$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa File: d3472d91-6027-3989-8e71-4dc7c885f1fa.roa (raw, json) Hash identifier: HNU/Nu/Ivd1Zacq1qgniDeOXESdC1oFmcLxDOhepqa8= Subject key identifier: 9C:8E:5F:ED:2A:44:C0:D6:53:8C:B0:76:87:BD:29:D1:6B:00:13:A3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ECBD1E24B3B72C9291E65E600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 9009 IP address blocks: 172.94.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e2:4b:3b:72:c9:29:1e:65:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=ea0f5219-6d0b-4ced-82b1-3a676fe2c9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:50:8f:13:62:e6:f2:4e:6f:2b:32:cd:84: 59:bd:1e:cf:6c:67:e4:ed:ff:33:a3:7f:de:01:58: be:15:bb:3a:53:25:d0:72:d8:c4:75:d1:31:34:e6: 64:87:41:83:10:1e:d6:fc:2f:4e:76:fc:c0:eb:73: 13:47:4c:28:a8:a0:97:ba:8b:0b:53:06:ce:e8:03: c4:eb:a5:08:a1:4c:c7:ba:14:e6:85:a1:37:39:35: 7b:7f:31:08:40:a9:0b:09:4c:13:fd:c0:89:6d:46: 2e:6b:f3:a8:77:0c:d9:75:17:ea:c9:66:8c:8d:fd: 6c:3e:e8:ef:ef:7c:12:28:b2:04:1e:25:a7:28:17: 2f:37:34:73:04:11:59:a0:0e:f8:60:5e:6d:3b:09: fc:1f:db:7d:75:fb:7d:2f:39:02:d0:10:b8:f8:49: 60:2b:ea:6b:6d:4d:0b:01:a2:57:3a:05:d6:49:66: 58:b1:7c:85:40:45:d5:8d:26:7e:70:7c:fc:9d:19: cd:e6:72:83:fb:55:b5:52:d0:49:05:20:1d:f6:64: d6:0a:51:5b:4e:44:fa:eb:9a:84:8a:76:69:78:11: d9:98:ef:d8:27:a6:e1:19:cc:9f:80:d9:16:55:ac: be:b1:96:33:ce:e1:e5:d4:b0:86:f8:1a:61:6d:9c: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8E:5F:ED:2A:44:C0:D6:53:8C:B0:76:87:BD:29:D1:6B:00:13:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:69:d6:0e:f7:45:04:6c:2f:7a:47:2f:87:9a:c2:65:c5:fa: 6a:e5:be:25:2d:04:61:5d:45:66:06:ca:65:d9:b5:bd:5d:f4: fa:25:32:af:9e:42:58:39:c8:81:f1:5b:03:55:f9:fa:f0:de: cf:00:91:42:4c:b0:88:f1:ce:38:19:cc:87:ac:fb:94:84:f5: 66:2b:ff:ec:89:41:79:c1:d1:94:47:fb:a8:df:8b:b0:8f:19: 2d:cd:92:89:90:13:b5:c0:33:ae:28:e1:3d:14:33:2b:59:c1: a5:63:80:42:55:93:2a:46:e6:8c:5a:bd:4a:56:93:6a:b6:a4: e4:90:ab:45:9d:ad:5c:0c:14:4c:6e:5d:a2:9b:b0:01:37:a2: 21:1e:83:a7:b6:72:5a:a2:ec:2c:e7:ec:ed:76:dd:a2:13:3b: 91:9c:f7:0f:13:68:07:48:8d:81:c0:c7:3a:9b:ed:bd:3a:1c: c3:d2:6c:ae:87:f4:e6:3c:ce:33:1a:4e:15:b2:10:a1:49:4d: 43:0b:3f:0e:00:9c:85:2f:59:35:fa:fe:b6:3c:59:01:08:84: e6:14:1c:e5:c6:49:91:73:18:b7:3e:83:df:9d:1c:fb:b6:ca: f8:cf:65:78:bb:b6:36:25:bf:79:0b:d6:a7:e3:2b:75:19:e9: 65:5a:0f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eJLO3LJKR5l5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZWEwZjUyMTktNmQwYi00Y2VkLTgyYjEtM2E2NzZmZTJjOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFBQjxNi5vJObysyzYRZvR7PbGfk7f8zo3/e AVi+Fbs6UyXQctjEddExNOZkh0GDEB7W/C9OdvzA63MTR0woqKCXuosLUwbO6APE 66UIoUzHuhTmhaE3OTV7fzEIQKkLCUwT/cCJbUYua/OodwzZdRfqyWaMjf1sPujv 73wSKLIEHiWnKBcvNzRzBBFZoA74YF5tOwn8H9t9dft9LzkC0BC4+ElgK+prbU0L AaJXOgXWSWZYsXyFQEXVjSZ+cHz8nRnN5nKD+1W1UtBJBSAd9mTWClFbTkT665qE inZpeBHZmO/YJ6bhGcyfgNkWVay+sZYzzuHl1LCG+BphbZyXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyOX+0qRMDWU4ywdoe9KdFrABOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDM0NzJkOTEtNjAyNy0z OTg5LThlNzEtNGRjN2M4ODVmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5p1g73RQRsL3pHL4eawmXF+mrlviUtBGFdRWYGymXZtb1d9PolMq+e Qlg5yIHxWwNV+frw3s8AkUJMsIjxzjgZzIes+5SE9WYr/+yJQXnB0ZRH+6jfi7CP GS3NkomQE7XAM64o4T0UMytZwaVjgEJVkypG5oxavUpWk2q2pOSQq0WdrVwMFExu XaKbsAE3oiEeg6e2clqi7Czn7O123aITO5Gc9w8TaAdIjYHAxzqb7b06HMPSbK6H 9OY8zjMaThWyEKFJTUMLPw4AnIUvWTX6/rY8WQEIhOYUHOXGSZFzGLc+g9+dHPu2 yvjPZXi7tjYlv3kL1qfjK3UZ6WVaD6I= -----END CERTIFICATE-----Generated at Sat Sep 5 01:02:56 2026 by rpki-client