$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa File: d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa (raw, json) Hash identifier: Fsfzrzu1/ht27M3LBWpBAJupYxxdC3mpPxFXPL0SlWA= Subject key identifier: 1B:61:77:AE:4F:8A:FA:8D:15:CA:E6:B1:3F:A8:4E:04:55:97:37:42 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4DA28E43ED0582D9013606C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 132372 IP address blocks: 172.94.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8e:43:ed:05:82:d9:01:36:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=4d267a67-cf2e-4242-9109-88762c7c08a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:f0:9a:47:7d:e6:25:3d:27:b9:2d:0c:9f: 6b:74:15:ec:7b:cf:b4:21:4c:95:6e:be:75:4d:9f: c1:65:22:68:96:84:1d:b6:26:7a:79:f1:0c:53:4c: e0:2b:e4:d5:08:f0:03:c1:0e:a5:85:57:a8:b4:ed: b6:c8:c9:c5:18:6b:29:96:cc:83:a8:41:76:ea:b4: af:da:2c:cd:2e:86:b4:a4:28:09:be:4c:e4:4b:e5: 46:7b:36:dc:20:9b:f4:70:16:6d:36:33:88:82:7c: 7a:6b:ec:e4:8f:33:ca:75:9c:91:ce:61:04:43:72: 49:1e:75:00:73:81:2f:f1:8e:5d:17:fe:fa:96:5c: fb:da:ed:15:70:f1:61:fd:02:06:bc:46:9e:9c:06: 1b:4d:99:eb:7f:43:98:5c:0e:f4:d9:49:f7:92:9c: a7:de:eb:e9:20:1e:ed:09:c1:c1:97:85:f8:e2:19: 9f:50:94:65:07:67:b6:7a:2a:e9:12:b9:bf:ee:02: 06:01:43:bf:9c:9d:15:52:dd:02:ab:f3:f5:51:6d: 99:71:1c:e7:b6:ec:9d:95:ea:fb:f6:e5:03:ad:01: ac:9e:e9:67:1a:3a:d5:28:f7:4b:87:45:23:f2:99: e3:21:50:b8:dc:85:e8:bc:bb:40:51:7e:12:85:73: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:61:77:AE:4F:8A:FA:8D:15:CA:E6:B1:3F:A8:4E:04:55:97:37:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c1:a0:13:cb:ec:32:1e:9d:2a:ec:fe:e9:87:e6:8a:65:c8: f9:46:d6:be:c7:d1:de:c9:9e:cf:16:d5:bd:4f:de:7e:f6:6b: 46:f3:ed:9e:a5:28:34:c3:ed:bf:a0:6b:f4:8d:ab:ca:49:43: 87:43:38:48:ab:55:04:18:3b:31:87:af:d7:9f:fa:87:3c:a7: c6:96:20:d6:f8:c8:9a:91:50:f6:69:04:87:76:7e:ad:e4:de: 23:b8:20:9a:95:01:11:20:2f:04:69:67:a8:a2:99:81:df:a5: 64:cb:7d:4b:0c:18:8d:3e:83:9e:c6:95:b5:62:78:b5:ad:87: a8:3b:27:92:9d:c9:fc:52:ea:90:4b:27:ce:d9:67:1d:72:de: 3a:2b:3d:d3:fd:69:19:23:25:97:9a:14:5c:43:2f:f5:fc:39: f9:c8:63:4c:f3:f6:de:f9:75:cc:0e:8c:f8:9c:3f:6b:02:2a: 35:e8:2c:f9:7b:8a:db:15:44:71:97:6c:4f:26:8d:f0:8d:39: e2:65:13:b7:a6:2f:d6:9b:25:22:be:18:e9:79:0d:45:4f:2c: 6b:07:95:67:64:d1:3a:81:31:94:0e:a2:ce:93:38:8f:bd:3a: 32:e8:0b:86:a2:f3:5b:7d:95:93:65:6b:38:e6:79:3d:26:46: f5:ea:d8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noo5D7QWC2QE2BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk NGQyNjdhNjctY2YyZS00MjQyLTkxMDktODg3NjJjN2MwOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTrwmkd95iU9J7ktDJ9rdBXse8+0IUyVbr51 TZ/BZSJoloQdtiZ6efEMU0zgK+TVCPADwQ6lhVeotO22yMnFGGsplsyDqEF26rSv 2izNLoa0pCgJvkzkS+VGezbcIJv0cBZtNjOIgnx6a+zkjzPKdZyRzmEEQ3JJHnUA c4Ev8Y5dF/76llz72u0VcPFh/QIGvEaenAYbTZnrf0OYXA702Un3kpyn3uvpIB7t CcHBl4X44hmfUJRlB2e2eirpErm/7gIGAUO/nJ0VUt0Cq/P1UW2ZcRzntuydler7 9uUDrQGsnulnGjrVKPdLh0Uj8pnjIVC43IXovLtAUX4ShXMcUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBthd65PivqNFcrmsT+oTgRVlzdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDQ0MzZiNGUtNThmMy0z NWNkLTgxYjgtYjU2ZDM1ZTFlNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDBoBPL7DIenSrs/umH5oplyPlG1r7H0d7Jns8W1b1P3n72a0bz7Z6l KDTD7b+ga/SNq8pJQ4dDOEirVQQYOzGHr9ef+oc8p8aWINb4yJqRUPZpBId2fq3k 3iO4IJqVAREgLwRpZ6iimYHfpWTLfUsMGI0+g57GlbVieLWth6g7J5KdyfxS6pBL J87ZZx1y3jorPdP9aRkjJZeaFFxDL/X8OfnIY0zz9t75dcwOjPicP2sCKjXoLPl7 itsVRHGXbE8mjfCNOeJlE7emL9abJSK+GOl5DUVPLGsHlWdk0TqBMZQOos6TOI+9 OjLoC4ai81t9lZNlazjmeT0mRvXq2Js= -----END CERTIFICATE-----Generated at Mon Oct 12 23:17:16 2026 by rpki-client