$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa File: 728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa (raw, json) Hash identifier: OeqKEGgoV8+WoLAI9d73X9jjpf8d+Tk1VIKgiK0vnbg= Subject key identifier: 2C:2B:CC:53:76:BD:88:6B:49:56:42:E2:1B:4E:09:D1:42:62:42:CB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E35FF223A6C421E918CEA7380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 9009 IP address blocks: 172.94.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:22:3a:6c:42:1e:91:8c:ea:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=db78ea62-85f6-4175-9f55-1dc4199e096e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:18:8c:56:5f:ee:74:ee:cc:99:2f:71:49: 5d:fe:c2:65:46:17:18:fa:9b:b1:64:28:89:67:a1: 6b:9a:85:dc:46:d6:9c:7a:fa:a7:2b:7f:ba:ab:f4: 04:2a:a6:9a:69:4f:2c:26:fd:aa:d3:7e:be:13:5c: 2a:d8:f0:61:a0:d0:90:86:80:2b:16:99:12:11:79: 28:3d:19:46:af:79:77:81:54:04:f8:8e:56:39:1e: 22:60:b3:f6:54:81:8c:92:46:c0:7c:38:c9:2b:be: 9d:89:21:b9:0b:a4:68:f3:f6:4a:d5:69:5f:92:1a: 44:70:03:a9:63:81:a6:a7:8c:16:6f:cf:58:c3:fd: d3:15:55:43:3e:dd:bd:9c:1a:08:86:22:d2:60:bd: 4b:7d:4c:f4:c4:7f:92:0f:c2:b7:4f:cd:a8:e8:6d: de:8f:5b:3f:1e:fb:d7:eb:3f:ba:c2:c2:d1:95:f5: 05:67:fc:2b:a2:df:23:15:a5:d5:4f:f6:39:61:b4: 31:b5:47:86:56:a5:d6:a3:a0:2a:42:24:3f:f4:c9: cb:cb:1f:2f:27:26:94:93:0a:11:3c:c8:fd:8e:89: a1:39:74:a9:0f:57:d2:1f:87:84:cf:52:8f:fd:5b: a9:c2:c5:37:ba:4e:36:4b:10:92:f2:1c:59:51:04: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2B:CC:53:76:BD:88:6B:49:56:42:E2:1B:4E:09:D1:42:62:42:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6b:ae:11:d2:a9:e2:e0:22:51:e6:f0:58:2a:38:c4:e1:38: 47:db:44:a3:e1:d6:6b:15:77:4c:b3:fe:72:3f:8c:3c:2e:6c: 4b:4d:7a:59:44:85:84:dd:a6:eb:7f:ba:a8:0c:62:29:ae:ff: 1a:49:3b:f6:90:41:8a:d4:55:bb:bd:f7:9d:ae:a2:67:63:4f: 29:42:4a:c7:7c:38:6c:73:12:d9:29:38:60:e4:1b:88:22:6b: a2:1b:cc:8e:74:df:9c:53:77:45:94:1a:69:4e:55:7c:cf:61: 34:b2:40:6a:d9:c5:0e:fe:33:1f:7d:83:08:5f:71:cb:8e:d5: d5:9b:04:99:e5:6b:ea:46:d8:2b:ee:6f:7f:ad:53:58:29:67: 7a:39:94:f9:5f:2f:fb:ca:b3:f8:99:83:e3:35:0a:68:15:7f: e3:2d:49:69:c2:6e:73:b5:4b:32:fd:30:f6:7a:16:83:d0:75: e7:8f:3a:bc:1e:7d:87:fb:90:eb:e2:d4:21:14:88:7a:4e:b2: 57:aa:a0:3c:f9:15:f6:30:aa:a8:47:4f:f0:65:ae:b8:3a:0b: f6:bc:60:b7:57:94:14:e3:98:13:52:b7:93:04:d8:fd:39:d4: 33:77:8e:7e:b4:57:13:05:73:e3:c1:ff:a3:e5:b0:68:92:94: 0a:5e:9d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/yI6bEIekYzqc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZGI3OGVhNjItODVmNi00MTc1LTlmNTUtMWRjNDE5OWUwOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhngYjFZf7nTuzJkvcUld/sJlRhcY+puxZCiJ Z6FrmoXcRtacevqnK3+6q/QEKqaaaU8sJv2q036+E1wq2PBhoNCQhoArFpkSEXko PRlGr3l3gVQE+I5WOR4iYLP2VIGMkkbAfDjJK76diSG5C6Ro8/ZK1WlfkhpEcAOp Y4Gmp4wWb89Yw/3TFVVDPt29nBoIhiLSYL1LfUz0xH+SD8K3T82o6G3ej1s/HvvX 6z+6wsLRlfUFZ/wrot8jFaXVT/Y5YbQxtUeGVqXWo6AqQiQ/9MnLyx8vJyaUkwoR PMj9jomhOXSpD1fSH4eEz1KP/VupwsU3uk42SxCS8hxZUQTFsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwrzFN2vYhrSVZC4htOCdFCYkLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzI4YTZkZGMtNmRmMy0z MWJiLWI5YWEtNTNkYzkzYTU3NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBrrhHSqeLgIlHm8FgqOMThOEfbRKPh1msVd0yz/nI/jDwubEtNellE hYTdput/uqgMYimu/xpJO/aQQYrUVbu9952uomdjTylCSsd8OGxzEtkpOGDkG4gi a6IbzI5035xTd0WUGmlOVXzPYTSyQGrZxQ7+Mx99gwhfccuO1dWbBJnla+pG2Cvu b3+tU1gpZ3o5lPlfL/vKs/iZg+M1CmgVf+MtSWnCbnO1SzL9MPZ6FoPQdeePOrwe fYf7kOvi1CEUiHpOsleqoDz5FfYwqqhHT/Blrrg6C/a8YLdXlBTjmBNSt5ME2P05 1DN3jn60VxMFc+PB/6PlsGiSlApenQ0= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:44 2026 by rpki-client