$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa File: a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa (raw, json) Hash identifier: qZ4Fy4+e/H7/QcUrQUcj1Qu+CpI5xSmPIuyjoT4EZBc= Subject key identifier: D3:5B:1F:4C:10:2A:54:61:31:21:F5:07:EF:0C:BA:AE:51:68:B4:B2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D60E5081F042305B9E92F3E40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 9009 IP address blocks: 172.94.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:08:1f:04:23:05:b9:e9:2f:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=7d139de7-0165-4245-8fb0-593d9ebe6b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:33:a4:3d:e6:8a:28:b9:70:81:c6:80:65:93: 2f:a1:be:bf:27:ae:52:17:06:14:f3:0f:a4:e1:d9: 48:d8:c4:ce:a5:14:86:7e:f3:13:28:04:76:be:1d: 54:c9:2d:7d:e0:b3:71:39:3c:f1:a0:01:64:a0:be: a7:09:26:b3:e7:09:ec:09:53:7a:35:a0:ab:17:21: c3:6d:00:d0:78:f3:56:de:12:5c:81:ce:45:4b:31: 4c:47:62:eb:20:72:0f:1d:ed:0b:a9:41:6d:36:e0: 1e:f5:47:31:4a:55:e2:2c:a6:05:db:6b:cc:2d:b7: 2d:0e:93:72:ce:fd:bb:ed:16:ec:29:4f:f5:aa:7b: 55:fd:1f:a6:68:35:35:78:df:46:dd:36:be:df:d9: cb:87:d5:9b:08:81:1a:05:a2:fb:a7:67:74:b1:24: d9:b8:82:68:6a:3b:cd:80:a3:a9:6e:63:6e:f8:41: e9:ef:60:e2:e7:22:d8:66:3f:56:d5:d8:7a:ca:6e: 4d:d5:f4:20:32:72:ac:b5:47:d5:41:d5:47:50:fd: 47:99:69:6b:03:ee:ea:6f:e2:a0:12:f2:75:a0:d9: 01:27:80:72:f5:f8:1c:3f:b5:88:03:fd:30:8a:0d: ea:ed:4a:b3:71:2c:29:ea:fe:2e:24:b4:ab:f4:c4: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:1F:4C:10:2A:54:61:31:21:F5:07:EF:0C:BA:AE:51:68:B4:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bf:ac:99:77:47:b3:03:34:d2:b7:12:c5:64:40:ff:44:29: c8:b8:e1:60:8e:68:9d:22:b3:9e:5d:5c:c0:c3:4f:ef:c1:10: d8:1a:46:a1:51:31:34:11:6c:f2:35:fc:1c:9d:eb:4f:aa:2a: ac:cd:83:ba:56:36:47:fb:78:c1:3e:f2:8a:62:f1:13:43:47: b8:1b:4e:4f:a5:24:a6:c5:9d:b7:57:2d:24:89:2e:14:f2:02: d7:5f:75:07:a6:b6:ec:ec:35:4b:ef:89:e2:c5:3e:5c:b4:37: 56:10:5a:d9:ef:c7:13:e3:44:f7:2f:2b:df:19:4f:b8:61:33: 50:39:eb:c1:4a:e6:d4:7c:30:e3:0c:ac:c1:81:4c:7c:38:29: b1:be:73:6a:26:a2:06:62:38:e2:b9:35:d4:fa:2f:73:17:af: 36:4f:d7:8f:c4:4f:42:0d:05:96:21:b0:59:5b:74:3e:05:ce: 26:70:8e:f3:35:fb:b0:f5:e1:7c:3e:d1:a9:1a:3f:50:d0:69: 78:11:84:33:93:52:10:22:79:4e:21:7d:3b:9e:e7:1a:ab:96: fa:ac:4b:77:31:b4:ad:00:a7:4d:18:88:79:57:5c:e2:ee:f4: 79:04:82:68:83:40:48:c7:4d:42:16:39:29:48:01:45:8f:8a: f0:c1:ce:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QgfBCMFuekvPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk N2QxMzlkZTctMDE2NS00MjQ1LThmYjAtNTkzZDllYmU2YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizOkPeaKKLlwgcaAZZMvob6/J65SFwYU8w+k 4dlI2MTOpRSGfvMTKAR2vh1UyS194LNxOTzxoAFkoL6nCSaz5wnsCVN6NaCrFyHD bQDQePNW3hJcgc5FSzFMR2LrIHIPHe0LqUFtNuAe9UcxSlXiLKYF22vMLbctDpNy zv277RbsKU/1qntV/R+maDU1eN9G3Ta+39nLh9WbCIEaBaL7p2d0sSTZuIJoajvN gKOpbmNu+EHp72Di5yLYZj9W1dh6ym5N1fQgMnKstUfVQdVHUP1HmWlrA+7qb+Kg EvJ1oNkBJ4By9fgcP7WIA/0wig3q7UqzcSwp6v4uJLSr9MSKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNbH0wQKlRhMSH1B+8Muq5RaLSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTRkOTdmZDgtOGI2MS0z ZDI3LTgwZWQtYjJlODllNDhkZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa/rJl3R7MDNNK3EsVkQP9EKci44WCOaJ0is55dXMDDT+/BENgaRqFR MTQRbPI1/Byd60+qKqzNg7pWNkf7eME+8opi8RNDR7gbTk+lJKbFnbdXLSSJLhTy AtdfdQemtuzsNUvvieLFPly0N1YQWtnvxxPjRPcvK98ZT7hhM1A568FK5tR8MOMM rMGBTHw4KbG+c2omogZiOOK5NdT6L3MXrzZP14/ET0INBZYhsFlbdD4FziZwjvM1 +7D14Xw+0akaP1DQaXgRhDOTUhAieU4hfTue5xqrlvqsS3cxtK0Ap00YiHlXXOLu 9HkEgmiDQEjHTUIWOSlIAUWPivDBzrc= -----END CERTIFICATE-----Generated at Sat Apr 18 22:25:25 2026 by rpki-client