$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa File: 28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa (raw, json) Hash identifier: Rg2WHq9Vtt9c6ov1KIBnza1eI72VldxsLBxKZkdW164= Subject key identifier: F8:22:05:19:E1:88:17:A0:32:88:7D:35:F1:CD:80:50:44:D7:1D:13 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E4AEF4CC51160A22A50452680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 40676 IP address blocks: 172.94.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:4c:c5:11:60:a2:2a:50:45:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=994db8b9-bc42-42a7-8992-e107ea766b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:37:36:91:5f:62:9a:6b:b0:40:1e:07:eb: 0b:d3:63:c5:28:70:8d:da:39:40:18:06:75:48:92: 45:61:32:01:db:b2:5b:49:f8:b1:38:66:b1:a8:30: 26:d8:37:5b:13:cd:f6:91:bc:30:de:bf:c8:e9:d1: 03:3b:0f:b5:ab:57:44:55:d5:b1:f7:c6:98:75:20: 40:f4:0d:f9:3f:1e:8e:43:88:e4:15:cb:ad:a6:8d: 21:e0:ab:ac:b7:19:7e:d7:17:57:13:d0:31:70:57: 61:4b:23:8c:05:fb:e5:bb:40:ff:ef:6d:a8:a7:80: cb:73:45:de:6d:a0:c4:11:de:53:56:f1:98:af:04: f7:f6:2b:47:c2:ad:23:e9:cb:9b:c0:dd:45:20:c7: f7:13:9c:30:07:eb:f6:78:6f:71:0e:8d:62:00:de: 26:ba:0a:5d:3f:28:f7:90:8b:e8:ba:f0:68:d7:ec: 3d:9c:5d:6b:28:53:88:87:5b:97:eb:1c:60:03:9f: 9b:78:48:2c:92:24:f1:cd:cd:0a:b8:24:cd:a7:51: d2:11:61:ce:f5:2b:4f:fe:ce:22:a2:bb:db:61:d4: f3:8c:fa:d9:cd:9e:27:79:7c:c5:13:08:99:37:69: 41:94:93:d9:3d:9f:ca:ab:21:f0:dd:a7:fe:0f:24: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:05:19:E1:88:17:A0:32:88:7D:35:F1:CD:80:50:44:D7:1D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5a:c1:77:a8:96:35:47:a1:15:fb:a0:02:d2:b7:be:1d:29: 4b:3c:98:82:e5:04:f5:84:af:ab:93:f1:f0:8f:d2:c2:39:8a: 68:01:01:a2:fc:c2:27:26:3c:f4:33:8f:c4:c4:c6:c9:28:1b: ab:85:68:18:1d:2f:a1:6f:31:d2:a2:b1:01:18:d2:57:8c:8f: 8c:f7:6d:47:28:a9:29:f3:c7:83:19:a1:d4:80:b2:43:e2:31: 45:1e:e9:29:21:9c:19:37:97:3a:33:67:3e:c3:9e:33:f9:68: 98:51:86:50:db:c1:eb:b0:8f:fd:b9:8e:f6:97:9e:e6:b6:e7: 1f:85:ef:96:3d:6a:6e:96:cb:f7:cb:bd:4a:ee:20:33:ab:5e: 73:81:17:c3:b9:5e:db:db:73:23:91:0a:83:65:09:a0:c7:af: 45:b0:df:2a:f8:8b:3c:d8:8b:99:a5:b9:80:d2:cd:b6:5c:7a: 13:e4:1d:ec:6f:19:a6:36:d8:f2:52:32:fa:de:83:3f:59:c6: 5f:1f:f8:e9:5e:87:3d:f6:1f:94:0c:12:3c:82:4f:f4:5b:d5: a9:9d:17:aa:01:7b:9b:8c:29:e0:f8:a9:ee:e5:21:35:f4:b6: 2e:77:11:d2:c4:9c:57:96:f9:9a:25:c0:5f:35:1f:09:ad:20: 5e:3d:cd:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70zFEWCiKlBFJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk OTk0ZGI4YjktYmM0Mi00MmE3LTg5OTItZTEwN2VhNzY2YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9s3NpFfYpprsEAeB+sL02PFKHCN2jlAGAZ1 SJJFYTIB27JbSfixOGaxqDAm2DdbE832kbww3r/I6dEDOw+1q1dEVdWx98aYdSBA 9A35Px6OQ4jkFcutpo0h4Kustxl+1xdXE9AxcFdhSyOMBfvlu0D/722op4DLc0Xe baDEEd5TVvGYrwT39itHwq0j6cubwN1FIMf3E5wwB+v2eG9xDo1iAN4mugpdPyj3 kIvouvBo1+w9nF1rKFOIh1uX6xxgA5+beEgskiTxzc0KuCTNp1HSEWHO9StP/s4i orvbYdTzjPrZzZ4neXzFEwiZN2lBlJPZPZ/KqyHw3af+DyT+zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgiBRnhiBegMoh9NfHNgFBE1x0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjgyMTVhYmItNGNiMS0z YjUyLWFhYzUtNWEwM2MxYzYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJawXeoljVHoRX7oALSt74dKUs8mILlBPWEr6uT8fCP0sI5imgBAaL8 wicmPPQzj8TExskoG6uFaBgdL6FvMdKisQEY0leMj4z3bUcoqSnzx4MZodSAskPi MUUe6SkhnBk3lzozZz7DnjP5aJhRhlDbweuwj/25jvaXnua25x+F75Y9am6Wy/fL vUruIDOrXnOBF8O5XtvbcyORCoNlCaDHr0Ww3yr4izzYi5mluYDSzbZcehPkHexv GaY22PJSMvregz9Zxl8f+Olehz32H5QMEjyCT/Rb1amdF6oBe5uMKeD4qe7lITX0 ti53EdLEnFeW+ZolwF81HwmtIF49zTk= -----END CERTIFICATE-----Generated at Tue Jul 21 14:58:00 2026 by rpki-client