$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa File: a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa (raw, json) Hash identifier: T8+cB9IJjyAzWF72+IRuOAgzf9xlICBv1dSemwk5/rA= Subject key identifier: 85:3E:57:2B:54:05:60:FC:2F:50:E1:00:FF:34:11:A8:DC:30:A1:65 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E6144B62A73E0EB01639CA3A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 40676 IP address blocks: 172.94.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:b6:2a:73:e0:eb:01:63:9c:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=683cef43-c88a-4cfc-9ae0-c992a4328621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:71:bb:f5:e1:52:e3:c2:aa:0d:c9:7d:ba:35: 33:01:08:65:3f:4f:f8:f7:2a:e6:ee:e7:85:ef:6d: 0f:4d:59:83:bb:c5:fb:c9:30:c1:01:bb:5d:1c:e5: 7c:9b:06:5a:9e:fa:52:f7:6d:6d:f5:d6:11:84:68: a6:95:b2:ab:de:70:65:3b:32:65:40:49:8d:e9:52: 6a:88:ce:66:25:9e:88:ee:03:bc:2d:8c:fe:03:e4: 7c:30:ad:00:e7:ea:2e:80:8c:2e:30:bd:ce:9c:18: 36:42:96:3b:6d:8c:10:48:83:fc:00:b5:a5:3e:25: 8a:9e:7a:dc:93:b3:8b:00:06:24:66:66:84:ce:7e: d4:5b:46:a2:e0:f5:81:76:8b:f9:4b:95:ac:cd:eb: fc:0e:80:2f:e7:51:6b:21:4d:c0:5f:ba:d7:7e:03: 2a:f2:04:eb:94:37:95:a4:30:63:2c:97:3e:bf:4f: f9:f8:d5:b2:3d:c9:99:da:be:7b:3a:a6:0b:0a:42: 58:c2:87:98:18:30:a7:45:62:83:f1:de:3f:49:de: ff:aa:43:c9:23:b5:ff:8f:0d:e0:5e:46:47:bc:d8: 9e:9b:fb:a9:48:ae:93:65:71:a6:c9:ef:46:94:cd: cd:9d:86:7b:a6:f9:4d:f5:fd:f7:0e:9a:6d:91:c9: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:57:2B:54:05:60:FC:2F:50:E1:00:FF:34:11:A8:DC:30:A1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:31:72:d5:39:e6:e6:79:dd:f0:fe:7c:6d:2e:b8:5e:39:d0: 69:b4:85:90:56:3a:16:e9:45:cc:52:eb:d9:de:26:fd:41:f3: 1c:4c:2f:e4:71:a2:3f:53:85:52:20:c6:5c:49:b0:8b:18:84: 59:9c:1d:0c:2c:fa:21:68:d3:41:b1:db:c2:64:df:6a:3e:f5: 27:39:03:fb:b9:43:d0:6a:3c:54:d8:d6:be:aa:52:36:0d:9e: 17:c2:4c:f4:61:6a:a7:5d:26:8a:2a:3c:fe:57:9d:c5:be:4c: 05:6f:79:1b:4c:c8:69:be:7c:ab:57:b9:b7:17:5e:10:ff:0a: d5:92:65:12:65:0b:bf:3e:ea:96:cf:40:0e:14:11:fb:5d:15: 6e:34:e5:6e:f1:cc:e6:3a:5d:92:63:f7:d3:68:e0:04:9b:93: 23:a5:97:83:d5:3f:6f:70:4c:98:d6:41:7c:11:f1:15:63:54: d8:0b:55:f6:26:55:80:2b:97:fc:dc:e5:92:e5:7f:74:21:e6: 4f:42:51:f0:a8:d1:17:30:0e:40:4e:47:47:35:33:ce:84:4e: 28:52:a4:d3:7c:f6:a6:d2:b6:4c:b4:cf:13:7a:53:38:71:0a: d8:32:56:43:6c:d5:e5:75:df:88:83:b1:b5:b6:75:74:55:d2: bd:a3:1e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRLYqc+DrAWOco6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NjgzY2VmNDMtYzg4YS00Y2ZjLTlhZTAtYzk5MmE0MzI4NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3G79eFS48KqDcl9ujUzAQhlP0/49yrm7ueF 720PTVmDu8X7yTDBAbtdHOV8mwZanvpS921t9dYRhGimlbKr3nBlOzJlQEmN6VJq iM5mJZ6I7gO8LYz+A+R8MK0A5+ougIwuML3OnBg2QpY7bYwQSIP8ALWlPiWKnnrc k7OLAAYkZmaEzn7UW0ai4PWBdov5S5Wszev8DoAv51FrIU3AX7rXfgMq8gTrlDeV pDBjLJc+v0/5+NWyPcmZ2r57OqYLCkJYwoeYGDCnRWKD8d4/Sd7/qkPJI7X/jw3g XkZHvNiem/upSK6TZXGmye9GlM3NnYZ7pvlN9f33DpptkcmAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU+VytUBWD8L1DhAP80EajcMKFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTg3ZWEzZDQtOGVmMi0z Y2VkLTlkYzgtYWEyM2QyNjZiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoxctU55uZ53fD+fG0uuF450Gm0hZBWOhbpRcxS69neJv1B8xxML+Rx oj9ThVIgxlxJsIsYhFmcHQws+iFo00Gx28Jk32o+9Sc5A/u5Q9BqPFTY1r6qUjYN nhfCTPRhaqddJooqPP5XncW+TAVveRtMyGm+fKtXubcXXhD/CtWSZRJlC78+6pbP QA4UEftdFW405W7xzOY6XZJj99No4ASbkyOll4PVP29wTJjWQXwR8RVjVNgLVfYm VYArl/zc5ZLlf3Qh5k9CUfCo0RcwDkBOR0c1M86ETihSpNN89qbStky0zxN6Uzhx CtgyVkNs1eV134iDsbW2dXRV0r2jHhg= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:12 2026 by rpki-client