$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/995358a5-eeeb-36ac-a3ed-66036e0263da.roa File: 995358a5-eeeb-36ac-a3ed-66036e0263da.roa (raw, json) Hash identifier: R5rBpx0P4MbkoBRv1vuWftvbdQP8G9tQcdLordCifUs= Subject key identifier: 5A:0B:A7:54:EA:25:AB:05:82:C8:F9:B8:9B:50:B2:4F:0F:52:A3:44 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ED167270A310E1207A865C080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/995358a5-eeeb-36ac-a3ed-66036e0263da.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 132372 IP address blocks: 172.94.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:27:0a:31:0e:12:07:a8:65:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=1b14be85-3098-4d26-8d0b-61f2c0c2a371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:c3:82:b6:5b:77:49:a9:af:a1:0f:a5:12: 2a:7c:18:8c:0d:97:30:e1:aa:6f:ce:ff:56:59:c0: 37:01:b9:e0:c3:a5:98:88:63:0b:b6:a3:7d:99:d8: 78:90:cf:78:77:4a:5c:3e:c8:1b:7e:d7:bc:c5:6c: cf:5f:bd:21:49:f6:a9:b2:12:99:14:aa:08:0a:a0: 38:c2:10:ca:5c:e2:12:4d:94:d8:4a:9c:ff:d3:80: c8:03:6a:63:5a:90:fe:15:20:41:90:b6:2c:15:23: 6a:ca:2e:b1:23:79:ca:b8:c7:28:89:2d:56:6a:47: 09:b2:45:8a:04:54:1d:a4:9b:cb:38:5d:39:65:10: c4:65:24:f5:98:f3:61:17:51:e7:b8:26:8c:8e:c6: 7d:cb:75:a5:86:36:85:da:19:54:db:54:71:c8:de: 4a:2a:8f:37:fe:0a:25:16:6f:6f:31:72:8e:98:6b: 0f:9a:3e:30:e6:5a:fc:e4:53:3e:8d:b3:7d:b7:3a: f0:23:b2:f9:60:68:34:07:e2:4e:37:08:82:90:b2: 8b:ba:b8:e8:8d:9d:8e:01:49:f8:89:b7:ca:ae:99: 70:91:c6:9e:75:ae:76:7a:44:7b:2e:45:dd:17:2c: 66:28:93:3e:40:6c:2d:b0:b2:36:dd:46:49:16:f9: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0B:A7:54:EA:25:AB:05:82:C8:F9:B8:9B:50:B2:4F:0F:52:A3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/995358a5-eeeb-36ac-a3ed-66036e0263da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c4:a7:af:50:e2:ee:88:90:11:3b:dd:67:d2:9f:d8:b1:46: 88:0c:aa:4c:9c:14:44:3f:eb:28:40:fa:53:b6:6c:8c:e6:3b: 52:e6:0d:b3:37:e5:ff:26:eb:e1:a1:d3:b8:ec:55:78:40:47: 8d:e9:42:0a:3a:57:c2:f0:de:e9:91:de:52:ed:54:f2:a1:c9: 79:78:3a:04:3f:b3:06:b2:8a:47:b0:78:30:fb:e4:a7:ca:e3: e7:76:7c:32:a3:b1:6d:12:85:72:d8:b3:54:6f:a7:a3:c5:ef: 3e:11:4f:8b:08:3e:9d:ee:82:d0:45:d4:5c:20:24:e9:8d:93: ac:b1:1c:3b:98:87:0c:40:08:0d:86:bb:64:88:0e:db:30:cf: 6f:33:05:e7:10:f7:50:d2:88:5d:53:d0:e7:9e:17:32:07:59: 43:5c:19:fe:13:41:d7:54:b3:0b:23:49:d0:cc:30:60:9a:c4: 9d:a3:44:94:59:fd:7e:70:16:1e:0f:57:55:af:fd:b4:67:2c: 6e:da:5c:b2:c1:70:78:73:4d:41:5f:fd:07:d1:dc:a8:c8:fe: 1d:cf:c5:2b:8f:dc:d6:2e:64:03:72:a5:21:fb:50:0f:9d:c1: 12:10:8b:0f:29:c1:6b:c7:4d:69:1e:9c:72:0f:ec:47:35:cf: 83:a0:58:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZycKMQ4SB6hlwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk MWIxNGJlODUtMzA5OC00ZDI2LThkMGItNjFmMmMwYzJhMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNDDgrZbd0mpr6EPpRIqfBiMDZcw4apvzv9W WcA3Abngw6WYiGMLtqN9mdh4kM94d0pcPsgbfte8xWzPX70hSfapshKZFKoICqA4 whDKXOISTZTYSpz/04DIA2pjWpD+FSBBkLYsFSNqyi6xI3nKuMcoiS1WakcJskWK BFQdpJvLOF05ZRDEZST1mPNhF1HnuCaMjsZ9y3WlhjaF2hlU21RxyN5KKo83/gol Fm9vMXKOmGsPmj4w5lr85FM+jbN9tzrwI7L5YGg0B+JONwiCkLKLurjojZ2OAUn4 ibfKrplwkcaeda52ekR7LkXdFyxmKJM+QGwtsLI23UZJFvmvewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoLp1TqJasFgsj5uJtQsk8PUqNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTk1MzU4YTUtZWVlYi0z NmFjLWEzZWQtNjYwMzZlMDI2M2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXEp69Q4u6IkBE73WfSn9ixRogMqkycFEQ/6yhA+lO2bIzmO1LmDbM3 5f8m6+Gh07jsVXhAR43pQgo6V8Lw3umR3lLtVPKhyXl4OgQ/swayikeweDD75KfK 4+d2fDKjsW0ShXLYs1Rvp6PF7z4RT4sIPp3ugtBF1FwgJOmNk6yxHDuYhwxACA2G u2SIDtswz28zBecQ91DSiF1T0OeeFzIHWUNcGf4TQddUswsjSdDMMGCaxJ2jRJRZ /X5wFh4PV1Wv/bRnLG7aXLLBcHhzTUFf/QfR3KjI/h3PxSuP3NYuZANypSH7UA+d wRIQiw8pwWvHTWkenHIP7Ec1z4OgWMY= -----END CERTIFICATE-----Generated at Sat Sep 5 02:30:27 2026 by rpki-client