$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76345c57-38da-350e-a0b5-ea284330d56d.roa File: 76345c57-38da-350e-a0b5-ea284330d56d.roa (raw, json) Hash identifier: Em5pyyVrgk2F6FtemtvjK2Y+b+No0OYq9cFgQe8RSa4= Subject key identifier: 53:80:A0:EF:8D:23:4C:2C:5F:20:02:FA:8A:78:FF:B5:CD:B5:AF:30 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F497642BA695C1366A68F5F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76345c57-38da-350e-a0b5-ea284330d56d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.94.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:42:ba:69:5c:13:66:a6:8f:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c2a4a7eb-979c-4b48-a7cf-5a1a13f7f15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:99:d9:2e:51:d9:65:3b:ef:e6:31:1a:93: 1b:9d:17:69:ca:9a:ab:4e:ed:55:58:3f:b4:60:09: d7:11:f9:34:ad:b7:32:cf:1a:c4:c8:8c:09:89:3a: 98:b1:32:79:d3:d9:26:84:6e:ed:f5:27:65:68:77: b9:cc:7a:ce:77:56:4e:eb:28:83:c7:51:4f:00:1c: c9:59:fc:ff:a0:44:91:6c:56:40:76:70:6d:52:dc: b9:09:32:ed:fb:6c:4c:db:34:be:11:af:55:6c:18: 7f:9c:77:5c:e1:1b:ec:fa:8f:88:5c:64:59:0d:9e: df:e1:b6:b0:26:bb:90:9a:fd:be:ae:12:10:42:04: 5a:74:96:e8:9a:d5:74:2b:ff:02:a9:b4:ce:9b:b3: 8a:1c:e5:3c:e3:01:bd:69:b2:98:6d:aa:59:5c:3f: b2:ad:4a:be:3a:1b:9a:75:0a:e8:98:a9:ac:56:1a: dc:8b:fb:05:c9:ba:16:d6:90:fc:ed:df:fb:1c:3b: 4b:22:20:5e:a1:b3:b2:7e:c9:2e:ac:a2:21:33:81: 88:fb:81:e9:e8:38:0b:12:d2:da:45:a9:75:8d:ae: 05:63:f1:e9:9d:be:0f:f1:8d:23:d2:2f:d8:09:5d: 48:97:f1:bb:aa:43:76:20:10:ae:a7:2e:8e:6e:b9: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:80:A0:EF:8D:23:4C:2C:5F:20:02:FA:8A:78:FF:B5:CD:B5:AF:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76345c57-38da-350e-a0b5-ea284330d56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:02:5c:9c:3a:c1:66:61:0e:14:57:86:61:4a:2b:31:a3:c3: 3c:94:d8:8d:00:b8:6c:00:34:a8:e5:fc:81:b3:43:6e:a5:c9: b9:be:56:80:36:32:eb:fc:f1:b0:55:6b:6e:ad:93:91:22:2b: a1:8d:53:d3:57:e4:a3:fc:a2:b5:fa:56:be:60:13:b2:65:9d: f2:90:19:cb:03:25:60:92:cb:d3:7f:a4:61:3f:88:db:ca:7c: bd:32:3f:d0:d0:73:d3:cb:51:83:05:60:65:ab:4f:79:0b:d4: 35:92:22:04:92:c3:3e:90:90:c1:c4:ef:2f:7d:20:04:1b:f3: 3d:b4:a7:45:31:b8:b9:31:ac:41:99:7b:60:08:eb:21:c4:cb: 94:6c:66:9a:cf:1a:7e:15:3f:b7:32:e3:b9:1d:6e:ab:d9:77: fe:08:47:68:c1:bd:17:3d:59:fb:05:5d:f6:8b:18:05:7b:e0: d7:69:da:15:32:10:09:fb:e8:81:c1:17:2e:79:d2:81:7d:78: 7a:64:bd:77:ba:fc:f7:b3:d8:7b:f0:c4:07:b9:50:38:ea:5c: 77:19:b3:4d:b3:42:45:32:30:54:7a:21:c3:bf:b8:50:99:4a: 57:3f:47:e4:ac:90:51:f7:63:a0:33:92:b8:cb:43:d0:e5:83: 91:11:66:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkK6aVwTZqaPX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzJhNGE3ZWItOTc5Yy00YjQ4LWE3Y2YtNWExYTEzZjdmMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3mZ2S5R2WU77+YxGpMbnRdpypqrTu1VWD+0 YAnXEfk0rbcyzxrEyIwJiTqYsTJ509kmhG7t9SdlaHe5zHrOd1ZO6yiDx1FPABzJ Wfz/oESRbFZAdnBtUty5CTLt+2xM2zS+Ea9VbBh/nHdc4Rvs+o+IXGRZDZ7f4baw JruQmv2+rhIQQgRadJbomtV0K/8CqbTOm7OKHOU84wG9abKYbapZXD+yrUq+Ohua dQromKmsVhrci/sFyboW1pD87d/7HDtLIiBeobOyfskurKIhM4GI+4Hp6DgLEtLa Ral1ja4FY/Hpnb4P8Y0j0i/YCV1Il/G7qkN2IBCupy6Obrkt9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOAoO+NI0wsXyAC+op4/7XNta8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzYzNDVjNTctMzhkYS0z NTBlLWEwYjUtZWEyODQzMzBkNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUCXJw6wWZhDhRXhmFKKzGjwzyU2I0AuGwANKjl/IGzQ26lybm+VoA2 Muv88bBVa26tk5EiK6GNU9NX5KP8orX6Vr5gE7JlnfKQGcsDJWCSy9N/pGE/iNvK fL0yP9DQc9PLUYMFYGWrT3kL1DWSIgSSwz6QkMHE7y99IAQb8z20p0UxuLkxrEGZ e2AI6yHEy5RsZprPGn4VP7cy47kdbqvZd/4IR2jBvRc9WfsFXfaLGAV74Ndp2hUy EAn76IHBFy550oF9eHpkvXe6/Pez2HvwxAe5UDjqXHcZs02zQkUyMFR6IcO/uFCZ Slc/R+SskFH3Y6AzkrjLQ9Dlg5ERZtU= -----END CERTIFICATE-----Generated at Fri Sep 25 17:03:14 2026 by rpki-client