$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3265f45f-f18c-308b-a47d-848ecf3bfd2e.roa File: 3265f45f-f18c-308b-a47d-848ecf3bfd2e.roa (raw, json) Hash identifier: +j9y6x1qBAiyQd17ic+n4P54f/7t1fqh+rbEHdIDWlk= Subject key identifier: 8B:72:BC:D6:5D:1C:A0:38:C4:09:93:87:A0:B0:2E:AE:AA:FB:B1:4B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E2F04597EAC9A2F41C81CA100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3265f45f-f18c-308b-a47d-848ecf3bfd2e.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 132372 IP address blocks: 172.94.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:59:7e:ac:9a:2f:41:c8:1c:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=aa6b2fff-f0c3-4d12-8a6f-5f124e2477fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:89:9b:64:d8:b8:ed:03:4c:02:e8:b6:b3: 0b:1e:71:73:81:68:1c:99:2e:8a:3b:03:48:00:75: ef:eb:35:a6:92:b3:e4:55:44:d6:ad:9c:76:f6:ad: f3:c9:a9:4c:f6:f2:df:15:86:6b:03:5c:fd:8d:4a: eb:38:a7:c3:89:33:3f:f2:2b:3a:84:6a:97:e1:76: 2f:a6:59:3e:df:19:f7:2a:c5:ae:eb:e0:d8:9b:54: 95:02:cc:a7:df:14:f7:e7:42:cd:63:2a:97:4c:69: 57:5e:2c:19:17:b2:24:db:00:c6:97:47:91:8d:1d: ed:7f:b4:45:55:7d:b7:17:0a:e0:9c:cb:04:4b:43: 40:ae:d6:fe:c9:53:79:fb:75:54:78:62:aa:61:26: a9:ac:bd:58:d5:38:a0:3f:1b:8e:d4:5f:53:4d:fc: 8d:ef:21:2a:1f:df:84:38:c9:6c:2f:01:63:4e:7f: da:75:88:f9:a1:59:60:d8:ad:d7:13:5b:6e:31:1d: 5e:cf:de:fe:93:66:13:e5:f2:b0:af:31:9f:f6:0f: 06:3c:01:af:f4:f4:04:13:a0:f0:99:a1:f5:a0:46: 13:9f:a2:45:89:3d:89:3b:ca:79:94:61:14:5d:52: 9e:d5:eb:22:6a:a1:fb:5f:bc:76:a6:0e:9f:45:0a: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:72:BC:D6:5D:1C:A0:38:C4:09:93:87:A0:B0:2E:AE:AA:FB:B1:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3265f45f-f18c-308b-a47d-848ecf3bfd2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:4e:9e:a9:fe:f4:df:b9:c6:8a:b3:e6:a9:d6:a4:ea:3f:07: 34:d0:dd:d8:c9:d7:fa:49:30:9e:e0:a3:03:e1:b0:5a:39:36: b4:dd:84:d5:e7:01:2b:c1:61:2b:d4:3f:45:13:8c:19:33:b1: 23:03:bb:85:00:37:5d:d7:22:3f:47:92:03:3e:99:ba:87:11: 16:47:d7:f6:39:fa:4a:2d:2c:1f:9e:89:5d:15:d3:27:8c:38: 0e:9f:60:5f:4d:b1:e5:a3:26:78:b4:63:f3:36:61:ba:d5:bc: 64:8b:4f:60:36:49:3c:da:f8:01:7f:c2:4a:e3:fe:a6:84:94: 36:b0:99:7b:66:05:57:66:55:27:02:fb:01:52:2a:d4:68:41: 1f:f3:13:ec:c1:9f:0b:7b:a5:85:2d:60:0e:53:3e:46:6c:44: d2:04:59:03:2d:24:b4:04:2e:e2:c4:2f:cd:25:00:15:37:7c: c0:c3:6d:af:8c:24:b8:c3:d4:c3:c0:f5:6a:2e:bb:52:36:ec: 10:03:33:1d:dd:0c:cc:9f:89:d6:65:c6:67:48:4c:e8:0b:71: 0d:f4:e3:0f:2a:3d:d1:2c:ea:a7:11:d2:63:17:66:2f:7c:e2: cb:36:77:0d:72:85:72:ee:c1:e9:29:ed:c9:d2:cd:7d:39:82: 04:09:12:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFl+rJovQcgcoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk YWE2YjJmZmYtZjBjMy00ZDEyLThhNmYtNWYxMjRlMjQ3N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdGJm2TYuO0DTALotrMLHnFzgWgcmS6KOwNI AHXv6zWmkrPkVUTWrZx29q3zyalM9vLfFYZrA1z9jUrrOKfDiTM/8is6hGqX4XYv plk+3xn3KsWu6+DYm1SVAsyn3xT350LNYyqXTGlXXiwZF7Ik2wDGl0eRjR3tf7RF VX23FwrgnMsES0NArtb+yVN5+3VUeGKqYSaprL1Y1TigPxuO1F9TTfyN7yEqH9+E OMlsLwFjTn/adYj5oVlg2K3XE1tuMR1ez97+k2YT5fKwrzGf9g8GPAGv9PQEE6Dw maH1oEYTn6JFiT2JO8p5lGEUXVKe1esiaqH7X7x2pg6fRQpwXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItyvNZdHKA4xAmTh6CwLq6q+7FLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzI2NWY0NWYtZjE4Yy0z MDhiLWE0N2QtODQ4ZWNmM2JmZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtOnqn+9N+5xoqz5qnWpOo/BzTQ3djJ1/pJMJ7gowPhsFo5NrTdhNXn ASvBYSvUP0UTjBkzsSMDu4UAN13XIj9HkgM+mbqHERZH1/Y5+kotLB+eiV0V0yeM OA6fYF9NseWjJni0Y/M2YbrVvGSLT2A2STza+AF/wkrj/qaElDawmXtmBVdmVScC +wFSKtRoQR/zE+zBnwt7pYUtYA5TPkZsRNIEWQMtJLQELuLEL80lABU3fMDDba+M JLjD1MPA9Wouu1I27BADMx3dDMyfidZlxmdITOgLcQ304w8qPdEs6qcR0mMXZi98 4ss2dw1yhXLuwekp7cnSzX05ggQJEiY= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:38 2026 by rpki-client