$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json) Hash identifier: YrfZDWOzeGV459V0Ws/WrQQByBcsQsM3pgYB2+T760o= Subject key identifier: D4:68:F9:10:E2:51:19:47:EF:27:14:13:1A:B6:98:51:89:EA:DB:BC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D8C2AA02188581611E81C0000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.94.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a0:21:88:58:16:11:e8:1c:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=e8344a61-2989-4a53-b706-fdbc7061aede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:09:fa:49:b4:e3:5f:bb:3e:f2:0f:9e:2d: 1f:7c:29:7a:bc:2c:24:77:1f:25:09:f6:0c:8f:91: fa:6b:dc:9b:84:4d:0c:87:31:56:9f:93:2e:37:8c: 2c:49:75:37:6f:ce:ae:e4:d6:62:35:fd:60:49:ae: be:24:cc:f7:e4:60:6c:66:12:2d:50:15:38:25:57: 4f:5f:9e:a7:42:64:81:19:5e:19:14:cf:9e:2c:97: 5c:9e:70:b2:84:31:85:6c:3e:8c:c0:92:7a:d2:e8: a0:c0:d4:6b:de:a8:f6:e1:af:74:ff:7d:d3:91:f1: a9:d2:87:b7:4e:d7:e2:81:a9:94:98:a8:da:a2:94: 48:3d:5b:b7:17:82:93:2f:53:62:12:08:f0:2d:08: 83:c0:6e:a6:71:8c:5a:76:9b:1a:3c:e7:56:ca:a8: 0d:90:92:d8:76:91:2b:ee:c3:0f:1f:4b:32:19:47: f7:55:4d:5b:18:06:d9:01:10:1e:dd:b1:a1:fb:d5: c5:0b:fb:25:e3:03:84:c3:af:ce:5c:4f:b8:fb:35: 26:ba:11:a4:4b:09:74:14:ac:22:9c:3e:3b:21:e1: 36:4a:98:0c:19:e2:20:e4:b1:ff:55:ec:f6:94:0f: 55:b6:7e:d6:84:ea:0c:9e:d1:9b:f7:74:4b:e9:99: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:68:F9:10:E2:51:19:47:EF:27:14:13:1A:B6:98:51:89:EA:DB:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9a:b5:86:fb:e1:78:19:67:5c:b5:2f:3d:e8:50:a6:70:12: 83:5e:68:2f:f2:88:bc:98:8d:1c:a9:f2:fd:0b:ac:38:fe:74: 36:73:39:d2:f7:ab:ad:84:4c:ed:02:db:84:56:3a:10:46:b2: 05:13:53:17:f0:51:4c:e6:08:49:61:88:17:1c:fa:e2:a5:71: 84:be:b3:e5:f2:d3:78:2c:6d:5f:e7:d9:23:dd:02:94:a4:48: 00:f1:7f:df:d3:0b:d0:d0:5b:58:fc:a3:0f:6a:77:24:1f:20: cf:18:2c:8e:c0:28:17:5d:3e:43:4a:36:22:4d:7f:a0:dd:b6: f5:f9:5d:20:10:19:39:d2:ea:8c:57:78:6b:f2:5b:35:d1:9c: 08:dc:2a:46:68:d7:26:b6:2d:33:65:48:cc:64:81:ea:53:d9: e8:ab:62:ae:db:e8:cb:84:9c:12:e1:20:6d:9f:18:06:94:a4: d1:f7:1d:b7:fc:52:24:ab:41:07:9c:83:6b:c0:7d:ae:22:61: 6c:a8:1b:0b:f9:5e:0c:09:67:65:20:17:9a:9c:ba:e7:c8:23: a5:a6:17:53:18:cc:0e:8b:be:40:83:9d:e1:20:e9:f5:83:d3: 19:4d:1a:31:bb:e6:db:f6:10:e7:24:76:f6:b7:2d:41:06:f4: 29:2c:51:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqAhiFgWEegcAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ZTgzNDRhNjEtMjk4OS00YTUzLWI3MDYtZmRiYzcwNjFhZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ooJ+km041+7PvIPni0ffCl6vCwkdx8lCfYM j5H6a9ybhE0MhzFWn5MuN4wsSXU3b86u5NZiNf1gSa6+JMz35GBsZhItUBU4JVdP X56nQmSBGV4ZFM+eLJdcnnCyhDGFbD6MwJJ60uigwNRr3qj24a90/33TkfGp0oe3 TtfigamUmKjaopRIPVu3F4KTL1NiEgjwLQiDwG6mcYxadpsaPOdWyqgNkJLYdpEr 7sMPH0syGUf3VU1bGAbZARAe3bGh+9XFC/sl4wOEw6/OXE+4+zUmuhGkSwl0FKwi nD47IeE2SpgMGeIg5LH/Vez2lA9Vtn7WhOoMntGb93RL6Zn0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRo+RDiURlH7ycUExq2mFGJ6tu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWatYb74XgZZ1y1Lz3oUKZwEoNeaC/yiLyYjRyp8v0LrDj+dDZzOdL3 q62ETO0C24RWOhBGsgUTUxfwUUzmCElhiBcc+uKlcYS+s+Xy03gsbV/n2SPdApSk SADxf9/TC9DQW1j8ow9qdyQfIM8YLI7AKBddPkNKNiJNf6DdtvX5XSAQGTnS6oxX eGvyWzXRnAjcKkZo1ya2LTNlSMxkgepT2eirYq7b6MuEnBLhIG2fGAaUpNH3Hbf8 UiSrQQecg2vAfa4iYWyoGwv5XgwJZ2UgF5qcuufII6WmF1MYzA6LvkCDneEg6fWD 0xlNGjG75tv2EOckdva3LUEG9CksURU= -----END CERTIFICATE-----Generated at Sat Apr 18 22:27:02 2026 by rpki-client