$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa File: 85e02586-1263-3d5a-8bb9-97511820530e.roa (raw, json) Hash identifier: ftPgDPqh1pw80VkMHTshyBu+GatUEFjyQLfkzbR1+cY= Subject key identifier: 42:A2:0D:F3:24:E4:BC:CA:39:F6:81:67:BD:C8:E4:C4:31:32:D1:40 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E2F045D6CD400D3634C795300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 132372 IP address blocks: 172.94.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:5d:6c:d4:00:d3:63:4c:79:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=db117345-3b52-43b1-9df4-a0edf6f3d5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:9b:d2:03:40:22:46:78:e2:ac:1a:c4:a1: 20:57:66:39:6e:a9:08:e4:4a:90:d1:22:c7:69:b8: ad:d1:c7:73:85:a1:d6:eb:f0:b4:55:a5:08:c5:4a: e0:56:2f:e6:80:5b:f1:0f:1e:9d:fe:0f:d3:33:72: 20:e7:08:89:97:95:89:0a:4b:3e:96:8c:97:47:9c: 40:af:a1:92:05:8b:56:e5:b8:e0:2c:12:9a:bc:a5: 25:f9:a7:cb:62:0c:dd:79:93:e7:21:64:31:00:af: 24:a4:63:6d:51:df:fa:c4:4f:69:09:9d:f0:a8:59: 4b:5f:e9:f3:84:06:20:7e:dd:85:60:fd:55:30:6d: 6c:34:95:13:c5:5c:84:40:8f:b2:3e:6e:c5:0e:6b: 9c:d2:89:14:25:a8:ed:01:f5:3f:64:e6:38:55:a5: 6a:3d:22:44:54:cf:18:da:e1:7d:d4:ad:50:54:eb: 2c:36:6c:f0:61:55:d1:45:7c:c6:ad:78:35:63:60: a9:8e:7b:da:2e:34:41:dc:49:58:e2:ac:e4:6f:af: 22:13:16:e0:56:ee:fb:75:60:21:9b:03:17:bc:86: 88:7e:91:74:e4:9b:da:e8:22:ec:d7:f0:b5:1d:28: 2c:4f:f1:7c:b2:d0:e0:49:55:f3:11:d8:c0:ce:a3: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A2:0D:F3:24:E4:BC:CA:39:F6:81:67:BD:C8:E4:C4:31:32:D1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c1:85:1f:12:14:a8:8e:b5:15:9e:bf:22:12:ec:6c:2f:06: a1:ef:cf:fd:0b:1d:6c:09:2c:0c:cb:e8:5c:92:c5:3c:f9:e9: 2d:6c:49:d2:09:87:c8:8a:3e:2d:fe:25:77:97:f3:43:84:d8: 1b:ed:6a:b1:7e:b2:d6:1f:9c:c3:42:c7:e4:39:33:6f:0a:bf: ca:bd:0c:11:c8:87:ee:20:98:98:e4:ef:68:4b:6c:6d:0b:3f: cc:76:66:8b:75:8e:1f:71:f4:76:96:2a:dd:4b:60:dc:c6:ca: be:68:1d:30:0e:2d:3f:b4:d8:ae:45:7f:7f:64:e0:27:ee:a1: d3:b9:b8:65:a6:61:66:2a:dc:4d:21:ad:80:bb:7b:69:93:69: c3:02:c5:e9:44:b7:3a:c2:df:06:6f:77:89:80:e9:dc:e6:f3: fc:d9:fa:95:29:9a:d0:73:70:14:4f:a4:e4:00:d7:74:01:40: 56:c6:b8:8b:f6:f8:13:2d:b6:ed:92:8e:e9:d7:7d:36:9e:16: e6:29:a8:63:d5:71:06:5b:01:0b:f7:5b:83:0b:dd:72:01:70: e3:9e:d9:45:93:6a:3b:57:1e:d7:5b:74:74:27:9e:b0:5a:bd: 81:ea:e6:6c:c4:24:b4:74:d5:bc:9f:66:75:ec:65:42:4e:02: d1:22:c0:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBF1s1ADTY0x5UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk ZGIxMTczNDUtM2I1Mi00M2IxLTlkZjQtYTBlZGY2ZjNkNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmqb0gNAIkZ44qwaxKEgV2Y5bqkI5EqQ0SLH abit0cdzhaHW6/C0VaUIxUrgVi/mgFvxDx6d/g/TM3Ig5wiJl5WJCks+loyXR5xA r6GSBYtW5bjgLBKavKUl+afLYgzdeZPnIWQxAK8kpGNtUd/6xE9pCZ3wqFlLX+nz hAYgft2FYP1VMG1sNJUTxVyEQI+yPm7FDmuc0okUJajtAfU/ZOY4VaVqPSJEVM8Y 2uF91K1QVOssNmzwYVXRRXzGrXg1Y2CpjnvaLjRB3ElY4qzkb68iExbgVu77dWAh mwMXvIaIfpF05Jva6CLs1/C1HSgsT/F8stDgSVXzEdjAzqP+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKiDfMk5LzKOfaBZ73I5MQxMtFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODVlMDI1ODYtMTI2My0z ZDVhLThiYjktOTc1MTE4MjA1MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvBhR8SFKiOtRWevyIS7GwvBqHvz/0LHWwJLAzL6FySxTz56S1sSdIJ h8iKPi3+JXeX80OE2BvtarF+stYfnMNCx+Q5M28Kv8q9DBHIh+4gmJjk72hLbG0L P8x2Zot1jh9x9HaWKt1LYNzGyr5oHTAOLT+02K5Ff39k4CfuodO5uGWmYWYq3E0h rYC7e2mTacMCxelEtzrC3wZvd4mA6dzm8/zZ+pUpmtBzcBRPpOQA13QBQFbGuIv2 +BMttu2SjunXfTaeFuYpqGPVcQZbAQv3W4ML3XIBcOOe2UWTajtXHtdbdHQnnrBa vYHq5mzEJLR01byfZnXsZUJOAtEiwGA= -----END CERTIFICATE-----Generated at Tue Jul 21 14:58:18 2026 by rpki-client