$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41e45331-6385-3e67-9561-288cf7549230.roa File: 41e45331-6385-3e67-9561-288cf7549230.roa (raw, json) Hash identifier: +DC14dzVF6xh28M1ec4rYuA0cZ7ACOwApvlg890qMEM= Subject key identifier: C1:11:2F:43:CD:74:ED:30:56:BC:5B:CB:23:79:C0:35:C7:A2:BC:AD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4988D98CBC05606FEB138C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41e45331-6385-3e67-9561-288cf7549230.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 137409 IP address blocks: 172.94.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:d9:8c:bc:05:60:6f:eb:13:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a23e4b5-c1ed-49cc-9f6f-8c339fed73a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:8a:f9:a6:6f:e4:13:c3:ad:2b:ef:55:c4: 24:bb:7c:0f:66:0e:7b:6f:12:63:dd:fd:55:a1:c9: 95:69:c0:d6:83:15:02:c9:9b:46:0e:03:6f:96:57: 31:8b:02:c1:2a:2c:1b:35:2a:d4:06:5b:59:25:57: 84:ee:73:40:b1:f5:0e:40:f3:d8:a8:51:4d:ea:24: 42:fd:cb:06:b9:28:73:4a:81:6a:6f:0d:cb:b3:37: 67:fe:ea:dd:be:17:08:69:52:98:36:d8:be:a0:bc: 72:d6:c2:c6:1b:06:1f:ad:2a:71:e6:c5:53:7b:80: 57:a2:38:16:5e:0c:69:fd:10:cb:63:74:a1:d7:df: ff:67:85:34:ee:70:42:73:11:a5:f8:7f:cc:5c:38: 78:ee:db:8a:ff:4b:fb:f7:7a:d2:ee:78:2a:41:1d: a8:10:91:3b:90:2e:c1:38:80:67:58:22:c5:21:14: 54:99:3d:69:82:c1:ac:31:f0:1e:e0:5d:90:c8:5d: 0b:cf:08:41:dc:c5:ab:f2:2e:eb:91:64:9c:ed:c2: 9d:21:47:3e:2b:79:11:71:c2:66:e5:62:71:d6:93: 7b:1f:ab:a4:cc:3e:2c:d0:ec:ee:3b:f3:3c:a9:b4: 00:9a:0c:9e:7d:8f:d1:f7:1f:2d:2c:26:1f:7e:55: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:11:2F:43:CD:74:ED:30:56:BC:5B:CB:23:79:C0:35:C7:A2:BC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41e45331-6385-3e67-9561-288cf7549230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4a:fc:f3:2f:c6:55:01:0c:02:35:80:c9:e4:a9:9e:0c:c1: b4:7a:be:6e:67:66:12:e2:45:43:e6:5c:fe:32:41:8f:c3:ee: 32:3c:e0:76:9c:31:9f:77:9b:a4:0a:c1:db:17:5d:fb:f5:10: 6f:01:a9:1e:b6:5c:74:cc:a6:69:f3:f9:e1:e5:21:3d:20:df: 8e:27:9c:6d:bb:5c:2a:4c:ce:86:6a:0a:80:4d:1e:5d:c9:fe: 2d:80:a7:12:c3:09:a4:f2:17:c4:08:af:28:3d:35:16:66:15: 13:c4:26:f4:27:0a:a7:fa:2d:8e:b1:da:75:76:57:fa:6c:09: 9d:d0:11:47:0c:ec:8a:a6:bc:bf:d7:25:de:8b:6f:59:75:58: 8f:91:5f:2e:61:0f:62:d5:95:36:5b:67:93:0c:ba:a6:ae:84: 6a:b8:8e:b8:72:aa:a2:fe:9f:f2:d0:79:4b:4f:50:a6:fd:5c: 3a:7a:a1:c0:82:44:c9:0e:8c:39:33:a3:11:f1:cf:fa:1a:98: cf:f9:0c:75:f1:fd:d9:e4:d4:f2:5c:67:f6:aa:d1:57:5f:fb: 2d:6f:c1:70:6c:cb:04:9f:4c:aa:fc:3e:c0:1c:8f:7f:e5:9e: ea:b1:a3:e5:c5:7f:d0:e6:2f:e5:af:ab:f7:95:a5:56:09:24: 49:4a:3d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiNmMvAVgb+sTjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGEyM2U0YjUtYzFlZC00OWNjLTlmNmYtOGMzMzlmZWQ3M2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW2K+aZv5BPDrSvvVcQku3wPZg57bxJj3f1V ocmVacDWgxUCyZtGDgNvllcxiwLBKiwbNSrUBltZJVeE7nNAsfUOQPPYqFFN6iRC /csGuShzSoFqbw3Lszdn/urdvhcIaVKYNti+oLxy1sLGGwYfrSpx5sVTe4BXojgW Xgxp/RDLY3Sh19//Z4U07nBCcxGl+H/MXDh47tuK/0v793rS7ngqQR2oEJE7kC7B OIBnWCLFIRRUmT1pgsGsMfAe4F2QyF0LzwhB3MWr8i7rkWSc7cKdIUc+K3kRccJm 5WJx1pN7H6ukzD4s0OzuO/M8qbQAmgyefY/R9x8tLCYfflUeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMERL0PNdO0wVrxbyyN5wDXHorytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDFlNDUzMzEtNjM4NS0z ZTY3LTk1NjEtMjg4Y2Y3NTQ5MjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNK/PMvxlUBDAI1gMnkqZ4MwbR6vm5nZhLiRUPmXP4yQY/D7jI84Hac MZ93m6QKwdsXXfv1EG8BqR62XHTMpmnz+eHlIT0g344nnG27XCpMzoZqCoBNHl3J /i2ApxLDCaTyF8QIryg9NRZmFRPEJvQnCqf6LY6x2nV2V/psCZ3QEUcM7IqmvL/X Jd6Lb1l1WI+RXy5hD2LVlTZbZ5MMuqauhGq4jrhyqqL+n/LQeUtPUKb9XDp6ocCC RMkOjDkzoxHxz/oamM/5DHXx/dnk1PJcZ/aq0Vdf+y1vwXBsywSfTKr8PsAcj3/l nuqxo+XFf9DmL+Wvq/eVpVYJJElKPV0= -----END CERTIFICATE-----Generated at Sun Sep 27 18:39:46 2026 by rpki-client