$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a27b47e7-578e-36e0-9933-6ad958ddfd5a.roa File: a27b47e7-578e-36e0-9933-6ad958ddfd5a.roa (raw, json) Hash identifier: EKAlRsm0e+G+ru1JR6qRKnO6oL9dbnyMx3L+MS8AUsc= Subject key identifier: C9:83:0D:C9:F0:14:3D:AA:18:33:88:92:85:47:87:1B:83:36:75:2E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EA78FDC7DC0196872F2A7DA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a27b47e7-578e-36e0-9933-6ad958ddfd5a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 172.94.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:dc:7d:c0:19:68:72:f2:a7:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fa1eda83-1560-457e-b8d7-69c645701443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c7:91:6c:15:f3:5a:00:50:25:41:32:7d:45: 0e:fe:f5:b1:b1:c5:1f:10:f4:4c:16:74:b7:b2:55: 22:91:5a:b8:22:8d:de:6f:44:17:7c:21:d6:fb:06: 31:81:eb:58:66:6c:b0:b8:b1:40:0c:28:93:6d:46: 0a:63:1b:a9:6f:ef:ac:20:09:e7:8d:81:1d:76:fd: 72:f4:6d:5b:8f:07:0b:25:1e:15:a9:87:81:49:e2: b4:3f:21:1b:26:61:8a:52:d4:95:93:45:56:13:bb: ed:d4:47:54:ee:54:19:c2:3d:e4:bc:9c:db:69:6f: 2b:44:f1:d1:32:6f:81:c3:87:e9:b1:7a:66:c5:56: 4a:0e:66:93:f4:ff:0e:23:59:02:d8:ea:0e:57:57: f4:d5:79:32:81:f0:b9:07:21:4b:74:b0:13:4d:36: cb:9e:cb:a7:95:d9:90:6b:8f:76:67:c4:1b:ca:e2: ee:34:a9:10:a2:f4:8a:0f:43:a9:80:b1:5c:ef:f6: 6b:14:43:52:8e:5d:1e:fa:a6:ac:0d:e0:13:eb:b5: ed:b8:d6:17:3d:48:d7:f8:ab:e6:ac:e2:b5:66:d8: 8e:96:11:7a:16:ad:41:15:24:27:1f:3a:a5:dc:91: 49:40:e5:0e:6e:0b:91:cf:36:2f:3f:72:e7:12:f4: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:83:0D:C9:F0:14:3D:AA:18:33:88:92:85:47:87:1B:83:36:75:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a27b47e7-578e-36e0-9933-6ad958ddfd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:30:c9:33:77:2e:1a:77:7e:45:2e:69:7f:19:35:71:2e:08: b3:fd:18:44:72:25:31:de:d0:ae:b7:4b:84:06:a6:56:37:92: 15:a4:10:87:e9:bb:6e:bb:68:b0:a1:aa:9e:a3:8e:bd:21:ce: 5a:06:f5:41:f8:28:89:54:cf:1a:62:96:7c:c8:b2:b3:0b:7e: d8:ed:e8:6f:97:8d:46:5d:17:e2:59:02:e1:de:95:67:89:f8: b0:66:25:c6:bf:1d:a9:53:61:dd:75:23:81:41:be:4c:af:4d: 67:60:96:cd:cb:b3:5b:f8:01:ed:e2:27:6f:fd:4d:0e:fb:d8: 6a:a0:27:dd:ee:7e:7e:25:cc:8a:c2:08:b1:77:08:07:89:54: 2f:96:23:18:fd:01:10:52:83:55:63:93:d2:af:a7:60:45:c1: 69:93:81:ee:b1:29:e9:8d:89:56:cb:12:b7:87:dc:22:49:d3: 88:ec:5a:34:3b:2e:4b:15:2f:e7:d0:3e:1a:fd:65:32:90:29: 7f:9c:ef:19:5b:b6:58:e4:65:00:04:1b:82:e7:8b:90:54:0c: b1:ec:51:65:10:d5:93:24:ad:87:04:5e:c5:de:8f:42:d2:6b: a5:d6:3e:51:93:5e:52:ab:a9:a0:de:77:58:89:cf:a9:7d:4a: 2b:e4:fa:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj9x9wBlocvKn2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmExZWRhODMtMTU2MC00NTdlLWI4ZDctNjljNjQ1NzAxNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiseRbBXzWgBQJUEyfUUO/vWxscUfEPRMFnS3 slUikVq4Io3eb0QXfCHW+wYxgetYZmywuLFADCiTbUYKYxupb++sIAnnjYEddv1y 9G1bjwcLJR4VqYeBSeK0PyEbJmGKUtSVk0VWE7vt1EdU7lQZwj3kvJzbaW8rRPHR Mm+Bw4fpsXpmxVZKDmaT9P8OI1kC2OoOV1f01XkygfC5ByFLdLATTTbLnsunldmQ a492Z8QbyuLuNKkQovSKD0OpgLFc7/ZrFENSjl0e+qasDeAT67XtuNYXPUjX+Kvm rOK1ZtiOlhF6Fq1BFSQnHzql3JFJQOUObguRzzYvP3LnEvRjIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmDDcnwFD2qGDOIkoVHhxuDNnUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTI3YjQ3ZTctNTc4ZS0z NmUwLTk5MzMtNmFkOTU4ZGRmZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIwyTN3Lhp3fkUuaX8ZNXEuCLP9GERyJTHe0K63S4QGplY3khWkEIfp u267aLChqp6jjr0hzloG9UH4KIlUzxpilnzIsrMLftjt6G+XjUZdF+JZAuHelWeJ +LBmJca/HalTYd11I4FBvkyvTWdgls3Ls1v4Ae3iJ2/9TQ772GqgJ93ufn4lzIrC CLF3CAeJVC+WIxj9ARBSg1Vjk9Kvp2BFwWmTge6xKemNiVbLEreH3CJJ04jsWjQ7 LksVL+fQPhr9ZTKQKX+c7xlbtljkZQAEG4Lni5BUDLHsUWUQ1ZMkrYcEXsXej0LS a6XWPlGTXlKrqaDed1iJz6l9Sivk+kw= -----END CERTIFICATE-----Generated at Sat Sep 5 01:17:31 2026 by rpki-client