$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901872c3-1d91-33b1-9de3-9dca0cc4312c.roa File: 901872c3-1d91-33b1-9de3-9dca0cc4312c.roa (raw, json) Hash identifier: 4Epiu9xKKRKE91lyd5390m/J+DYH1XS+e4WaGrGNoLI= Subject key identifier: 3A:9A:EB:16:D5:ED:7C:76:F5:77:D9:B8:E0:95:19:FF:A1:56:A4:95 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EA78FDC0E0A508EEAD092534F Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901872c3-1d91-33b1-9de3-9dca0cc4312c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3223 IP address blocks: 172.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:dc:0e:0a:50:8e:ea:d0:92:53:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d3770ab5-cdb8-455e-b650-d83ea1640d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:05:97:e2:f9:2a:89:d5:48:84:05:d6:d4: 31:5e:90:a2:56:4f:40:86:ae:58:ae:f6:3f:e7:18: df:87:6f:8c:c1:bc:19:4a:22:e9:9e:61:78:41:8e: 29:3b:1f:69:2d:26:c9:c7:ff:7c:b9:d0:47:ca:a4: 2a:72:3a:e6:a0:cb:d9:8a:1f:33:36:5c:70:ed:0f: ca:9f:b1:41:37:f3:b7:04:a0:5e:06:65:7f:a0:dd: 5a:89:af:d8:d8:7e:66:6f:84:45:c0:42:b0:5e:92: e8:2b:da:fe:91:06:6b:6b:63:94:b9:46:95:16:a5: fd:dd:6b:19:d5:6c:01:eb:7c:03:9f:5b:e3:15:c9: f8:ad:c9:57:6c:fb:86:cc:1e:9a:cd:d8:f7:f6:05: bf:6a:47:de:8b:a8:1a:d7:4a:4d:6f:ec:40:67:bb: a3:82:08:48:23:26:dc:0b:ae:72:a6:90:db:2e:1b: da:55:10:c7:94:7d:55:47:8d:51:c7:8c:fb:9b:06: c5:e8:94:12:75:7a:d5:d5:4e:56:f1:67:15:48:0b: 44:28:db:e1:43:ef:8b:63:d5:10:83:f1:b8:54:b9: 41:51:35:e9:97:c1:09:94:36:c6:d1:b8:59:a8:2c: 22:02:86:48:dc:01:da:e4:e6:64:cd:3d:a2:13:e0: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:EB:16:D5:ED:7C:76:F5:77:D9:B8:E0:95:19:FF:A1:56:A4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901872c3-1d91-33b1-9de3-9dca0cc4312c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e9:14:b7:a7:14:1b:07:e6:d5:34:7f:ac:a9:4b:ed:08:58: 33:b6:66:e2:77:70:b4:02:44:7b:66:ff:b5:6b:37:af:b2:a9: e3:8c:e5:fa:48:17:5e:fa:8d:ea:89:93:85:af:38:f3:66:fd: 66:47:40:5f:2f:b3:f0:bd:2c:fc:85:c5:8b:3b:33:6c:8c:23: bf:25:56:3c:20:e0:30:46:fa:dd:70:dc:25:1c:cd:d1:0d:2f: be:08:52:52:2c:98:cb:bd:df:8a:fc:87:66:aa:0e:43:23:03: da:14:c1:31:d4:40:92:79:7e:3a:4a:df:fe:b3:26:c2:0f:e8: 38:74:37:c9:32:11:57:63:1a:fd:bd:a0:a1:13:51:e6:03:2b: 02:4e:65:11:35:97:c5:cd:84:a1:3d:32:6f:0d:90:ca:3d:06: fc:62:b6:ab:75:70:33:94:d8:51:7e:91:3e:fd:ae:b2:c0:04: fa:5d:a3:5f:64:8f:44:aa:71:ff:92:18:ee:a5:90:fa:7b:c8: 0d:8d:6b:4a:0c:ce:de:68:55:46:fe:95:a9:54:0e:cb:ea:de: 84:12:4a:3c:a6:47:8c:ad:8e:c3:33:ed:0c:0c:0f:3c:23:71: ce:05:f6:42:43:d2:6a:06:22:c1:cc:8a:e1:6e:4a:42:40:4d: dd:6b:e3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj9wOClCO6tCSU08wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDM3NzBhYjUtY2RiOC00NTVlLWI2NTAtZDgzZWExNjQwZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb4Fl+L5KonVSIQF1tQxXpCiVk9Ahq5YrvY/ 5xjfh2+MwbwZSiLpnmF4QY4pOx9pLSbJx/98udBHyqQqcjrmoMvZih8zNlxw7Q/K n7FBN/O3BKBeBmV/oN1aia/Y2H5mb4RFwEKwXpLoK9r+kQZra2OUuUaVFqX93WsZ 1WwB63wDn1vjFcn4rclXbPuGzB6azdj39gW/akfei6ga10pNb+xAZ7ujgghIIybc C65yppDbLhvaVRDHlH1VR41Rx4z7mwbF6JQSdXrV1U5W8WcVSAtEKNvhQ++LY9UQ g/G4VLlBUTXpl8EJlDbG0bhZqCwiAoZI3AHa5OZkzT2iE+CzGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqa6xbV7Xx29XfZuOCVGf+hVqSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxODcyYzMtMWQ5MS0z M2IxLTlkZTMtOWRjYTBjYzQzMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDpFLenFBsH5tU0f6ypS+0IWDO2ZuJ3cLQCRHtm/7VrN6+yqeOM5fpI F176jeqJk4WvOPNm/WZHQF8vs/C9LPyFxYs7M2yMI78lVjwg4DBG+t1w3CUczdEN L74IUlIsmMu934r8h2aqDkMjA9oUwTHUQJJ5fjpK3/6zJsIP6Dh0N8kyEVdjGv29 oKETUeYDKwJOZRE1l8XNhKE9Mm8NkMo9Bvxitqt1cDOU2FF+kT79rrLABPpdo19k j0Sqcf+SGO6lkPp7yA2Na0oMzt5oVUb+lalUDsvq3oQSSjymR4ytjsMz7QwMDzwj cc4F9kJD0moGIsHMiuFuSkJATd1r4ww= -----END CERTIFICATE-----Generated at Fri Sep 4 15:51:47 2026 by rpki-client