$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/986ea320-de7a-39f1-ad06-325eeca426c3.roa File: 986ea320-de7a-39f1-ad06-325eeca426c3.roa (raw, json) Hash identifier: 3snHyXrcF0k8WPejb2k1WQxPnD6OEM8JMTYk1jS88OM= Subject key identifier: F5:31:42:C5:F6:6F:FD:44:39:08:A2:6C:5F:71:67:A0:B7:3F:3C:6E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EAFE70857D4EF7CA8229D3FC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/986ea320-de7a-39f1-ad06-325eeca426c3.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 213790 IP address blocks: 172.94.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:08:57:d4:ef:7c:a8:22:9d:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=d8b8c119-c249-4970-96ea-70c06961aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:eb:dc:4d:b8:27:8c:b7:c6:a0:5a:23:1e: 5d:47:64:aa:a2:3b:ec:1a:24:17:5f:80:d1:1b:db: b1:b0:cb:de:71:ce:77:76:a6:69:f5:46:2d:60:0c: 2d:d9:66:91:41:f0:75:99:31:f9:36:7e:7d:a0:9e: 60:85:ba:df:ae:55:76:fe:7f:c5:1b:ea:9f:1e:5f: aa:b7:b6:22:06:c0:53:7c:27:b9:03:41:d2:6a:49: 6f:c7:23:a0:52:77:fb:20:19:58:57:37:5f:f3:4a: 88:60:66:13:42:81:bc:59:75:50:d7:26:d8:88:19: 38:cc:14:c8:a6:75:c5:ae:52:04:69:be:ec:3b:3e: 75:2d:dc:4c:ce:3b:d0:16:08:1b:23:c4:66:b6:ac: b7:4e:ef:ca:d2:26:2c:7f:ec:94:54:dc:1a:3d:5e: a7:d3:47:bd:c1:c5:78:35:2b:26:0b:22:ac:1a:3f: df:94:ad:f3:ac:ab:fb:7f:1e:01:23:5b:d6:0d:47: 9f:70:7f:4b:7e:96:9b:ca:45:c8:a9:d0:4a:80:43: 21:f8:7e:6c:31:98:82:8f:97:f2:66:77:6e:09:4e: 75:d3:1f:f7:16:e1:c7:a9:15:4f:10:8c:d3:04:76: c1:76:7b:3e:c7:7a:a9:83:0a:5e:28:6b:98:cd:04: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:31:42:C5:F6:6F:FD:44:39:08:A2:6C:5F:71:67:A0:B7:3F:3C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/986ea320-de7a-39f1-ad06-325eeca426c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:33:36:0d:26:1a:90:28:2a:09:a0:97:f8:74:67:58:54:35: c8:60:b3:e6:64:2f:19:93:e0:b5:d2:72:aa:7f:82:ca:af:8f: 5a:1f:32:6e:fe:4d:d7:cf:93:2a:2b:a8:dd:07:ce:43:0a:f8: 88:1d:71:97:46:f4:95:ca:be:9a:b9:c9:d7:49:63:05:01:12: e6:05:95:0d:c3:8e:01:99:ef:d9:e1:d0:7a:e6:1f:ce:94:5e: 48:e0:c1:1d:5f:52:73:6c:bb:04:d7:59:fc:29:2e:75:e5:e2: 50:ae:49:55:99:b4:0a:c3:df:dd:6a:36:cb:f1:9f:48:9b:82: 7a:f0:96:a4:8b:1c:5b:84:b4:a3:a0:ab:74:0c:59:61:8a:59: a9:97:1b:bb:66:cf:f0:6c:6c:e8:d1:4b:a5:53:16:27:ad:32: 05:da:c2:27:0a:79:9e:6a:ea:03:00:c2:86:cf:60:34:b0:14: 90:27:e6:5c:44:9b:ee:60:eb:01:9d:9b:87:86:72:89:1f:3a: f7:54:97:81:1e:af:33:bf:a3:f5:fa:d2:29:d0:53:8d:1e:37: b1:b8:f5:29:ce:1b:91:5c:49:f7:34:4a:e8:c3:b9:14:12:ad: 2b:e9:a6:6f:02:fb:4c:5f:e5:86:34:2d:ed:40:2f:09:70:99: 90:3b:d7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5whX1O98qCKdP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZDhiOGMxMTktYzI0OS00OTcwLTk2ZWEtNzBjMDY5NjFhYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oHr3E24J4y3xqBaIx5dR2SqojvsGiQXX4DR G9uxsMvecc53dqZp9UYtYAwt2WaRQfB1mTH5Nn59oJ5ghbrfrlV2/n/FG+qfHl+q t7YiBsBTfCe5A0HSaklvxyOgUnf7IBlYVzdf80qIYGYTQoG8WXVQ1ybYiBk4zBTI pnXFrlIEab7sOz51LdxMzjvQFggbI8Rmtqy3Tu/K0iYsf+yUVNwaPV6n00e9wcV4 NSsmCyKsGj/flK3zrKv7fx4BI1vWDUefcH9LfpabykXIqdBKgEMh+H5sMZiCj5fy ZnduCU510x/3FuHHqRVPEIzTBHbBdns+x3qpgwpeKGuYzQS7owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUxQsX2b/1EOQiibF9xZ6C3PzxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTg2ZWEzMjAtZGU3YS0z OWYxLWFkMDYtMzI1ZWVjYTQyNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUzNg0mGpAoKgmgl/h0Z1hUNchgs+ZkLxmT4LXScqp/gsqvj1ofMm7+ TdfPkyorqN0HzkMK+IgdcZdG9JXKvpq5yddJYwUBEuYFlQ3DjgGZ79nh0HrmH86U XkjgwR1fUnNsuwTXWfwpLnXl4lCuSVWZtArD391qNsvxn0ibgnrwlqSLHFuEtKOg q3QMWWGKWamXG7tmz/BsbOjRS6VTFietMgXawicKeZ5q6gMAwobPYDSwFJAn5lxE m+5g6wGdm4eGcokfOvdUl4EerzO/o/X60inQU40eN7G49SnOG5FcSfc0SujDuRQS rSvppm8C+0xf5YY0Le1ALwlwmZA711k= -----END CERTIFICATE-----Generated at Fri Sep 4 23:54:32 2026 by rpki-client