$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa File: 8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa (raw, json) Hash identifier: Hwfr+S3JI7AZA6/jC8wtK7mnwrISv0j4KRCHQOcr8Go= Subject key identifier: 2F:72:5F:C3:01:9B:1C:7B:55:15:AC:BC:8C:BF:EB:8D:40:2A:7F:31 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E7204D1932B2F124F0CEE6880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 212238 IP address blocks: 172.94.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d1:93:2b:2f:12:4f:0c:ee:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=d65b771d-b2ec-4cd5-ae9d-c9fe092cbbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:54:54:2f:53:0c:42:31:bd:3b:3b:5d:86: 70:82:cc:5c:ea:49:7e:00:ef:34:59:af:04:5d:eb: e5:ad:53:7c:d9:22:ae:00:eb:f8:5c:c4:0f:be:1b: 7d:73:a6:ea:9f:71:e5:81:16:87:50:5f:5a:7a:5a: 0e:9b:c2:a2:ad:15:69:2a:be:ee:f7:56:1b:b3:b3: b1:24:32:4f:f8:6b:a1:68:b2:cd:27:bf:b6:bc:ce: 08:90:63:09:9b:a9:be:87:55:ab:30:00:49:81:54: f0:b2:73:cd:4a:e6:23:9d:d0:68:0c:6d:c6:10:fa: b4:72:9b:5a:95:f9:94:42:87:a7:dd:49:4e:d4:56: bd:15:b0:2e:9e:f0:dc:22:a5:05:fb:ee:dc:9c:e2: 2c:4a:4d:a7:60:07:98:de:97:af:cb:c7:2e:b4:38: 59:c2:3c:73:3f:ab:b8:c5:d7:b7:d3:a9:00:d4:b1: 84:92:01:3b:c1:3d:f4:0d:1d:8e:6e:af:95:bc:3f: 23:d1:11:68:c5:29:9b:b2:91:7c:7c:1c:52:b7:a9: 50:3f:03:33:05:ea:0f:8e:1e:62:d7:70:d1:6e:17: 2f:80:4e:62:05:9f:d4:c8:87:9b:7c:05:16:a0:2c: 71:94:26:cf:a5:24:c9:6b:87:a2:83:e0:c9:2b:42: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:72:5F:C3:01:9B:1C:7B:55:15:AC:BC:8C:BF:EB:8D:40:2A:7F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ec:70:34:1c:82:25:1a:b8:c5:80:a3:08:e0:b7:39:a3:3d: 9f:df:d3:62:61:60:3d:07:7e:e6:19:fd:d5:48:33:d4:83:0a: 7a:03:91:76:52:4b:01:32:ac:dd:20:fa:45:63:60:04:e4:fc: 64:44:33:04:66:fe:40:25:12:0d:23:57:00:e5:01:20:2d:a3: 75:2b:db:a0:34:24:17:55:df:07:1b:be:24:71:16:d5:38:0d: 54:06:75:35:aa:86:5f:90:d0:22:8c:f7:43:48:24:0f:d5:72: 0d:dc:f2:a7:e6:c7:2b:a8:f8:ad:7a:12:a3:a8:e4:0f:81:69: 67:e7:1a:c9:52:4c:8d:08:0e:cb:51:93:74:a7:5e:d6:4e:ef: 68:04:0b:54:08:ac:a4:68:5f:68:fe:73:a5:13:45:f9:6e:7d: 6c:05:5f:49:cb:51:ea:69:94:56:3c:14:89:2f:3d:a4:bb:66: 57:13:2d:94:b0:34:e4:17:26:34:13:02:22:39:bb:76:37:78: 1d:71:1b:86:d6:e7:ff:61:34:0f:64:9b:77:7c:35:32:d2:e5: 1d:98:b0:fa:f5:a2:1a:b1:a5:f5:38:42:43:e5:51:84:fe:81: 1a:70:a5:23:d1:6d:a4:6d:97:64:80:60:cc:39:40:38:83:fb: 55:9a:2e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNGTKy8STwzuaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ZDY1Yjc3MWQtYjJlYy00Y2Q1LWFlOWQtYzlmZTA5MmNiYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaBUVC9TDEIxvTs7XYZwgsxc6kl+AO80Wa8E XevlrVN82SKuAOv4XMQPvht9c6bqn3HlgRaHUF9aeloOm8KirRVpKr7u91Ybs7Ox JDJP+GuhaLLNJ7+2vM4IkGMJm6m+h1WrMABJgVTwsnPNSuYjndBoDG3GEPq0cpta lfmUQoen3UlO1Fa9FbAunvDcIqUF++7cnOIsSk2nYAeY3pevy8cutDhZwjxzP6u4 xde306kA1LGEkgE7wT30DR2Obq+VvD8j0RFoxSmbspF8fBxSt6lQPwMzBeoPjh5i 13DRbhcvgE5iBZ/UyIebfAUWoCxxlCbPpSTJa4eig+DJK0KuMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9yX8MBmxx7VRWsvIy/641AKn8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGIzM2Y5ZTktMTViYy0z NWEzLThjNjUtZGYyODAyZTUzYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETscDQcgiUauMWAowjgtzmjPZ/f02JhYD0HfuYZ/dVIM9SDCnoDkXZS SwEyrN0g+kVjYATk/GREMwRm/kAlEg0jVwDlASAto3Ur26A0JBdV3wcbviRxFtU4 DVQGdTWqhl+Q0CKM90NIJA/Vcg3c8qfmxyuo+K16EqOo5A+BaWfnGslSTI0IDstR k3SnXtZO72gEC1QIrKRoX2j+c6UTRflufWwFX0nLUepplFY8FIkvPaS7ZlcTLZSw NOQXJjQTAiI5u3Y3eB1xG4bW5/9hNA9km3d8NTLS5R2YsPr1ohqxpfU4QkPlUYT+ gRpwpSPRbaRtl2SAYMw5QDiD+1WaLro= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:42 2026 by rpki-client