$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa File: d2eba7e0-6a87-3e70-9830-21cdb930b252.roa (raw, json) Hash identifier: eDlswsnc3grHNvVfVpAZCGYYPH2nTq0UHrQ6O7k8X/c= Subject key identifier: 58:92:84:A5:9F:FD:A2:D2:D5:6B:DB:7C:16:B3:45:BA:0B:33:FE:53 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ECA6C7179061DC1671E82DD00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 9009 IP address blocks: 172.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:71:79:06:1d:c1:67:1e:82:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=9dd41bc1-a406-4311-9966-18c4a3bbf56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:14:5e:5c:17:7e:5c:77:4a:3b:5a:09:ca: 67:9b:6d:fb:af:12:e7:b6:d3:91:26:6c:95:23:2f: 64:e5:40:4d:c4:71:43:71:47:f4:ac:01:38:b6:29: c2:3c:b0:be:2a:7e:57:71:55:dd:b0:72:3b:d9:5c: 1d:26:0b:50:a6:7f:f3:4f:08:1b:2f:3d:6a:b5:59: e1:52:b0:96:4b:00:6d:75:59:a2:7c:ad:59:a1:c6: a1:19:13:09:f6:04:b5:8a:a5:16:b4:76:e7:aa:1b: df:41:b9:ca:7c:c9:8a:95:80:1d:81:dd:03:9b:62: 68:7a:00:f9:69:4f:0f:3d:da:a5:e2:ea:c9:41:26: 0e:90:04:26:24:6a:19:3d:30:b2:10:f5:11:08:32: 83:9b:1e:7d:e0:67:f9:e7:a7:56:05:d3:3b:58:83: 99:25:44:9d:64:32:6e:e7:f5:c9:c9:81:96:4a:f4: 0c:ba:d8:af:80:51:b1:6f:e9:98:28:c3:56:29:ac: c0:f4:eb:42:b8:e0:6a:da:04:2d:72:81:6d:ea:66: 21:54:db:9c:f2:5a:df:1a:d2:11:f2:d7:72:4f:af: d2:db:e3:e9:bf:53:0f:01:34:46:e0:b8:ed:97:c9: 40:5e:75:c7:4e:f8:4e:f8:07:ad:9b:7d:66:f9:0f: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:92:84:A5:9F:FD:A2:D2:D5:6B:DB:7C:16:B3:45:BA:0B:33:FE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:61:8f:2d:a5:fc:a2:84:79:02:27:3b:a0:5d:c3:0a:77:ce: 1b:44:12:69:d9:94:14:8c:5d:d7:e2:ff:cf:39:1f:14:79:4e: 71:57:64:26:87:ad:62:20:e9:65:37:af:7e:45:93:6e:bf:af: 29:f7:09:13:fa:11:e3:35:2f:ab:da:eb:d4:01:38:da:46:f0: 59:0c:fd:77:ee:68:ea:fc:45:ca:de:9e:a6:58:f6:39:c6:23: eb:82:1c:b5:43:ed:5f:64:8e:e8:b7:4e:4f:50:9d:2b:ad:d2: 30:27:ba:fe:23:a0:5b:f3:d4:79:32:e3:cf:12:5b:0c:02:31: a7:c8:b2:63:93:75:18:5f:1c:18:46:a0:5e:72:04:ec:cf:0e: f4:47:a7:b4:3e:cf:76:1e:0a:d7:a2:fa:91:aa:47:27:fe:ef: 93:f0:7e:c3:bb:cc:a9:8d:a1:e6:63:75:6e:87:7d:36:c7:69: fe:37:76:0f:10:8e:99:d8:e0:fc:27:55:ec:22:51:9d:0b:84: f7:51:a6:89:31:89:c2:9c:c7:6d:bd:21:f3:df:b7:5c:b5:f6: 94:6f:6b:40:c7:ec:72:cc:f0:7b:8e:54:a6:08:3f:e2:5c:3f: d1:0e:95:86:a1:a0:03:82:e4:ad:3d:b2:78:6c:23:9a:f3:df: c3:72:18:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHF5Bh3BZx6C3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk OWRkNDFiYzEtYTQwNi00MzExLTk5NjYtMThjNGEzYmJmNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDUUXlwXflx3SjtaCcpnm237rxLnttORJmyV Iy9k5UBNxHFDcUf0rAE4tinCPLC+Kn5XcVXdsHI72VwdJgtQpn/zTwgbLz1qtVnh UrCWSwBtdVmifK1ZocahGRMJ9gS1iqUWtHbnqhvfQbnKfMmKlYAdgd0Dm2JoegD5 aU8PPdql4urJQSYOkAQmJGoZPTCyEPURCDKDmx594Gf556dWBdM7WIOZJUSdZDJu 5/XJyYGWSvQMutivgFGxb+mYKMNWKazA9OtCuOBq2gQtcoFt6mYhVNuc8lrfGtIR 8tdyT6/S2+Ppv1MPATRG4Ljtl8lAXnXHTvhO+Aetm31m+Q9JXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiShKWf/aLS1WvbfBazRboLM/5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDJlYmE3ZTAtNmE4Ny0z ZTcwLTk4MzAtMjFjZGI5MzBiMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJhjy2l/KKEeQInO6Bdwwp3zhtEEmnZlBSMXdfi/885HxR5TnFXZCaH rWIg6WU3r35Fk26/ryn3CRP6EeM1L6va69QBONpG8FkM/XfuaOr8RcrenqZY9jnG I+uCHLVD7V9kjui3Tk9QnSut0jAnuv4joFvz1Hky488SWwwCMafIsmOTdRhfHBhG oF5yBOzPDvRHp7Q+z3YeCtei+pGqRyf+75PwfsO7zKmNoeZjdW6HfTbHaf43dg8Q jpnY4PwnVewiUZ0LhPdRpokxicKcx229IfPft1y19pRva0DH7HLM8HuOVKYIP+Jc P9EOlYahoAOC5K09snhsI5rz38NyGJk= -----END CERTIFICATE-----Generated at Sat Sep 5 01:01:49 2026 by rpki-client