$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ac28e83-7321-36e2-ae7b-7a49fceb7ee7.roa File: 8ac28e83-7321-36e2-ae7b-7a49fceb7ee7.roa (raw, json) Hash identifier: 2ZeKFvVYSD+ex4+R7vf6FlsSnJp3gcrPYdXSw8mc4ik= Subject key identifier: 21:B6:4E:2B:53:B5:8E:7D:8B:60:06:75:82:E4:31:72:ED:93:6A:47 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ED16723BE2236C70F60F784A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ac28e83-7321-36e2-ae7b-7a49fceb7ee7.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 132372 IP address blocks: 172.94.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:23:be:22:36:c7:0f:60:f7:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=0353ec5d-2add-4bb9-8bee-be3e9afce9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:94:db:11:60:18:f2:e3:6b:b2:ab:a6:d8: 37:c4:ac:36:0d:3b:97:6a:06:a3:da:17:69:d5:06: e3:f7:cc:c9:70:05:8f:68:f5:17:64:18:d7:f0:de: d6:b6:2f:a4:57:c3:55:8d:f9:10:a9:1c:dc:79:42: 57:d2:6f:9c:2e:6e:08:59:60:ff:a6:49:7f:81:cd: 93:68:e7:ef:66:4b:ee:ea:57:df:76:2b:45:31:bd: fe:f5:bf:dc:1e:13:ea:3e:56:63:d4:e5:c8:37:88: 5b:cd:4c:50:b8:31:c4:93:3c:6d:87:26:45:f6:e0: c8:13:d1:62:36:ed:02:1a:13:df:e8:62:c1:ee:83: b3:5e:37:8f:4d:a7:70:34:c8:36:0d:c8:1c:a7:90: 33:7e:cd:e4:0c:65:0b:ab:20:b5:f8:67:24:d3:24: e3:4c:f1:c4:cd:7e:dd:e2:69:f1:13:26:7c:40:5f: 45:68:78:3d:96:eb:f5:3f:6e:71:0e:d1:0f:84:e9: fd:43:af:ae:96:45:3f:58:ad:1a:6c:43:6b:59:55: 5c:46:b4:10:ae:73:21:e3:4a:d3:73:da:0a:d3:a5: 48:1c:8b:b9:f9:74:8a:99:ce:45:1d:fc:5e:cd:ae: 9d:a3:74:8b:fa:2a:13:ea:6b:f3:7d:62:be:f4:f4: 37:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:4E:2B:53:B5:8E:7D:8B:60:06:75:82:E4:31:72:ED:93:6A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ac28e83-7321-36e2-ae7b-7a49fceb7ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e6:02:d1:c1:8d:52:72:4e:b1:fc:40:8e:db:68:87:47:55: c4:73:8b:1d:99:d3:34:8a:28:12:7d:41:d2:15:23:99:e2:99: 6c:83:24:fc:f4:d2:a9:f4:95:14:46:4f:00:db:eb:3f:e5:47: 36:1c:c2:54:0a:dd:6b:b4:70:26:13:fd:03:a5:6f:1f:14:25: 17:42:78:37:d5:f6:6a:68:1c:30:15:f1:cc:36:a8:dc:aa:44: 64:a4:7e:ca:c9:d3:03:b2:33:30:81:52:bb:c0:0e:5d:41:2d: 48:35:f3:6c:9d:19:2b:42:10:ca:67:d8:53:6f:f3:69:7e:fe: 12:f3:d3:b2:e2:c6:54:1c:e3:fe:4d:67:fb:a4:ca:87:8f:a4: 39:fd:6c:32:43:36:67:a2:35:c3:69:25:bc:ee:be:47:8e:50: ac:38:aa:d9:24:7b:d4:b1:34:43:7f:72:e4:3e:01:00:23:18: 17:25:73:59:28:dc:c1:19:ee:0d:a0:20:4a:b8:b7:a0:23:ee: 3a:2e:6d:cc:7d:63:ee:f7:60:bf:16:18:59:17:e2:12:29:ad: 86:c5:a3:0f:c2:f3:e9:aa:cd:7a:46:98:2e:1e:eb:4e:7e:22: 54:ef:69:e8:72:de:76:d6:81:91:65:70:bd:18:88:ff:d6:d7: fc:7d:44:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZyO+IjbHD2D3hKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk MDM1M2VjNWQtMmFkZC00YmI5LThiZWUtYmUzZTlhZmNlOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaiU2xFgGPLja7Krptg3xKw2DTuXagaj2hdp 1Qbj98zJcAWPaPUXZBjX8N7Wti+kV8NVjfkQqRzceUJX0m+cLm4IWWD/pkl/gc2T aOfvZkvu6lffditFMb3+9b/cHhPqPlZj1OXIN4hbzUxQuDHEkzxthyZF9uDIE9Fi Nu0CGhPf6GLB7oOzXjePTadwNMg2Dcgcp5Azfs3kDGULqyC1+Gck0yTjTPHEzX7d 4mnxEyZ8QF9FaHg9luv1P25xDtEPhOn9Q6+ulkU/WK0abENrWVVcRrQQrnMh40rT c9oK06VIHIu5+XSKmc5FHfxeza6do3SL+ioT6mvzfWK+9PQ3VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG2TitTtY59i2AGdYLkMXLtk2pHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGFjMjhlODMtNzMyMS0z NmUyLWFlN2ItN2E0OWZjZWI3ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7mAtHBjVJyTrH8QI7baIdHVcRzix2Z0zSKKBJ9QdIVI5nimWyDJPz0 0qn0lRRGTwDb6z/lRzYcwlQK3Wu0cCYT/QOlbx8UJRdCeDfV9mpoHDAV8cw2qNyq RGSkfsrJ0wOyMzCBUrvADl1BLUg182ydGStCEMpn2FNv82l+/hLz07LixlQc4/5N Z/ukyoePpDn9bDJDNmeiNcNpJbzuvkeOUKw4qtkke9SxNEN/cuQ+AQAjGBclc1ko 3MEZ7g2gIEq4t6Aj7joubcx9Y+73YL8WGFkX4hIprYbFow/C8+mqzXpGmC4e605+ IlTvaehy3nbWgZFlcL0YiP/W1/x9RL4= -----END CERTIFICATE-----Generated at Fri Sep 4 22:18:49 2026 by rpki-client