$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0008bc2-c9f9-3ff0-8294-7300b213313b.roa File: d0008bc2-c9f9-3ff0-8294-7300b213313b.roa (raw, json) Hash identifier: X0KVUiPsbzF9VAwv+mzGJ+k+re0GCKbWQEVcmvc9d/U= Subject key identifier: 37:95:66:F0:E8:45:D6:B3:13:23:E2:E1:7B:31:B2:30:73:31:08:C8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D24762946731D596361864000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0008bc2-c9f9-3ff0-8294-7300b213313b.roa Signing time: Thu 12 Mar 2026 09:28:45 +0000 ROA not before: Thu 12 Mar 2026 09:28:45 +0000 ROA not after: Wed 10 Jun 2026 09:28:45 +0000 asID: 208185 IP address blocks: 172.94.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:76:29:46:73:1d:59:63:61:86:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 12 09:28:45 2026 GMT Not After : Jun 10 09:28:45 2026 GMT Subject: CN=3619faa4-adea-4d8b-8991-4377f8f1de66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:25:98:b3:a5:84:16:8f:75:37:66:60:f8: 01:9e:58:d1:b8:c8:0f:42:38:aa:d0:8a:1f:1b:54: 23:3f:22:5c:be:5a:13:1d:6b:92:96:f3:29:08:04: 28:4a:de:50:96:f5:26:61:f9:60:ca:7d:30:e8:79: 84:76:50:6a:83:ef:52:9f:cd:a7:a1:e9:ee:07:18: 49:3d:46:8a:49:dc:22:07:ed:b2:e2:2c:69:3d:59: bc:37:87:65:ae:08:32:83:dd:49:2b:dc:25:a3:88: 6b:e9:15:b2:11:39:3d:4c:3e:dd:eb:a6:95:01:02: 60:22:9b:7d:a0:f4:72:3b:64:19:2d:28:f9:54:a3: 17:a3:9f:02:4c:4f:5e:e0:a6:25:02:cf:22:ae:89: a8:ab:0e:4d:e9:7d:0d:9c:b9:f6:85:9c:7a:50:ce: 0e:d4:3b:fd:a1:79:f6:af:7b:bb:48:73:db:20:c6: 86:5d:fa:2a:d9:fb:41:07:d9:6a:0f:13:2b:32:a4: 3c:4e:08:4f:2c:10:3a:9f:f2:ff:fe:9b:ce:96:4c: 3e:62:6a:e6:f1:8a:f2:c2:91:e3:7b:ba:8e:a3:ff: 6a:a4:2f:b8:b9:aa:b3:fa:47:93:c5:95:a3:0c:83: 60:d2:38:7f:62:3a:2c:2f:91:15:4b:48:f5:7c:ad: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:95:66:F0:E8:45:D6:B3:13:23:E2:E1:7B:31:B2:30:73:31:08:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0008bc2-c9f9-3ff0-8294-7300b213313b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a9:c4:dc:ce:1f:f3:6f:ae:03:77:6e:1c:be:3a:a6:2e:61: 7d:a9:5f:d5:cd:84:02:b5:f3:c7:de:92:6e:93:e2:aa:4d:4c: 7a:07:50:9c:0d:dd:8c:ba:eb:b7:e4:c9:e4:b2:0f:ad:ae:c7: a6:d0:45:bd:0e:fd:3c:87:5c:29:ac:95:65:69:34:a0:6e:1c: 94:30:23:84:78:e7:c4:f8:97:70:9b:f7:9a:db:a7:bc:58:cf: 31:4a:76:a5:af:4e:12:c5:15:18:7b:ce:11:38:c4:81:10:2a: 14:90:d1:8a:96:16:57:55:ea:fd:19:ca:19:13:f4:54:d7:19: b1:7e:b1:16:d9:1c:ed:5c:49:37:fb:b8:dd:18:27:51:ad:d5: 9c:fa:06:82:9d:65:d7:4d:8c:f1:37:2d:53:fb:56:10:49:6b: 79:4a:14:6e:cc:64:3c:26:55:67:bf:57:65:3f:2a:2a:f8:3d: e9:e9:55:eb:1c:40:3c:5b:15:07:59:fe:d8:10:a8:67:cd:8f: f7:e9:57:ae:90:e9:a2:d4:de:30:48:8a:c9:10:58:af:88:80: 3c:a6:74:32:c1:92:a3:17:f6:c2:47:0b:fc:9a:71:d9:d3:09: 46:4b:82:a5:ee:7c:f0:f4:98:78:b6:31:32:91:24:42:8d:2c: 4a:58:8a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0kdilGcx1ZY2GGQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxMjA5Mjg0NVoXDTI2MDYxMDA5Mjg0NVowLzEtMCsGA1UEAxMk MzYxOWZhYTQtYWRlYS00ZDhiLTg5OTEtNDM3N2Y4ZjFkZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybslmLOlhBaPdTdmYPgBnljRuMgPQjiq0Iof G1QjPyJcvloTHWuSlvMpCAQoSt5QlvUmYflgyn0w6HmEdlBqg+9Sn82noenuBxhJ PUaKSdwiB+2y4ixpPVm8N4dlrggyg91JK9wlo4hr6RWyETk9TD7d66aVAQJgIpt9 oPRyO2QZLSj5VKMXo58CTE9e4KYlAs8iromoqw5N6X0NnLn2hZx6UM4O1Dv9oXn2 r3u7SHPbIMaGXfoq2ftBB9lqDxMrMqQ8TghPLBA6n/L//pvOlkw+Ymrm8YrywpHj e7qOo/9qpC+4uaqz+keTxZWjDINg0jh/YjosL5EVS0j1fK1Q8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeVZvDoRdazEyPi4XsxsjBzMQjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDAwMDhiYzItYzlmOS0z ZmYwLTgyOTQtNzMwMGIyMTMzMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2pxNzOH/NvrgN3bhy+OqYuYX2pX9XNhAK188fekm6T4qpNTHoHUJwN 3Yy667fkyeSyD62ux6bQRb0O/TyHXCmslWVpNKBuHJQwI4R458T4l3Cb95rbp7xY zzFKdqWvThLFFRh7zhE4xIEQKhSQ0YqWFldV6v0ZyhkT9FTXGbF+sRbZHO1cSTf7 uN0YJ1Gt1Zz6BoKdZddNjPE3LVP7VhBJa3lKFG7MZDwmVWe/V2U/Kir4PenpVesc QDxbFQdZ/tgQqGfNj/fpV66Q6aLU3jBIiskQWK+IgDymdDLBkqMX9sJHC/yacdnT CUZLgqXufPD0mHi2MTKRJEKNLEpYiuE= -----END CERTIFICATE-----Generated at Sat Mar 21 12:17:15 2026 by rpki-client