$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ccaff89-0b67-3e19-aa36-0b92418e0e0b.roa File: 4ccaff89-0b67-3e19-aa36-0b92418e0e0b.roa (raw, json) Hash identifier: 5jlpK79PdoJ1E53hwOcA7699W1QO9kCtcRt63MRprnU= Subject key identifier: B3:46:CE:CF:FA:09:D4:AC:8D:BD:1E:6B:C1:E4:63:3F:37:F5:06:D1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DE1E717AF90319DBB80544A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ccaff89-0b67-3e19-aa36-0b92418e0e0b.roa Signing time: Tue 19 May 2026 06:04:05 +0000 ROA not before: Tue 19 May 2026 06:04:05 +0000 ROA not after: Mon 17 Aug 2026 06:04:05 +0000 asID: 3223 IP address blocks: 172.94.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:e7:17:af:90:31:9d:bb:80:54:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 19 06:04:05 2026 GMT Not After : Aug 17 06:04:05 2026 GMT Subject: CN=3448cff9-a84e-4547-bc1b-602e81d22cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:6d:8f:2c:7a:a4:52:0e:76:f4:80:21:6f: 74:04:73:05:19:7b:72:ff:42:ec:b9:9e:1e:82:3d: 0b:23:82:ab:5c:1b:9b:a8:97:49:73:a9:8a:13:e2: e6:ef:ff:e8:a1:e7:2f:e9:74:62:87:09:09:18:e1: ef:09:36:18:54:04:8d:d6:f9:7d:0a:e5:8c:cb:ce: 7f:78:e2:aa:59:93:81:3b:97:96:ed:ab:bd:f1:f7: c9:4b:75:ac:e1:ca:d7:33:d2:38:9d:bc:49:bd:59: d1:d2:b3:96:0f:82:3a:e2:9c:79:94:0b:4d:80:c0: f7:85:ec:21:6e:5c:86:f7:e4:ca:fc:6a:dc:6c:ed: cc:56:ba:1b:c8:bb:89:d7:94:57:47:69:52:f2:d1: ee:e0:77:e8:36:44:e1:ea:a6:40:4d:6f:fd:b4:cc: b3:ca:27:03:37:29:84:91:f8:04:69:0d:9b:db:8b: d7:40:fa:67:23:5b:7c:c6:ce:8b:a6:ed:29:b7:21: 8d:15:3b:f9:7a:f4:09:10:9b:da:95:c4:ca:0f:17: f1:51:6e:5c:f0:41:18:e2:64:8c:cf:d6:d7:77:9e: d0:34:c7:34:de:87:c3:25:86:7d:eb:1c:9e:11:38: e1:54:28:f5:0c:13:8c:f6:25:0f:0a:bb:4c:3c:d8: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:46:CE:CF:FA:09:D4:AC:8D:BD:1E:6B:C1:E4:63:3F:37:F5:06:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ccaff89-0b67-3e19-aa36-0b92418e0e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c3:d8:34:32:36:29:bb:8c:73:16:3f:6a:67:2c:55:55:f0: dc:01:7a:86:40:ac:8c:fe:93:a4:4e:21:8c:2c:96:16:33:44: e1:35:9d:dd:2d:a4:0b:1a:56:c8:c9:8b:6e:ab:7c:0a:3d:37: 36:50:af:fc:2b:68:5b:5c:ae:bf:25:72:85:38:ec:bf:e0:70: c5:e4:98:8e:2e:94:26:00:05:c3:2d:2d:5d:d8:1a:a5:c1:06: 1d:53:95:35:17:fd:c0:12:24:19:3d:00:d6:98:b6:c0:0f:b3: b2:ab:e7:b2:c0:e1:56:7d:d3:a7:9b:ad:c9:78:e4:4c:a0:d4: 53:14:2a:c0:77:cb:b0:16:ab:26:39:80:9f:45:0e:c3:4f:0a: 2e:81:7a:ce:c9:bb:1b:e8:82:1b:00:13:68:ef:40:0f:a1:0f: 3b:49:18:c0:42:13:e1:bd:38:f7:25:97:ce:16:8e:37:28:94: ec:7f:a1:3b:58:f7:7e:46:e2:35:b6:cc:4b:57:22:9c:60:6c: 4b:3f:7e:5a:e5:23:12:fd:f5:2c:9b:21:68:b0:dd:d8:ad:7c: b3:35:1e:89:83:0a:4b:e4:ab:1a:b1:a8:26:b7:ab:6d:75:c0: 51:ff:ce:23:1c:c7:89:bb:77:1f:be:dc:17:33:89:f4:bc:0d: fd:3b:5e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3h5xevkDGdu4BUSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUxOTA2MDQwNVoXDTI2MDgxNzA2MDQwNVowLzEtMCsGA1UEAxMk MzQ0OGNmZjktYTg0ZS00NTQ3LWJjMWItNjAyZTgxZDIyY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRttjyx6pFIOdvSAIW90BHMFGXty/0LsuZ4e gj0LI4KrXBubqJdJc6mKE+Lm7//ooecv6XRihwkJGOHvCTYYVASN1vl9CuWMy85/ eOKqWZOBO5eW7au98ffJS3Ws4crXM9I4nbxJvVnR0rOWD4I64px5lAtNgMD3hewh blyG9+TK/GrcbO3MVrobyLuJ15RXR2lS8tHu4HfoNkTh6qZATW/9tMyzyicDNymE kfgEaQ2b24vXQPpnI1t8xs6Lpu0ptyGNFTv5evQJEJvalcTKDxfxUW5c8EEY4mSM z9bXd57QNMc03ofDJYZ96xyeETjhVCj1DBOM9iUPCrtMPNhLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNGzs/6CdSsjb0ea8HkYz839QbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGNjYWZmODktMGI2Ny0z ZTE5LWFhMzYtMGI5MjQxOGUwZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzD2DQyNim7jHMWP2pnLFVV8NwBeoZArIz+k6ROIYwslhYzROE1nd0t pAsaVsjJi26rfAo9NzZQr/wraFtcrr8lcoU47L/gcMXkmI4ulCYABcMtLV3YGqXB Bh1TlTUX/cASJBk9ANaYtsAPs7Kr57LA4VZ906ebrcl45Eyg1FMUKsB3y7AWqyY5 gJ9FDsNPCi6Bes7JuxvoghsAE2jvQA+hDztJGMBCE+G9OPcll84WjjcolOx/oTtY 935G4jW2zEtXIpxgbEs/flrlIxL99SybIWiw3ditfLM1HomDCkvkqxqxqCa3q211 wFH/ziMcx4m7dx++3BczifS8Df07XiE= -----END CERTIFICATE-----Generated at Thu Jun 4 09:01:06 2026 by rpki-client