$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa File: d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa (raw, json) Hash identifier: zp5L3qbr4bSynzLf2CRxkOi+hoykmCz3uwzAiKQ1ETQ= Subject key identifier: CE:AF:EA:0E:64:8F:4A:D9:6A:F8:07:14:1F:CF:EB:CA:B5:60:09:9F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EAB0E1B2C5321FAE65E2FC300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa Signing time: Thu 30 Jul 2026 07:20:10 +0000 ROA not before: Thu 30 Jul 2026 07:20:10 +0000 ROA not after: Wed 28 Oct 2026 07:20:10 +0000 asID: 132372 IP address blocks: 172.94.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:0e:1b:2c:53:21:fa:e6:5e:2f:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 30 07:20:10 2026 GMT Not After : Oct 28 07:20:10 2026 GMT Subject: CN=02a861e0-6863-43ef-8d28-31724178a575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:5d:da:bb:c7:b7:b3:8f:d2:6a:47:be:76: ec:93:ee:d0:99:23:89:ec:54:3d:fe:b9:66:6b:28: 9b:57:97:f2:ab:f9:34:96:f2:4a:35:e9:bc:77:10: ea:64:8b:29:56:89:73:6f:1f:80:db:f1:8d:29:10: 89:d2:5d:49:68:68:30:ea:72:12:cd:b8:dc:b5:aa: ba:83:c4:e5:f1:2d:44:16:78:5b:34:ec:8b:b4:ab: d8:61:80:b2:27:a3:36:61:ff:ad:7e:0f:83:39:aa: fa:8b:db:8a:c5:77:43:0e:7a:9e:15:78:ee:51:2c: 0d:45:19:6b:ff:8f:25:fc:d0:a7:a7:19:7a:b4:21: 2d:ab:36:8d:9c:4d:e9:73:e1:18:b6:39:36:ff:52: 48:fa:0b:bb:c2:61:aa:b5:24:21:61:4c:b3:ae:28: a6:5f:a0:df:5c:1e:6a:2e:76:d7:69:23:e0:ca:c5: 79:21:79:63:96:2f:8b:f0:76:31:69:51:85:64:22: f1:d7:25:9a:e6:b3:cd:b3:85:4d:68:98:86:0b:04: ba:5d:37:0c:bc:a4:1b:76:47:cd:2f:48:f3:ad:24: 2a:bc:fd:9a:da:30:40:41:03:15:09:94:3b:a0:e7: d9:36:de:a5:4e:c6:00:08:85:f8:54:09:fa:bd:4b: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AF:EA:0E:64:8F:4A:D9:6A:F8:07:14:1F:CF:EB:CA:B5:60:09:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d4436b4e-58f3-35cd-81b8-b56d35e1e687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5e:58:f9:71:be:33:e9:ab:7d:2d:09:33:e8:24:a9:4e:f3: 81:5c:c4:5e:f7:89:37:5a:0d:95:d9:17:67:d6:21:58:8a:ba: 1e:82:19:94:26:44:81:42:85:bf:a6:86:32:23:a6:8f:bb:d4: 04:5b:34:87:a3:3d:68:83:7e:bb:b6:78:da:66:4c:bc:95:68: d0:63:42:1b:d3:14:6f:54:22:92:2a:7a:af:26:40:cb:7f:24: 85:b8:5c:ec:da:39:64:a6:ba:44:81:31:0a:25:03:4d:54:40: 6a:4d:6c:f4:a2:75:6a:72:b9:40:53:17:d0:0b:1c:2e:2e:5d: f6:a9:51:90:10:b9:1f:04:53:ad:bc:d1:16:fa:bc:92:4e:20: 0a:d1:2e:94:74:76:bd:53:18:bd:34:d9:c6:4d:2e:f7:17:02: 39:32:80:ea:0c:80:14:d2:12:54:14:18:22:2f:e5:df:88:d9: e1:cb:54:a9:d5:10:77:37:78:25:29:e7:d9:5c:b7:24:5b:db: 3f:4c:b6:32:6b:09:3a:84:6e:24:4f:31:aa:09:31:fb:1e:92: 29:ee:7d:cc:a2:25:61:ac:d7:29:f2:ff:09:85:86:b5:64:b0: ea:74:a3:82:9f:7c:e5:a9:73:e3:2f:7a:68:f8:3e:5d:6a:3d: b0:dd:49:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rDhssUyH65l4vwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDczMDA3MjAxMFoXDTI2MTAyODA3MjAxMFowLzEtMCsGA1UEAxMk MDJhODYxZTAtNjg2My00M2VmLThkMjgtMzE3MjQxNzhhNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyVd2rvHt7OP0mpHvnbsk+7QmSOJ7FQ9/rlm ayibV5fyq/k0lvJKNem8dxDqZIspVolzbx+A2/GNKRCJ0l1JaGgw6nISzbjctaq6 g8Tl8S1EFnhbNOyLtKvYYYCyJ6M2Yf+tfg+DOar6i9uKxXdDDnqeFXjuUSwNRRlr /48l/NCnpxl6tCEtqzaNnE3pc+EYtjk2/1JI+gu7wmGqtSQhYUyzriimX6DfXB5q LnbXaSPgysV5IXljli+L8HYxaVGFZCLx1yWa5rPNs4VNaJiGCwS6XTcMvKQbdkfN L0jzrSQqvP2a2jBAQQMVCZQ7oOfZNt6lTsYACIX4VAn6vUvo3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6v6g5kj0rZavgHFB/P68q1YAmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDQ0MzZiNGUtNThmMy0z NWNkLTgxYjgtYjU2ZDM1ZTFlNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIheWPlxvjPpq30tCTPoJKlO84FcxF73iTdaDZXZF2fWIViKuh6CGZQm RIFChb+mhjIjpo+71ARbNIejPWiDfru2eNpmTLyVaNBjQhvTFG9UIpIqeq8mQMt/ JIW4XOzaOWSmukSBMQolA01UQGpNbPSidWpyuUBTF9ALHC4uXfapUZAQuR8EU628 0Rb6vJJOIArRLpR0dr1TGL002cZNLvcXAjkygOoMgBTSElQUGCIv5d+I2eHLVKnV EHc3eCUp59lctyRb2z9MtjJrCTqEbiRPMaoJMfsekinufcyiJWGs1yny/wmFhrVk sOp0o4KffOWpc+Mvemj4Pl1qPbDdSQY= -----END CERTIFICATE-----Generated at Mon Aug 24 08:23:17 2026 by rpki-client