$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa File: c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa (raw, json) Hash identifier: j/EKhNh/JYeZ1Ayo+OQokTcFFwu3u+SSyX02T5UajYE= Subject key identifier: 3E:20:BE:7A:6E:3B:8A:7D:F0:C1:D8:DB:66:95:FD:68:5A:D6:B6:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E66DA1C7AD016C6F4470DFD00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 206264 IP address blocks: 172.94.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:1c:7a:d0:16:c6:f4:47:0d:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=5c83e8df-831b-4613-b0e3-319afc4455c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:52:fe:a7:48:04:42:9f:69:f9:55:d9:1e: db:ef:39:ec:d3:12:e9:3a:76:53:c7:aa:f2:33:ca: 2c:6b:c9:ce:28:1b:b6:5d:2c:50:90:a8:cf:1b:46: 9d:24:75:5b:2e:77:09:4c:e7:18:ef:21:42:92:0f: f5:fa:97:25:ce:0f:40:79:c5:76:98:ad:21:9a:af: 79:60:fa:57:93:5a:a5:32:43:f0:00:e3:24:9d:db: 76:07:51:5a:44:24:2f:87:c6:48:43:19:26:7c:f6: 9f:3c:11:d4:81:c3:9b:a8:01:47:a4:48:1c:87:51: 50:c2:b9:cc:33:9c:20:15:b6:e5:1d:f7:30:ee:ee: 43:6e:0c:81:ae:61:9c:55:9a:cf:c7:5e:62:f2:73: c0:e9:3b:96:55:86:8e:1d:c8:3a:f8:50:28:4c:eb: d6:79:27:7b:49:60:05:1e:fd:8b:4d:bf:ce:cd:82: 3b:46:4d:15:6f:50:82:4c:b4:91:5f:4c:2b:80:49: e7:72:03:e6:9b:37:a3:dd:0d:3a:e1:2e:5d:25:12: 5d:66:c7:4a:88:5b:5a:9c:34:ca:b9:db:c2:b2:90: c4:76:c0:41:7a:28:ca:e9:07:8a:fd:2f:6d:44:5e: 32:51:8e:01:b7:0a:4a:0d:4f:9b:6a:1d:06:79:a4: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:BE:7A:6E:3B:8A:7D:F0:C1:D8:DB:66:95:FD:68:5A:D6:B6:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e8:01:46:d7:b7:be:0e:8b:98:56:d1:dd:5b:ae:9b:7b:ad: ae:2f:81:30:7e:f7:f0:20:d2:bc:8a:96:6c:cb:57:9a:80:21: f3:c3:3b:42:c0:7b:13:f9:8b:fa:22:86:b0:c4:88:6f:fe:47: f0:e6:39:d4:77:13:6e:56:c3:d9:4a:89:0c:10:29:07:30:0b: 45:12:56:5d:df:30:13:8c:1a:37:69:f4:c2:e0:3b:29:64:83: bf:5d:df:5d:d0:97:44:06:1b:cc:d1:30:e0:7c:10:12:af:ca: 41:07:77:8b:86:26:84:81:b5:d7:8a:eb:e1:58:16:57:16:77: 5a:3b:48:af:40:f4:0a:98:62:3e:d8:70:c1:29:95:cd:1d:cc: 87:b1:9b:cb:2a:54:d2:26:db:40:3e:a9:db:bc:04:5f:a3:f9: 80:ac:7d:93:95:c1:d0:1e:4a:cd:17:8f:61:1f:2c:8b:d1:23: 69:fa:05:8c:0d:99:a6:55:5b:44:34:8c:fa:e8:94:6d:96:51: b0:7a:7c:b7:6f:77:77:98:24:62:f9:57:9a:a4:8a:dd:b2:36: 32:a6:12:bc:79:da:cb:8d:b9:c6:d7:40:81:d2:55:74:06:98: 0d:6e:e9:5a:72:18:5a:fa:64:59:73:b1:a8:75:6b:30:bc:a5: 3b:f7:4b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hx60BbG9EcN/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NWM4M2U4ZGYtODMxYi00NjEzLWIwZTMtMzE5YWZjNDQ1NWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRVS/qdIBEKfaflV2R7b7zns0xLpOnZTx6ry M8osa8nOKBu2XSxQkKjPG0adJHVbLncJTOcY7yFCkg/1+pclzg9AecV2mK0hmq95 YPpXk1qlMkPwAOMkndt2B1FaRCQvh8ZIQxkmfPafPBHUgcObqAFHpEgch1FQwrnM M5wgFbblHfcw7u5DbgyBrmGcVZrPx15i8nPA6TuWVYaOHcg6+FAoTOvWeSd7SWAF Hv2LTb/OzYI7Rk0Vb1CCTLSRX0wrgEnncgPmmzej3Q064S5dJRJdZsdKiFtanDTK udvCspDEdsBBeijK6QeK/S9tRF4yUY4BtwpKDU+bah0GeaT50wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4gvnpuO4p98MHY22aV/Wha1rZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzhmNWM1ZTEtMTczMC0z YWM2LThkOTUtNGU5NDc0ZjczODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACToAUbXt74Oi5hW0d1brpt7ra4vgTB+9/Ag0ryKlmzLV5qAIfPDO0LA exP5i/oihrDEiG/+R/DmOdR3E25Ww9lKiQwQKQcwC0USVl3fMBOMGjdp9MLgOylk g79d313Ql0QGG8zRMOB8EBKvykEHd4uGJoSBtdeK6+FYFlcWd1o7SK9A9AqYYj7Y cMEplc0dzIexm8sqVNIm20A+qdu8BF+j+YCsfZOVwdAeSs0Xj2EfLIvRI2n6BYwN maZVW0Q0jProlG2WUbB6fLdvd3eYJGL5V5qkit2yNjKmErx52suNucbXQIHSVXQG mA1u6VpyGFr6ZFlzsah1azC8pTv3SyE= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:27 2026 by rpki-client