$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9ec91e0c-aea0-3fdd-a038-9382d74e0b82.roa File: 9ec91e0c-aea0-3fdd-a038-9382d74e0b82.roa (raw, json) Hash identifier: RiX9pIznbeelpXvI/KARb083Nfh+RaSq4tphWOnt9ns= Subject key identifier: 64:7C:0A:D1:B7:B1:78:19:BE:77:7A:92:A8:D4:05:AD:7E:F7:0B:66 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EA78FDBB1ECA4A1AAF08C5280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9ec91e0c-aea0-3fdd-a038-9382d74e0b82.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3223 IP address blocks: 172.94.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:db:b1:ec:a4:a1:aa:f0:8c:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6fc1c46a-add3-464e-8661-0305a229d3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:d0:51:4b:6d:32:bd:01:b3:fe:56:30:98: d1:2e:d1:57:b9:c6:3a:c6:cd:de:3d:b9:7d:20:18: f9:8e:5f:fb:63:44:6c:4a:38:f0:02:a8:96:7c:b6: 93:96:c0:ea:18:24:b0:e9:ed:73:6c:1e:d1:7f:d0: e1:9c:49:b8:10:ce:59:39:aa:bd:22:2d:75:9a:48: 41:20:86:32:aa:a0:db:22:93:ec:fa:de:7e:da:3c: 32:dc:b4:74:0d:dc:90:bb:23:0d:3d:28:6c:ea:ae: a1:93:a3:c2:a9:a4:c7:25:5a:59:03:f5:46:f7:92: f6:06:3b:ec:5c:18:32:c3:c7:e6:d1:1a:45:a6:13: 44:f2:f1:34:1e:dd:95:3d:03:dd:76:91:14:f6:e6: 83:d8:ca:dd:a6:bd:d2:1e:64:97:58:12:f4:3a:8d: d1:b2:aa:dd:d4:97:7c:7d:21:1e:72:d6:cc:67:79: 8d:f0:02:f5:84:52:3b:14:18:50:95:53:0d:1e:e2: a7:85:a3:85:f3:7d:85:ed:20:38:e4:b4:a6:fc:93: a4:c0:40:54:c2:92:ef:d8:0f:ee:5c:a2:14:4f:a4: 63:59:91:85:9e:f8:24:fb:0f:4e:13:af:74:a3:01: 07:25:57:21:95:80:cd:b7:fc:6d:22:bd:ae:a7:fe: 7e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7C:0A:D1:B7:B1:78:19:BE:77:7A:92:A8:D4:05:AD:7E:F7:0B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9ec91e0c-aea0-3fdd-a038-9382d74e0b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:14:7f:ff:da:cf:d4:1e:1e:80:06:f1:cf:6a:63:70:bf:a0: b4:24:c4:b5:eb:6b:00:75:5d:41:75:25:92:f0:ff:03:dd:8f: 3c:89:fc:7e:d0:4f:d6:48:5e:b1:9a:5b:b6:8b:9d:08:e4:dd: 7e:8e:8c:b6:2e:77:7a:c9:67:25:68:2b:2b:c4:b6:0d:f9:72: 96:10:f1:b3:06:fe:16:4e:fe:ab:44:8f:b5:f7:a0:60:a3:db: 18:53:44:65:48:09:9e:07:eb:f8:05:c2:d4:0a:53:cd:b0:d6: 79:5d:e0:55:44:7f:bf:9d:95:be:e0:e7:61:42:67:d6:0a:01: cf:ce:51:bc:4b:5d:f9:26:d3:55:69:f3:be:fd:3c:8a:2b:17: cc:0e:e1:fa:d3:67:7f:40:00:95:b6:57:f0:34:61:10:a9:c4: 20:d4:9c:d9:ff:a4:57:64:66:b4:f0:17:22:ae:9e:a9:5a:32: 1b:69:13:97:3e:4b:af:17:2e:43:72:93:6c:fa:72:1d:27:14: 33:b2:74:68:95:90:67:05:f5:a4:84:46:23:a6:04:07:8c:1b: 1b:b2:e8:b8:ea:c0:34:eb:76:d0:a5:db:ba:4d:71:28:79:59: 74:91:a0:f2:e8:bf:26:67:08:a7:1a:95:0e:dc:2c:36:51:4c: f5:97:fd:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj9ux7KShqvCMUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmZjMWM0NmEtYWRkMy00NjRlLTg2NjEtMDMwNWEyMjlkM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfzQUUttMr0Bs/5WMJjRLtFXucY6xs3ePbl9 IBj5jl/7Y0RsSjjwAqiWfLaTlsDqGCSw6e1zbB7Rf9DhnEm4EM5ZOaq9Ii11mkhB IIYyqqDbIpPs+t5+2jwy3LR0DdyQuyMNPShs6q6hk6PCqaTHJVpZA/VG95L2Bjvs XBgyw8fm0RpFphNE8vE0Ht2VPQPddpEU9uaD2Mrdpr3SHmSXWBL0Oo3Rsqrd1Jd8 fSEectbMZ3mN8AL1hFI7FBhQlVMNHuKnhaOF832F7SA45LSm/JOkwEBUwpLv2A/u XKIUT6RjWZGFnvgk+w9OE690owEHJVchlYDNt/xtIr2up/5+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR8CtG3sXgZvnd6kqjUBa1+9wtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWVjOTFlMGMtYWVhMC0z ZmRkLWEwMzgtOTM4MmQ3NGUwYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoUf//az9QeHoAG8c9qY3C/oLQkxLXrawB1XUF1JZLw/wPdjzyJ/H7Q T9ZIXrGaW7aLnQjk3X6OjLYud3rJZyVoKyvEtg35cpYQ8bMG/hZO/qtEj7X3oGCj 2xhTRGVICZ4H6/gFwtQKU82w1nld4FVEf7+dlb7g52FCZ9YKAc/OUbxLXfkm01Vp 8779PIorF8wO4frTZ39AAJW2V/A0YRCpxCDUnNn/pFdkZrTwFyKunqlaMhtpE5c+ S68XLkNyk2z6ch0nFDOydGiVkGcF9aSERiOmBAeMGxuy6LjqwDTrdtCl27pNcSh5 WXSRoPLovyZnCKcalQ7cLDZRTPWX/fA= -----END CERTIFICATE-----Generated at Sat Sep 5 00:35:45 2026 by rpki-client