$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa File: baa6a648-7ab8-39bf-8357-a787b0346893.roa (raw, json) Hash identifier: LNrj5R01sHKhCh2Y4BckOwhCB91DkGj/ugIvQmcA+GY= Subject key identifier: 06:A6:EC:60:18:F8:20:77:60:DF:33:E9:CD:63:B0:92:C9:11:45:9B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E8C8A46E39B14C89E3536B300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 3223 IP address blocks: 172.94.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:46:e3:9b:14:c8:9e:35:36:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=ac4945b9-8910-4987-949f-8055f4f1a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:15:0a:50:2e:9c:5f:ed:36:6a:0f:98:dc: 42:99:fb:4c:f2:d4:e6:53:04:8e:b2:e6:27:08:6c: 35:6f:a9:3c:64:fb:ac:68:c8:8a:94:e9:37:4e:11: 22:2e:19:cd:07:e4:f3:3a:c6:34:01:e6:a7:7e:25: fe:c9:17:9c:f9:26:66:15:ab:53:cc:a9:c9:de:c3: 43:76:9b:cf:1c:cd:7b:19:45:12:18:21:6f:48:16: 51:c9:d0:2f:81:e0:76:5d:82:c4:3b:1c:6f:2f:45: 52:2e:5a:09:37:8d:54:9b:3d:b1:11:c3:e3:97:b4: 2c:bd:a1:d6:8e:b2:92:ac:c5:d6:0d:17:26:a7:68: 49:cc:18:87:ac:b1:8c:55:d9:09:f5:83:38:4b:0c: f8:0e:83:59:7a:96:44:2d:6e:ac:23:14:0c:01:8a: c3:b5:3b:81:d6:8a:10:36:06:11:f1:9f:1b:75:43: cc:3d:fc:a7:a3:0e:a4:32:60:e8:e4:58:76:cb:97: 8f:44:b3:da:c0:23:22:ef:3f:1c:ec:a4:a9:0f:76: 47:da:4a:7c:44:18:d4:9e:51:d4:10:92:10:6c:a4: c2:9a:82:89:a6:65:25:a2:7c:67:2d:3c:00:7f:65: c7:87:b4:cc:e6:3c:44:90:f3:eb:55:5a:3f:5f:cf: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A6:EC:60:18:F8:20:77:60:DF:33:E9:CD:63:B0:92:C9:11:45:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:dc:13:fe:04:7b:d8:0c:9b:9f:b7:fe:b0:c5:1f:e3:6e:61: 5a:b1:02:d6:a5:28:e0:97:33:39:e0:ec:1b:df:b3:c0:d2:1a: cd:9a:40:9a:18:f9:de:2a:e6:0f:0b:f0:c4:d3:c5:e3:ab:b1: 70:79:29:eb:70:ee:a2:69:e1:6a:13:e0:2e:45:78:18:b1:97: e3:48:e3:74:b5:53:e6:d0:73:76:ac:f4:14:52:48:7e:12:22: f8:02:5d:f2:ae:1b:12:bf:dc:03:e7:21:a1:89:32:63:ca:aa: 08:54:21:70:5f:92:be:30:5b:e5:1e:de:ea:5b:89:df:5b:01: 46:ff:a8:18:ec:fa:c4:0f:ed:19:8a:3b:8a:4d:1c:72:b2:14: c2:56:ab:fa:60:39:12:34:be:5a:bb:65:75:21:4c:6d:bd:68: db:ae:90:52:4d:73:bc:f6:78:c5:29:44:ad:43:cb:a8:05:95: bf:e5:10:0d:13:ce:98:61:9f:44:26:66:ce:6c:93:f8:bd:de: f6:5e:dc:12:f7:99:81:64:5a:92:3d:46:48:f2:00:46:47:2e: da:4d:c3:b8:26:8b:22:18:ec:8a:22:aa:a6:99:f6:e0:e0:7d: 05:7d:56:d1:8c:3a:88:89:7d:f7:63:39:5a:b1:de:ad:c0:f1: 78:4d:c6:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikbjmxTInjU2swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk YWM0OTQ1YjktODkxMC00OTg3LTk0OWYtODA1NWY0ZjFhMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LsVClAunF/tNmoPmNxCmftM8tTmUwSOsuYn CGw1b6k8ZPusaMiKlOk3ThEiLhnNB+TzOsY0AeanfiX+yRec+SZmFatTzKnJ3sND dpvPHM17GUUSGCFvSBZRydAvgeB2XYLEOxxvL0VSLloJN41Umz2xEcPjl7QsvaHW jrKSrMXWDRcmp2hJzBiHrLGMVdkJ9YM4Swz4DoNZepZELW6sIxQMAYrDtTuB1ooQ NgYR8Z8bdUPMPfynow6kMmDo5Fh2y5ePRLPawCMi7z8c7KSpD3ZH2kp8RBjUnlHU EJIQbKTCmoKJpmUlonxnLTwAf2XHh7TM5jxEkPPrVVo/X8821wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAam7GAY+CB3YN8z6c1jsJLJEUWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmFhNmE2NDgtN2FiOC0z OWJmLTgzNTctYTc4N2IwMzQ2ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPcE/4Ee9gMm5+3/rDFH+NuYVqxAtalKOCXMzng7Bvfs8DSGs2aQJoY +d4q5g8L8MTTxeOrsXB5Ketw7qJp4WoT4C5FeBixl+NI43S1U+bQc3as9BRSSH4S IvgCXfKuGxK/3APnIaGJMmPKqghUIXBfkr4wW+Ue3upbid9bAUb/qBjs+sQP7RmK O4pNHHKyFMJWq/pgORI0vlq7ZXUhTG29aNuukFJNc7z2eMUpRK1Dy6gFlb/lEA0T zphhn0QmZs5sk/i93vZe3BL3mYFkWpI9RkjyAEZHLtpNw7gmiyIY7IoiqqaZ9uDg fQV9VtGMOoiJffdjOVqx3q3A8XhNxso= -----END CERTIFICATE-----Generated at Tue Jul 21 01:33:32 2026 by rpki-client