$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b8d00d-c6bd-3f14-829f-f703459d4649.roa File: b2b8d00d-c6bd-3f14-829f-f703459d4649.roa (raw, json) Hash identifier: OUFrwVxhphGji9iAr2JSgXwnzigkFBCcJYxbvTlCZpE= Subject key identifier: D1:32:02:0A:F5:31:D3:F9:A8:37:7A:F0:41:B5:B4:80:30:B7:17:FC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D88CDDB6076133FD4B12D3CE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b8d00d-c6bd-3f14-829f-f703459d4649.roa Signing time: Fri 17 Apr 2026 08:06:17 +0000 ROA not before: Fri 17 Apr 2026 08:06:17 +0000 ROA not after: Thu 16 Jul 2026 08:06:17 +0000 asID: 9009 IP address blocks: 172.94.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:cd:db:60:76:13:3f:d4:b1:2d:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 17 08:06:17 2026 GMT Not After : Jul 16 08:06:17 2026 GMT Subject: CN=54a037b4-ba8d-48a4-99d0-bbd81731ebee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:e2:84:6f:76:96:fc:f0:d9:06:fd:eb:39: 0a:82:66:84:d8:66:0e:5f:0e:2f:4a:b5:67:e9:02: 49:96:2b:a6:ad:04:0e:73:aa:7b:a5:99:7b:d6:a6: 5e:93:cb:63:47:52:a3:df:d8:1b:f5:67:ff:fd:5b: 15:e7:16:f5:39:d3:bb:d0:cc:c1:d6:aa:7b:73:ed: 41:44:7f:61:f5:12:b1:3c:32:c2:18:76:ef:f5:11: a3:1c:21:f8:cd:48:cd:dc:f4:e4:af:e9:64:b7:fc: 1a:8a:da:ab:0a:d6:5c:48:33:cd:15:cc:5f:18:8b: ff:91:d4:3a:25:01:83:e5:e8:76:1b:17:50:c6:06: 26:5c:04:9d:8e:ba:dc:ac:7d:fd:46:7e:19:02:2b: 97:93:ed:08:d7:bf:2f:41:c5:7a:83:f9:95:16:b0: 23:55:c9:00:84:cc:61:d0:1b:84:1a:4a:f5:b3:78: d8:b1:d7:f9:97:15:33:44:c6:fa:c5:08:a8:3d:f2: 99:cb:41:38:96:d1:c1:09:7b:d3:d5:f9:01:95:88: 64:df:39:d8:95:8a:7b:a9:ce:0b:5e:86:ad:f4:a7: 49:91:06:e4:fd:51:a7:70:02:c2:18:26:54:f9:5e: 3c:24:2d:e4:a4:2f:cd:15:63:26:18:17:5c:aa:67: d2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:32:02:0A:F5:31:D3:F9:A8:37:7A:F0:41:B5:B4:80:30:B7:17:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b8d00d-c6bd-3f14-829f-f703459d4649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:44:2e:a8:39:f6:b3:4f:c3:aa:c8:67:48:8b:3d:63:5f:75: cb:05:6d:24:d7:36:cf:04:d1:64:76:ab:19:6a:14:20:f8:11: b3:e3:08:f2:1d:e2:2d:10:95:91:38:78:53:e1:b1:46:41:42: a0:ed:b0:16:3c:7d:30:88:8b:9f:3d:15:fd:ee:c4:11:d0:66: 90:c5:d0:08:a3:14:01:8e:c3:e7:5f:e0:05:fd:05:ad:e7:e4: 3e:3c:a2:8b:7b:26:9d:ec:c0:a1:af:b1:0c:f5:2c:78:4b:21: 6e:c5:40:d1:ad:4f:47:1e:56:8f:15:3b:09:e0:ec:3b:6d:a8: 32:34:80:7b:22:b6:c4:45:cc:91:f1:c0:c1:cb:98:59:07:47: cd:fc:71:a0:4e:bc:47:75:c8:b5:e1:fc:c1:d1:48:cc:0c:5d: 93:a9:93:c1:08:22:e2:07:47:10:a3:4e:5b:62:31:55:d7:47: af:b9:9d:1a:77:6c:9d:54:4b:0d:bf:c4:48:ac:fd:12:3a:00: a4:3d:6c:dc:8c:4e:41:73:40:b1:7a:9c:e6:2d:5f:f2:c0:37: a8:f9:b2:0e:76:9b:e1:a6:e6:f3:48:bb:ed:41:5b:34:2a:c8: 29:f3:01:97:48:df:41:a3:86:0f:08:2a:6e:8e:4d:50:9c:b5: ef:86:d9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2IzdtgdhM/1LEtPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxNzA4MDYxN1oXDTI2MDcxNjA4MDYxN1owLzEtMCsGA1UEAxMk NTRhMDM3YjQtYmE4ZC00OGE0LTk5ZDAtYmJkODE3MzFlYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxanihG92lvzw2Qb96zkKgmaE2GYOXw4vSrVn 6QJJliumrQQOc6p7pZl71qZek8tjR1Kj39gb9Wf//VsV5xb1OdO70MzB1qp7c+1B RH9h9RKxPDLCGHbv9RGjHCH4zUjN3PTkr+lkt/waitqrCtZcSDPNFcxfGIv/kdQ6 JQGD5eh2GxdQxgYmXASdjrrcrH39Rn4ZAiuXk+0I178vQcV6g/mVFrAjVckAhMxh 0BuEGkr1s3jYsdf5lxUzRMb6xQioPfKZy0E4ltHBCXvT1fkBlYhk3znYlYp7qc4L Xoat9KdJkQbk/VGncALCGCZU+V48JC3kpC/NFWMmGBdcqmfSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEyAgr1MdP5qDd68EG1tIAwtxf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjJiOGQwMGQtYzZiZC0z ZjE0LTgyOWYtZjcwMzQ1OWQ0NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1ELqg59rNPw6rIZ0iLPWNfdcsFbSTXNs8E0WR2qxlqFCD4EbPjCPId 4i0QlZE4eFPhsUZBQqDtsBY8fTCIi589Ff3uxBHQZpDF0AijFAGOw+df4AX9Ba3n 5D48oot7Jp3swKGvsQz1LHhLIW7FQNGtT0ceVo8VOwng7DttqDI0gHsitsRFzJHx wMHLmFkHR838caBOvEd1yLXh/MHRSMwMXZOpk8EIIuIHRxCjTltiMVXXR6+5nRp3 bJ1USw2/xEis/RI6AKQ9bNyMTkFzQLF6nOYtX/LAN6j5sg52m+Gm5vNIu+1BWzQq yCnzAZdI30Gjhg8IKm6OTVCcte+G2aw= -----END CERTIFICATE-----Generated at Sat Apr 18 22:20:19 2026 by rpki-client