$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d89fed9-d903-303d-8c0e-84551f7ce740.roa File: 0d89fed9-d903-303d-8c0e-84551f7ce740.roa (raw, json) Hash identifier: lM9iJPUlyZc7fPGtyGnMC+Bxqd3+KhoDvIhh5vJLsM4= Subject key identifier: 36:BE:B9:6B:D8:EC:10:22:8A:E6:07:31:F9:47:CA:3B:3F:CF:4C:AB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E06BACEDB2EEBB98EC5704560 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d89fed9-d903-303d-8c0e-84551f7ce740.roa Signing time: Mon 01 Jun 2026 10:39:45 +0000 ROA not before: Mon 01 Jun 2026 10:39:45 +0000 ROA not after: Sun 30 Aug 2026 10:39:45 +0000 asID: 209982 IP address blocks: 172.94.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:06:ba:ce:db:2e:eb:b9:8e:c5:70:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 1 10:39:45 2026 GMT Not After : Aug 30 10:39:45 2026 GMT Subject: CN=1ee30bfa-184d-4511-8db5-2e6cd72f3333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:df:23:78:f2:02:03:34:09:71:b3:f1:56: 23:31:27:68:df:3f:7c:d2:e7:88:43:00:05:e3:0c: 1b:a3:7e:2d:aa:9f:a8:e1:8a:46:20:39:0a:4f:c6: e1:25:14:e6:58:77:19:fd:58:6e:ef:9d:1c:0a:58: 63:c1:d1:a7:f6:9f:65:7b:18:15:bb:51:0f:ae:cd: 0a:74:94:26:e6:3a:3e:6d:b8:35:d2:62:ac:e4:d0: 4e:bc:28:f1:84:2c:02:74:68:9c:41:8c:e7:42:fb: e3:1b:74:fc:32:15:46:e6:88:8e:48:03:c5:8e:1d: 08:98:c6:9e:00:9b:a1:0b:c4:4f:6d:d6:37:6f:66: 4a:a4:0e:2a:7f:99:ef:90:f1:6d:dc:24:f2:dc:f7: 39:09:99:be:b3:46:7e:a4:b9:e7:6b:7a:fa:25:77: 8e:8c:43:25:09:50:25:ef:1d:5b:5d:ca:03:92:bb: 48:29:7a:fe:00:30:91:01:e3:c8:31:fe:88:77:3c: 72:eb:7f:e9:1c:c7:aa:e5:08:0a:9e:b0:bb:5f:2c: 8a:28:96:d8:d2:79:2d:e8:9b:cf:bf:ec:8b:68:2a: 7c:1a:33:5c:a6:47:33:f6:39:79:9f:00:cf:61:0d: d6:b1:5f:02:b1:22:61:a4:7a:2a:74:9f:97:39:1c: 59:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BE:B9:6B:D8:EC:10:22:8A:E6:07:31:F9:47:CA:3B:3F:CF:4C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d89fed9-d903-303d-8c0e-84551f7ce740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3c:84:5d:83:17:3c:fa:d3:8d:1a:4e:1b:53:a0:4b:9f:a9: 92:c2:51:10:03:3c:b6:0d:01:9a:a0:45:07:b1:01:1f:07:fb: 9d:98:c9:d4:d1:71:c2:8b:47:a4:f8:d2:08:fc:0c:5f:65:c6: 0e:95:3d:2c:29:6f:73:23:24:4b:4f:d7:fc:50:48:3b:15:82: 1b:e4:85:54:bb:1a:33:c7:cd:9a:79:a5:37:a7:bc:f4:08:48: be:8a:33:dd:0b:f3:ff:5b:1b:40:1d:6a:3b:61:38:7a:aa:e2: 16:ea:09:f4:c0:a7:63:fd:39:5c:cd:c8:23:b0:e8:1f:7a:cb: 85:d2:75:4a:46:b7:84:be:db:d0:bf:86:b4:b1:13:ba:d7:8d: 71:84:7c:9f:5e:4a:c5:23:dc:f4:fa:47:4f:b8:25:2b:ca:8f: d7:ab:87:a4:7c:88:91:7d:77:cd:60:17:9a:6f:39:6f:19:e7: 90:d9:c2:de:1e:ae:b1:e7:e6:3f:da:f0:d0:81:e8:cf:c4:d7: c8:9a:d9:60:bb:13:30:d4:06:24:74:94:5c:bf:d0:d6:75:b8: aa:82:e2:29:74:ef:fb:aa:07:bb:d8:24:2f:bf:57:e0:62:90: 83:78:2e:90:9f:15:1a:bd:cf:05:1b:70:d5:ed:7e:ad:0b:91: 08:5d:48:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Gus7bLuu5jsVwRWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMTEwMzk0NVoXDTI2MDgzMDEwMzk0NVowLzEtMCsGA1UEAxMk MWVlMzBiZmEtMTg0ZC00NTExLThkYjUtMmU2Y2Q3MmYzMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidvfI3jyAgM0CXGz8VYjMSdo3z980ueIQwAF 4wwbo34tqp+o4YpGIDkKT8bhJRTmWHcZ/Vhu750cClhjwdGn9p9lexgVu1EPrs0K dJQm5jo+bbg10mKs5NBOvCjxhCwCdGicQYznQvvjG3T8MhVG5oiOSAPFjh0ImMae AJuhC8RPbdY3b2ZKpA4qf5nvkPFt3CTy3Pc5CZm+s0Z+pLnna3r6JXeOjEMlCVAl 7x1bXcoDkrtIKXr+ADCRAePIMf6Idzxy63/pHMeq5QgKnrC7XyyKKJbY0nkt6JvP v+yLaCp8GjNcpkcz9jl5nwDPYQ3WsV8CsSJhpHoqdJ+XORxZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa+uWvY7BAiiuYHMflHyjs/z0yrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGQ4OWZlZDktZDkwMy0z MDNkLThjMGUtODQ1NTFmN2NlNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA8hF2DFzz6040aThtToEufqZLCURADPLYNAZqgRQexAR8H+52YydTR ccKLR6T40gj8DF9lxg6VPSwpb3MjJEtP1/xQSDsVghvkhVS7GjPHzZp5pTenvPQI SL6KM90L8/9bG0AdajthOHqq4hbqCfTAp2P9OVzNyCOw6B96y4XSdUpGt4S+29C/ hrSxE7rXjXGEfJ9eSsUj3PT6R0+4JSvKj9erh6R8iJF9d81gF5pvOW8Z55DZwt4e rrHn5j/a8NCB6M/E18ia2WC7EzDUBiR0lFy/0NZ1uKqC4il07/uqB7vYJC+/V+Bi kIN4LpCfFRq9zwUbcNXtfq0LkQhdSMY= -----END CERTIFICATE-----Generated at Thu Jun 4 11:04:00 2026 by rpki-client