$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1aea94dd-317f-3526-af94-678a5461c8cd.roa File: 1aea94dd-317f-3526-af94-678a5461c8cd.roa (raw, json) Hash identifier: a0KvPXuQgPcKaer0BxzZh9eV9jovA90DB6Uvm/aOI/k= Subject key identifier: 11:87:B8:82:01:9A:39:C9:F2:55:E7:1E:A2:DD:11:5D:81:EB:C7:76 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DE7CD6724EFECAD0EE404E080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1aea94dd-317f-3526-af94-678a5461c8cd.roa Signing time: Thu 21 May 2026 08:47:10 +0000 ROA not before: Thu 21 May 2026 08:47:10 +0000 ROA not after: Wed 19 Aug 2026 08:47:10 +0000 asID: 206750 IP address blocks: 172.94.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e7:cd:67:24:ef:ec:ad:0e:e4:04:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 21 08:47:10 2026 GMT Not After : Aug 19 08:47:10 2026 GMT Subject: CN=e3d277b8-ef8f-43b2-bbd2-09707492d630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:a6:57:4b:10:4a:0a:21:20:cd:2b:cf:b3: 4e:8e:23:33:25:85:73:1d:f4:a1:9d:ad:76:a7:86: 8c:84:f8:3e:49:13:2d:76:2d:d2:4c:d1:88:91:9b: ca:2b:03:fb:30:5d:24:5d:2d:5e:02:1d:b0:27:47: 60:c0:fb:b6:6d:8a:6f:2a:5c:2e:46:0a:c5:f8:10: 7a:8e:cb:ea:7a:23:c0:40:71:08:31:05:46:0b:cb: 59:7e:69:c7:f9:5b:16:af:6c:bd:40:77:dc:ba:24: d7:57:b3:99:70:87:95:f3:9b:1f:f9:d5:72:83:ba: f1:2b:67:6d:f1:02:89:6b:6c:b2:f9:44:e2:74:05: 2c:1b:2e:58:54:1f:dd:97:cb:96:2b:4a:c6:c4:f8: 46:d9:a6:1d:21:ef:73:5d:eb:b4:3f:ef:cb:c8:5a: 8d:a5:ee:2c:fe:bd:fa:db:22:e5:a8:fb:0c:f5:b7: 93:81:d6:05:92:b6:44:3c:0e:55:bb:fd:00:de:23: 0e:58:8f:58:69:27:8d:ba:ef:93:e7:4c:99:d5:f9: 25:46:71:fc:d7:bd:ff:13:06:71:38:bc:7f:17:1e: a2:82:01:e1:34:90:af:42:8c:48:62:a8:ba:58:80: a7:0b:10:fa:e2:04:05:c6:e5:3e:53:86:68:f1:14: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:B8:82:01:9A:39:C9:F2:55:E7:1E:A2:DD:11:5D:81:EB:C7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1aea94dd-317f-3526-af94-678a5461c8cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a3:fb:e5:9b:2b:4d:25:9a:a8:c6:94:15:55:17:f5:ba:2f: cc:f5:94:2c:0a:4c:5e:26:7b:b9:58:46:61:8f:d2:9c:ee:d7: e6:dc:de:a5:40:05:31:43:6f:2a:d2:ad:0c:f8:09:9c:ab:20: 49:e2:89:ee:2c:62:d9:b0:ae:af:2f:6c:3a:d5:34:32:38:52: 5f:fa:a9:89:42:44:b8:ca:6d:a6:aa:d4:60:dc:c2:7a:4a:76: 47:21:e0:f7:91:e5:81:88:3c:84:cb:c1:72:ac:ab:8f:b5:d2: 27:67:61:eb:6a:19:d6:f6:a8:d0:a5:c4:b6:7a:27:c1:4e:88: a7:ee:1e:2c:13:33:ab:7c:55:9c:29:ea:09:84:3e:e9:29:07: 2f:8f:d8:82:8f:2f:af:fa:9c:cd:7a:f5:ae:44:0c:3d:df:5e: 2c:b2:f8:be:af:66:e2:cb:68:8b:0f:eb:9a:6f:2e:f6:04:45: 6f:99:8d:0e:ae:41:d7:1e:d8:b3:89:e9:4b:2f:8d:da:db:19: 71:4b:10:c1:61:dd:34:83:eb:b1:8f:32:5a:15:e7:df:fc:3d: 1c:1f:ee:50:81:6b:f7:87:72:2b:3a:9d:f9:d3:a6:23:8e:7d: 6e:24:c3:1c:30:62:54:35:20:4e:e1:18:74:e5:de:e2:90:27: 19:6f:1c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3nzWck7+ytDuQE4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUyMTA4NDcxMFoXDTI2MDgxOTA4NDcxMFowLzEtMCsGA1UEAxMk ZTNkMjc3YjgtZWY4Zi00M2IyLWJiZDItMDk3MDc0OTJkNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1+mV0sQSgohIM0rz7NOjiMzJYVzHfShna12 p4aMhPg+SRMtdi3STNGIkZvKKwP7MF0kXS1eAh2wJ0dgwPu2bYpvKlwuRgrF+BB6 jsvqeiPAQHEIMQVGC8tZfmnH+VsWr2y9QHfcuiTXV7OZcIeV85sf+dVyg7rxK2dt 8QKJa2yy+UTidAUsGy5YVB/dl8uWK0rGxPhG2aYdIe9zXeu0P+/LyFqNpe4s/r36 2yLlqPsM9beTgdYFkrZEPA5Vu/0A3iMOWI9YaSeNuu+T50yZ1fklRnH8173/EwZx OLx/Fx6iggHhNJCvQoxIYqi6WICnCxD64gQFxuU+U4Zo8RSmwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGHuIIBmjnJ8lXnHqLdEV2B68d2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWFlYTk0ZGQtMzE3Zi0z NTI2LWFmOTQtNjc4YTU0NjFjOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSj++WbK00lmqjGlBVVF/W6L8z1lCwKTF4me7lYRmGP0pzu1+bc3qVA BTFDbyrSrQz4CZyrIEniie4sYtmwrq8vbDrVNDI4Ul/6qYlCRLjKbaaq1GDcwnpK dkch4PeR5YGIPITLwXKsq4+10idnYetqGdb2qNClxLZ6J8FOiKfuHiwTM6t8VZwp 6gmEPukpBy+P2IKPL6/6nM169a5EDD3fXiyy+L6vZuLLaIsP65pvLvYERW+ZjQ6u Qdce2LOJ6UsvjdrbGXFLEMFh3TSD67GPMloV59/8PRwf7lCBa/eHcis6nfnTpiOO fW4kwxwwYlQ1IE7hGHTl3uKQJxlvHAA= -----END CERTIFICATE-----Generated at Wed Jun 3 09:16:40 2026 by rpki-client