$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa File: c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa (raw, json) Hash identifier: ax/Mv/7BGK7r14OysqfsN35FsKIrhCQRHHbzLprw5k0= Subject key identifier: D3:E0:BF:55:16:D4:60:F2:31:6A:70:2E:D0:91:5B:F3:F5:FE:54:5E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584FAC8DDBC3235317A570CB8D30 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa Signing time: Fri 30 Oct 2026 13:00:12 +0000 ROA not before: Fri 30 Oct 2026 13:00:12 +0000 ROA not after: Thu 28 Jan 2027 14:00:12 +0000 asID: 55154 IP address blocks: 172.94.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:8d:db:c3:23:53:17:a5:70:cb:8d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 30 13:00:12 2026 GMT Not After : Jan 28 14:00:12 2027 GMT Subject: CN=d751f3bc-250c-4849-bb94-70932efa96a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:41:fe:3f:0f:52:ae:aa:6a:54:57:a6:8e: b6:b4:4b:e7:d6:3e:6b:b5:9c:6f:6e:f8:32:47:7f: e4:42:e3:7f:f5:79:78:3b:77:b0:5c:92:7e:cc:70: f1:c4:39:1b:b4:93:39:fd:5d:1b:52:45:5f:11:ad: e3:a0:f0:78:d1:db:dd:19:ad:80:b4:92:ea:d4:a2: 95:ab:2e:32:5b:07:18:d8:fa:4e:e0:d9:65:31:8a: 4d:d8:6c:6e:ac:85:88:80:db:44:24:2e:41:95:6b: 59:aa:e0:27:97:31:65:d2:f1:62:8f:85:7e:1d:70: fb:54:7c:a6:01:14:07:d7:b8:54:cb:a2:a1:13:57: 01:b2:2d:a5:ea:b1:be:58:cd:2f:2b:5b:fa:ac:b5: b6:04:b8:0d:7c:1d:8f:24:4b:7b:03:ce:bb:03:b3: 85:b3:c4:32:9b:6e:9f:d6:37:78:48:21:42:0d:cc: 9e:c8:3a:ef:6c:b2:12:4a:c2:cf:fe:d5:50:ed:eb: 34:71:e3:aa:4a:96:5f:87:b4:49:f0:c7:fb:0c:bf: 61:c9:7c:39:03:3f:4f:d9:84:95:00:cb:8c:84:a2: 22:e6:c2:2d:35:da:67:06:ba:b2:ed:07:20:b2:0e: c1:d2:8b:5d:c2:6c:66:45:65:ad:0c:2e:88:9d:20: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E0:BF:55:16:D4:60:F2:31:6A:70:2E:D0:91:5B:F3:F5:FE:54:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:64:e3:79:d3:eb:a7:8c:bc:7f:68:85:12:b7:8d:44:2b:d9: 17:d0:f2:12:07:2b:13:2c:f0:bc:ae:52:96:d8:77:f9:ba:d8: 72:d9:64:94:ae:25:97:11:70:5d:f3:35:b6:70:cb:4a:bd:ad: 64:55:0a:60:71:79:c0:7a:6b:25:eb:a8:32:7e:4a:be:71:2b: 79:a7:7e:63:a2:0c:38:21:ed:18:a3:0c:59:9f:02:7c:e8:e6: 98:8d:38:e1:ae:69:cc:22:62:41:f4:f7:7f:3e:d8:b6:c8:f0: 15:2d:fb:d7:66:0b:e9:34:d2:a7:80:6c:03:61:19:0a:fa:be: 32:07:8d:04:20:0e:b8:f8:6e:6b:e6:c9:35:88:39:ec:bb:b3: dd:dd:d4:9b:3d:76:10:f0:bf:61:3e:78:6c:a8:a0:91:6e:3c: 0f:98:6a:a2:72:dc:69:8f:03:0d:0f:7e:64:36:ac:f0:71:81: 5f:4d:03:07:9b:2f:d1:0f:1f:61:30:c0:b7:f8:c4:6b:9b:44: f7:93:09:f7:69:77:7c:20:b1:de:79:44:4d:dc:4b:6e:a6:ff: c8:5a:26:fa:bd:11:67:17:04:b5:fa:aa:33:c5:9b:35:3e:dd: 02:8f:f3:c3:3c:e6:35:eb:8c:d4:96:45:48:3f:dc:c7:39:3c: 71:11:00:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+sjdvDI1MXpXDLjTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAzMDEzMDAxMloXDTI3MDEyODE0MDAxMlowLzEtMCsGA1UEAxMk ZDc1MWYzYmMtMjUwYy00ODQ5LWJiOTQtNzA5MzJlZmE5NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6hB/j8PUq6qalRXpo62tEvn1j5rtZxvbvgy R3/kQuN/9Xl4O3ewXJJ+zHDxxDkbtJM5/V0bUkVfEa3joPB40dvdGa2AtJLq1KKV qy4yWwcY2PpO4NllMYpN2GxurIWIgNtEJC5BlWtZquAnlzFl0vFij4V+HXD7VHym ARQH17hUy6KhE1cBsi2l6rG+WM0vK1v6rLW2BLgNfB2PJEt7A867A7OFs8Qym26f 1jd4SCFCDcyeyDrvbLISSsLP/tVQ7es0ceOqSpZfh7RJ8Mf7DL9hyXw5Az9P2YSV AMuMhKIi5sItNdpnBrqy7Qcgsg7B0otdwmxmRWWtDC6InSCYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPgv1UW1GDyMWpwLtCRW/P1/lReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzYzMWIyYmYtNWQzMi0z ZjM3LTkzNjQtYjViNzJmOTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBk43nT66eMvH9ohRK3jUQr2RfQ8hIHKxMs8LyuUpbYd/m62HLZZJSu JZcRcF3zNbZwy0q9rWRVCmBxecB6ayXrqDJ+Sr5xK3mnfmOiDDgh7RijDFmfAnzo 5piNOOGuacwiYkH0938+2LbI8BUt+9dmC+k00qeAbANhGQr6vjIHjQQgDrj4bmvm yTWIOey7s93d1Js9dhDwv2E+eGyooJFuPA+YaqJy3GmPAw0PfmQ2rPBxgV9NAweb L9EPH2EwwLf4xGubRPeTCfdpd3wgsd55RE3cS26m/8haJvq9EWcXBLX6qjPFmzU+ 3QKP88M85jXrjNSWRUg/3Mc5PHERALk= -----END CERTIFICATE-----Generated at Sun Nov 15 21:17:53 2026 by rpki-client