$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa File: cd2df271-2b95-385d-832e-feca68b24c5f.roa (raw, json) Hash identifier: seKXcpIzS0qXjsvP3HrjXTtvSbftnmifHEimDxYvqAk= Subject key identifier: FE:5D:B3:6C:95:FD:90:7F:D6:13:3E:A6:5A:E0:38:0C:DE:F8:51:E8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E2F0459979AB0D2FE08BE56C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 132372 IP address blocks: 172.94.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:59:97:9a:b0:d2:fe:08:be:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=01687160-f4dc-4b7c-b536-a0fe32469808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:68:45:d2:18:bb:cd:59:46:22:39:c8:ba:99: 49:f2:85:10:0f:4b:49:c3:81:ee:e1:c1:e6:93:d8: 02:d2:01:17:82:2c:a4:ab:1d:f5:4d:26:f8:2d:09: dd:ed:2c:4c:27:bc:cf:9b:fa:8f:50:5d:39:32:bb: cd:7e:cd:52:3a:12:98:bc:b1:a7:0a:0e:b8:66:34: 4b:2b:84:a5:17:0a:d9:25:75:53:d7:a5:b7:f4:ce: 92:09:41:7a:c2:bb:b1:30:1d:a6:95:44:ba:6a:18: cc:ab:7f:69:99:da:4f:79:29:bf:1b:69:24:50:38: 0a:ed:a1:be:0d:f3:d6:34:d1:32:0d:d3:3d:b1:dd: 03:22:fc:60:9a:1a:1a:86:4b:ca:65:8f:b4:e6:0b: 53:59:0f:fd:59:98:5a:fb:3e:8a:89:d6:21:ee:d7: a7:c6:aa:a1:5f:61:e5:fa:a7:55:5b:7b:2f:8a:6a: 36:41:87:a1:5a:c9:3b:ab:03:8b:57:ab:09:a0:74: 20:31:91:2d:26:5f:13:c9:50:5d:61:42:4d:d8:60: 1c:6a:18:f3:43:42:f9:c0:e7:99:74:d5:9d:25:07: 29:6f:32:6b:ed:d2:3a:56:81:c5:30:8a:97:1d:8d: a4:fc:e6:f9:4c:43:d3:bc:c6:26:e7:49:51:9c:db: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5D:B3:6C:95:FD:90:7F:D6:13:3E:A6:5A:E0:38:0C:DE:F8:51:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e3:6f:55:7f:27:74:76:e8:30:b4:dd:dc:cf:a4:3a:a6:d3: a3:1e:ea:6b:15:fa:f1:bf:ab:cf:62:6a:0a:f3:b7:bd:a2:73: 4b:d9:34:44:74:a7:b8:a3:dd:4e:a1:45:63:25:9a:9b:79:fe: c2:70:4c:48:3c:06:70:2f:57:94:e0:07:71:c2:4f:a2:47:21: c6:f1:3c:88:0f:1f:fe:bc:7d:a9:c5:33:60:64:2c:79:51:7a: 67:39:c4:21:05:e9:36:0c:b7:89:73:55:7f:2d:ba:56:82:89: 1e:43:43:86:94:cd:f8:e1:5c:67:9a:2e:fd:4a:c2:89:41:27: 61:1d:02:ac:2d:4b:90:dc:e9:bc:e3:e1:3d:6c:e5:3d:b2:ca: 96:8f:83:0d:f8:90:a1:27:ab:34:01:c5:e5:18:63:74:73:a0: bb:2c:56:73:49:53:0d:4c:9c:e8:99:e0:c5:13:09:11:27:b2: 9c:d7:30:e3:f0:e0:76:b8:af:57:f7:62:24:9c:3f:55:07:c0: 90:47:30:57:bd:cb:ed:70:80:1f:e2:51:b5:91:80:b8:13:8e: 70:b6:a8:10:55:fb:cb:b3:31:89:99:b8:27:c9:ff:07:a6:ea: 44:b4:6c:9e:60:b6:40:8b:ec:b0:ab:24:d6:94:08:9b:7c:5b: 33:5b:41:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFmXmrDS/gi+VsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk MDE2ODcxNjAtZjRkYy00YjdjLWI1MzYtYTBmZTMyNDY5ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGhF0hi7zVlGIjnIuplJ8oUQD0tJw4Hu4cHm k9gC0gEXgiykqx31TSb4LQnd7SxMJ7zPm/qPUF05MrvNfs1SOhKYvLGnCg64ZjRL K4SlFwrZJXVT16W39M6SCUF6wruxMB2mlUS6ahjMq39pmdpPeSm/G2kkUDgK7aG+ DfPWNNEyDdM9sd0DIvxgmhoahkvKZY+05gtTWQ/9WZha+z6KidYh7tenxqqhX2Hl +qdVW3svimo2QYehWsk7qwOLV6sJoHQgMZEtJl8TyVBdYUJN2GAcahjzQ0L5wOeZ dNWdJQcpbzJr7dI6VoHFMIqXHY2k/Ob5TEPTvMYm50lRnNtWyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5ds2yV/ZB/1hM+plrgOAze+FHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2QyZGYyNzEtMmI5NS0z ODVkLTgzMmUtZmVjYTY4YjI0YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDjb1V/J3R26DC03dzPpDqm06Me6msV+vG/q89iagrzt72ic0vZNER0 p7ij3U6hRWMlmpt5/sJwTEg8BnAvV5TgB3HCT6JHIcbxPIgPH/68fanFM2BkLHlR emc5xCEF6TYMt4lzVX8tulaCiR5DQ4aUzfjhXGeaLv1KwolBJ2EdAqwtS5Dc6bzj 4T1s5T2yypaPgw34kKEnqzQBxeUYY3RzoLssVnNJUw1MnOiZ4MUTCREnspzXMOPw 4Ha4r1f3YiScP1UHwJBHMFe9y+1wgB/iUbWRgLgTjnC2qBBV+8uzMYmZuCfJ/wem 6kS0bJ5gtkCL7LCrJNaUCJt8WzNbQX4= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:14 2026 by rpki-client