$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa File: bd3d3554-3b8e-3804-9f34-e572ee29034a.roa (raw, json) Hash identifier: 3FijWZmeFPZ0c/9C1eME6rCrz6CPE9yBkQ+vpTu8PQc= Subject key identifier: 96:9A:B7:B4:00:3C:71:FB:CD:0F:FD:85:8C:88:B2:AF:AA:BD:F5:74 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584FCCC697426EB8B7A17408F080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 9009 IP address blocks: 172.94.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:97:42:6e:b8:b7:a1:74:08:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=c1e82832-c79e-4a2f-ba69-c53bc7a32026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:a7:a8:eb:f8:16:d4:46:2a:5d:97:71:f4: c7:5a:16:ce:f7:ae:4e:87:1d:cb:9e:5e:2a:53:95: 21:78:4c:d2:f8:65:c7:26:7d:f5:15:47:aa:e8:10: 1a:29:9f:8a:63:a2:01:d4:08:2e:f9:08:40:41:f1: f2:0a:32:e6:5a:07:b5:d1:33:83:e3:6a:ec:04:ad: ec:0c:47:ca:c8:4e:ee:71:47:44:75:d8:6d:ce:20: bd:5c:1b:05:c0:cb:16:32:81:fa:0e:03:4c:32:f1: 79:16:18:04:2c:98:74:90:71:f9:22:82:2b:a2:93: ba:e6:af:92:ae:4c:7c:23:4a:95:06:30:58:59:68: a9:97:99:20:c4:9e:4b:aa:74:bd:40:93:74:0d:01: 32:1b:7e:02:e5:03:e0:99:db:3b:23:7a:fa:51:f1: 9c:78:5e:24:58:9c:c5:7d:3c:7b:8f:21:41:8f:71: fe:3a:d7:bf:33:2e:a3:c8:14:bc:e0:85:0c:b7:b0: 82:0a:cf:0d:6b:7b:24:1b:85:89:e1:d1:20:59:c2: 31:50:e4:44:1d:0f:d6:30:1a:cc:ba:10:e3:3d:56: e1:6b:e5:38:21:60:dd:3b:7a:11:e6:5c:d4:7f:0b: 12:fb:44:d1:9b:c2:f4:af:5d:8d:51:be:10:db:cc: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:B7:B4:00:3C:71:FB:CD:0F:FD:85:8C:88:B2:AF:AA:BD:F5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a0:d7:da:1e:a2:de:63:be:73:f9:1d:db:27:c5:e4:83:e2: fc:b2:70:58:e2:3f:fb:1a:61:b9:43:6a:f9:3a:a4:ce:4e:75: c6:c7:9c:c2:c4:bf:74:a0:ef:39:56:d0:da:05:6c:2d:6a:b6: 62:e1:19:a7:37:4c:b7:a7:5b:3b:9c:d5:db:3d:a8:91:66:f8: 65:0e:93:8e:03:12:7c:0d:9d:63:39:18:c5:7e:13:5c:f1:e4: 25:c5:cc:69:c0:ef:48:4b:05:bc:3b:80:04:19:03:d0:07:4c: 81:ec:04:c7:bf:a5:5e:59:0b:50:04:8c:b7:70:bb:fd:fd:5e: 9e:cf:db:9d:38:3e:77:78:90:d6:7d:1a:9c:df:6f:03:2e:4a: c4:1d:ad:37:bd:7a:8b:75:60:68:9d:e2:13:86:68:fe:1b:4a: ab:bd:a2:f5:08:c9:1a:dd:66:15:30:c0:e1:9a:47:b3:90:23: d3:6f:f3:75:ec:ac:41:a4:ec:27:5a:43:08:92:1f:1d:f0:2e: 95:96:2b:09:3b:98:c2:7e:a5:7d:1e:f7:fa:41:d7:e5:ae:80: a3:54:12:a7:37:d1:4c:37:58:e8:af:bd:f4:51:95:9e:33:fc: f5:ac:03:6e:2b:e8:6b:1c:e6:af:87:67:e3:30:05:d4:ce:10: 73:48:6d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/MxpdCbri3oXQI8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YzFlODI4MzItYzc5ZS00YTJmLWJhNjktYzUzYmM3YTMyMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiSnqOv4FtRGKl2XcfTHWhbO965Ohx3Lnl4q U5UheEzS+GXHJn31FUeq6BAaKZ+KY6IB1Agu+QhAQfHyCjLmWge10TOD42rsBK3s DEfKyE7ucUdEddhtziC9XBsFwMsWMoH6DgNMMvF5FhgELJh0kHH5IoIropO65q+S rkx8I0qVBjBYWWipl5kgxJ5LqnS9QJN0DQEyG34C5QPgmds7I3r6UfGceF4kWJzF fTx7jyFBj3H+Ote/My6jyBS84IUMt7CCCs8Na3skG4WJ4dEgWcIxUOREHQ/WMBrM uhDjPVbha+U4IWDdO3oR5lzUfwsS+0TRm8L0r12NUb4Q28zVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaat7QAPHH7zQ/9hYyIsq+qvfV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmQzZDM1NTQtM2I4ZS0z ODA0LTlmMzQtZTU3MmVlMjkwMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6g19oeot5jvnP5HdsnxeSD4vyycFjiP/saYblDavk6pM5OdcbHnMLE v3Sg7zlW0NoFbC1qtmLhGac3TLenWzuc1ds9qJFm+GUOk44DEnwNnWM5GMV+E1zx 5CXFzGnA70hLBbw7gAQZA9AHTIHsBMe/pV5ZC1AEjLdwu/39Xp7P2504Pnd4kNZ9 GpzfbwMuSsQdrTe9eot1YGid4hOGaP4bSqu9ovUIyRrdZhUwwOGaR7OQI9Nv83Xs rEGk7CdaQwiSHx3wLpWWKwk7mMJ+pX0e9/pB1+WugKNUEqc30Uw3WOivvfRRlZ4z /PWsA24r6Gsc5q+HZ+MwBdTOEHNIbdg= -----END CERTIFICATE-----Generated at Sun Nov 15 21:48:37 2026 by rpki-client