$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa File: 15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa (raw, json) Hash identifier: /8BeEKawFQr4W0LIBrlLW68WXXhvTOUTKfrUV+vRWe4= Subject key identifier: 79:62:7A:AA:7F:71:7B:CA:F5:C3:64:98:71:4B:FB:ED:B0:3E:54:00 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DC29AE2737E935A77F0B6C600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 396356 IP address blocks: 172.94.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:e2:73:7e:93:5a:77:f0:b6:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=cdd02212-daa5-4d4b-8935-7fb7343ab93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0d:1f:32:00:41:ab:60:ca:6e:f0:52:c4:96: 99:eb:87:15:e6:92:31:48:1d:72:f5:fe:5d:d8:f1: 56:58:0c:a0:ad:29:3f:a3:c2:bb:e1:1a:28:17:6b: d9:d5:72:69:43:61:64:a4:44:aa:0a:fa:50:40:5a: 82:ca:d0:a8:eb:8d:82:4d:02:a6:fc:76:08:66:3f: 9e:3a:f1:87:a0:c5:27:ac:1c:f9:be:25:97:07:ca: 57:17:c1:51:d0:b5:b6:48:42:6d:e5:b6:cf:c6:21: 3d:c2:41:99:8f:93:c0:05:f0:97:94:c1:ac:37:0d: 37:05:b7:0e:c6:2f:d1:57:74:11:91:59:ed:d9:8e: 8a:15:01:e6:dc:49:76:e6:3d:e8:b5:e1:16:24:25: 4d:60:5a:02:17:47:30:48:1e:46:1f:f3:20:e9:9c: 65:40:23:10:6b:9f:ee:29:cb:d3:97:01:28:75:96: 1b:33:aa:c2:6a:44:b6:e9:03:e4:19:da:95:ef:86: 5c:18:25:d2:6f:3d:6d:a2:96:cf:2f:8f:c2:c1:f3: b2:0a:f4:6a:94:c8:7e:0d:9c:08:7a:8c:ba:3e:e9: 13:80:8d:05:eb:69:4e:3c:b1:74:4d:b9:5b:68:a3: 6a:9c:48:ee:2b:85:40:ea:35:60:f3:3b:dd:24:ec: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:7A:AA:7F:71:7B:CA:F5:C3:64:98:71:4B:FB:ED:B0:3E:54:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:79:c2:d9:06:97:d1:d6:37:43:62:3b:e1:7d:c5:cf:6a:53: 65:7f:33:29:59:c9:7f:6a:bd:1c:dc:04:95:e9:99:19:ea:8c: f4:09:2e:19:90:a3:08:bb:d6:30:29:60:1d:bf:6d:9d:a0:1c: 75:32:6f:ce:28:8e:3e:95:27:7e:60:22:35:25:3b:18:75:c9: ca:bf:28:da:e0:f3:3e:f7:08:7e:6b:c9:52:03:c7:4e:ad:99: a9:8a:92:f7:f4:3b:24:60:eb:78:d1:ac:37:87:87:94:4c:18: 9c:6e:14:c5:ba:35:2c:b1:15:da:0a:38:14:81:43:52:8e:6e: 7c:d3:11:3c:90:b0:ca:77:dc:12:7d:a3:25:4f:d4:41:a2:04: 79:3e:30:55:a0:58:bf:a4:a0:d7:36:82:d9:07:03:14:e8:e0: 1a:9e:8c:51:6f:0e:5e:d9:2e:06:1e:43:68:30:00:ec:5c:49: e4:12:61:c3:8f:47:5f:08:c7:99:b2:68:db:80:76:ed:f9:7d: 8f:16:96:55:97:6b:43:2f:a7:ed:de:ab:97:0d:ba:46:05:fa: 7a:21:4d:40:f0:f4:83:1e:35:b3:0d:e8:77:97:a6:97:63:c4: eb:56:bd:98:5f:be:f4:73:f1:4a:bb:9b:2e:af:be:5c:58:38: d7:a4:77:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuJzfpNad/C2xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk Y2RkMDIyMTItZGFhNS00ZDRiLTg5MzUtN2ZiNzM0M2FiOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ0fMgBBq2DKbvBSxJaZ64cV5pIxSB1y9f5d 2PFWWAygrSk/o8K74RooF2vZ1XJpQ2FkpESqCvpQQFqCytCo642CTQKm/HYIZj+e OvGHoMUnrBz5viWXB8pXF8FR0LW2SEJt5bbPxiE9wkGZj5PABfCXlMGsNw03BbcO xi/RV3QRkVnt2Y6KFQHm3El25j3oteEWJCVNYFoCF0cwSB5GH/Mg6ZxlQCMQa5/u KcvTlwEodZYbM6rCakS26QPkGdqV74ZcGCXSbz1topbPL4/CwfOyCvRqlMh+DZwI eoy6PukTgI0F62lOPLF0TblbaKNqnEjuK4VA6jVg8zvdJOw20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlieqp/cXvK9cNkmHFL++2wPlQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTVlNTRmYTQtMmUwMy0z Zjk2LWJiOGItZjY0ZGIzNzI4Y2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh5wtkGl9HWN0NiO+F9xc9qU2V/MylZyX9qvRzcBJXpmRnqjPQJLhmQ owi71jApYB2/bZ2gHHUyb84ojj6VJ35gIjUlOxh1ycq/KNrg8z73CH5ryVIDx06t mamKkvf0OyRg63jRrDeHh5RMGJxuFMW6NSyxFdoKOBSBQ1KObnzTETyQsMp33BJ9 oyVP1EGiBHk+MFWgWL+koNc2gtkHAxTo4BqejFFvDl7ZLgYeQ2gwAOxcSeQSYcOP R18Ix5myaNuAdu35fY8WllWXa0Mvp+3eq5cNukYF+nohTUDw9IMeNbMN6HeXppdj xOtWvZhfvvRz8Uq7my6vvlxYONekd4o= -----END CERTIFICATE-----Generated at Wed May 13 08:52:05 2026 by rpki-client