f:50:e4:7d:56:78:fe: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:2E:DA:B1:D0:88:59:19:61:FE:F9:E1:41:BE:FA:EB:49:BA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ba:ae:c8:20:54:36:63:8a:9f:49:0c:5a:14:61:f4:29:02: fb:25:90:9c:8f:4d:c6:a1:9a:8a:39:ad:56:0a:61:a3:2f:2e: 49:72:01:f4:b7:fc:65:19:92:80:10:ab:7e:38:94:eb:fb:90: 98:f6:ea:12:5e:63:9f:3b:ce:a9:bf:13:f4:3a:cc:11:a2:15: c7:1a:25:0b:72:61:62:2b:f1:b7:c4:4f:9f:ff:a9:64:ab:67: ea:3d:6e:1a:47:e7:17:0a:8d:59:17:39:4e:3a:43:2a:2a:63: ca:6f:69:f4:c5:09:79:82:f9:01:2e:59:da:fd:d4:e0:f0:5d: 7d:7f:e8:3a:a7:e0:0f:22:21:df:01:7d:b3:e3:93:66:be:c0: f1:c2:53:83:f6:32:32:52:0d:bb:24:ff:7c:7c:4d:a4:90:29: 8b:3b:ed:9b:c0:0e:e5:50:3b:6d:d2:7f:47:67:5a:3f:69:b5: 4f:34:9d:bd:69:b5:52:ed:c5:5b:b4:a8:1d:7a:59:18:f4:7d: da:cf:5f:36:c4:5b:e9:5a:ff:75:f1:b7:bc:58:56:07:e4:88: 6d:da:c6:95:4d:3a:e7:33:b5:74:35:bf:39:6d:eb:6f:a9:02: 03:b9:f5:af:dd:dc:a3:73:76:59:e3:eb:a3:04:01:7a:bc:8c: cd:5f:e4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkn2p3rBgbvCQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk MDk5ODExYmMtY2Q5ZS00NmNiLTlhZTItNWI4NGNhODNlMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0CtLVaF90WsKc4RrUx6rtpYh73ay5Qy1I9i YZeNHwsI+mUouDXKgwS42Q6W7HEQIoV0VfAgJDUZ6vZ5pXOAz5MRAo4tMdUyPB+o 6gQo1fJbYpJOaVxGdU/4jnQKqni11kr4445hK01RZAK+p3MYksuhtBMGuNnWmPe+ G17lQxwj66k2vHIh/pGT5Fj5bprJqD058Rn07efBNk5bohg/PkIJ0piOP+5T4Wyc emJaMXr+SHD03OZqQhulRXpFg15JTrlP40AkYkHTAXozplFqHhBUiHyZeub7clar k8k2+/JtlT+4zCMH42Z7qEih9NXoTBnvDWqEaV9Q5H1WeP7weQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFowLtqx0IhZGWH++eFBvvrrSbrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODIxZTc1ZDQtNTk5MC0z ZTFhLTkwZDItMGZmMmI5NmUwMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi6rsggVDZjip9JDFoUYfQpAvslkJyPTcahmoo5rVYKYaMvLklyAfS3 /GUZkoAQq344lOv7kJj26hJeY587zqm/E/Q6zBGiFccaJQtyYWIr8bfET5//qWSr Z+o9bhpH5xcKjVkXOU46QyoqY8pvafTFCXmC+QEuWdr91ODwXX1/6Dqn4A8iId8B fbPjk2a+wPHCU4P2MjJSDbsk/3x8TaSQKYs77ZvADuVQO23Sf0dnWj9ptU80nb1p tVLtxVu0qB16WRj0fdrPXzbEW+la/3Xxt7xYVgfkiG3axpVNOucztXQ1vzlt62+p AgO59a/d3KNzdlnj66MEAXq8jM1f5GQ= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:05 2026 by rpki-client