$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: SrS0tipwYmUVX/26FeSnxcIPW3krwkQM4qxXMY8v1UA= Subject key identifier: C8:CA:28:23:EB:C7:15:4A:97:D5:1A:BE:4C:A1:8C:BE:41:5E:EA:AE Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584F90A3029DCECBFB63A883B800 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:02:9d:ce:cb:fb:63:a8:83:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=5f00aa84-ecdc-4a8d-9ede-cd18cde582e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:67:4e:8d:4a:17:29:70:98:10:9c:4c:c6: 2a:96:e7:ec:e5:84:3f:80:9d:ba:e5:16:f5:99:70: c2:6a:57:ac:7e:ed:6a:4d:8f:57:26:ab:c0:72:0d: a6:66:d6:cb:6c:5e:bb:6e:54:8c:64:e1:df:7d:b2: 0e:db:44:3f:1b:44:01:40:a7:91:26:c8:a2:3d:22: 98:fc:da:fa:40:42:3d:12:df:ed:09:27:c0:06:a6: 78:31:3c:91:4d:83:1c:0c:c4:78:75:bb:39:c2:6f: 34:41:ae:3f:09:69:29:1d:1d:a2:75:68:a5:10:5b: 87:56:34:77:d4:e0:5e:8c:bc:ae:70:57:12:ed:1f: 23:a8:39:1a:8b:dc:e6:9f:e2:78:71:1a:64:56:6c: 8a:bd:08:aa:0d:af:4a:89:f3:8c:1b:a7:10:7c:dc: e1:ac:e0:5d:bc:ab:55:ea:d1:61:d7:30:dd:e4:26: 64:85:07:bc:0d:2c:fc:6c:85:a5:1f:79:6c:78:9a: 70:ae:85:41:36:2b:e5:0c:79:a6:d0:1e:34:7e:00: 4b:bc:6c:f9:72:99:fc:0b:6d:1e:4b:e6:81:7c:b8: 74:ee:c2:8e:89:32:35:cb:21:c3:84:d7:95:c3:51: 14:cd:f7:36:ec:ed:ae:ac:a2:b3:08:ec:27:fe:5e: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:28:23:EB:C7:15:4A:97:D5:1A:BE:4C:A1:8C:BE:41:5E:EA:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:60:a9:14:a2:b0:e3:0e:ac:1d:cf:4f:05:50:92:e9:8f:8f: c5:f8:bd:6f:cc:54:ea:b6:a9:35:6c:21:00:27:a0:c4:96:33: 9d:fe:33:02:08:dd:a6:a6:81:7f:fd:2d:fb:98:73:f2:19:0c: ff:33:fd:96:44:9e:d2:2f:c6:39:c7:fb:06:0d:2c:66:2e:a9: c2:59:32:7f:1f:d0:f3:9f:c1:c6:d9:f3:91:92:b8:6e:4e:9e: b5:45:41:9f:c8:94:58:07:49:79:af:f1:74:30:97:8f:a7:fa: 7e:12:00:af:ea:d2:2a:f6:79:32:08:06:05:26:fd:fd:79:bf: 36:97:76:3c:53:d3:b7:f4:aa:1f:72:be:3c:58:d9:f7:fd:ae: e7:e2:85:f1:ed:d2:16:68:2b:67:b4:06:d9:6c:fe:b6:63:39: 0c:c5:68:e4:e1:45:a2:11:be:eb:7f:90:bc:66:a0:99:f0:57: ad:50:37:dc:4d:ec:35:bd:fc:bc:19:c1:cf:52:46:4f:89:40: 0f:3c:75:9a:95:eb:61:3d:8e:54:6c:59:c7:b9:f6:9f:41:c1: 88:0e:cf:0d:46:d1:1a:81:a7:cc:c8:bb:95:90:5f:17:0a:77: 85:a4:16:45:c1:e9:ab:52:6c:f8:57:a9:d1:66:83:cd:7b:29: d6:1a:f9:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowKdzsv7Y6iDuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NWYwMGFhODQtZWNkYy00YThkLTllZGUtY2QxOGNkZTU4MmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq11nTo1KFylwmBCcTMYqlufs5YQ/gJ265Rb1 mXDCalesfu1qTY9XJqvAcg2mZtbLbF67blSMZOHffbIO20Q/G0QBQKeRJsiiPSKY /Nr6QEI9Et/tCSfABqZ4MTyRTYMcDMR4dbs5wm80Qa4/CWkpHR2idWilEFuHVjR3 1OBejLyucFcS7R8jqDkai9zmn+J4cRpkVmyKvQiqDa9KifOMG6cQfNzhrOBdvKtV 6tFh1zDd5CZkhQe8DSz8bIWlH3lseJpwroVBNivlDHmm0B40fgBLvGz5cpn8C20e S+aBfLh07sKOiTI1yyHDhNeVw1EUzfc27O2urKKzCOwn/l5fnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjKKCPrxxVKl9UavkyhjL5BXuquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1gqRSisOMOrB3PTwVQkumPj8X4vW/MVOq2qTVsIQAnoMSWM53+MwII 3aamgX/9LfuYc/IZDP8z/ZZEntIvxjnH+wYNLGYuqcJZMn8f0POfwcbZ85GSuG5O nrVFQZ/IlFgHSXmv8XQwl4+n+n4SAK/q0ir2eTIIBgUm/f15vzaXdjxT07f0qh9y vjxY2ff9rufihfHt0hZoK2e0Btls/rZjOQzFaOThRaIRvut/kLxmoJnwV61QN9xN 7DW9/LwZwc9SRk+JQA88dZqV62E9jlRsWce59p9BwYgOzw1G0RqBp8zIu5WQXxcK d4WkFkXB6atSbPhXqdFmg817KdYa+T8= -----END CERTIFICATE-----Generated at Tue Oct 27 22:56:26 2026 by rpki-client