$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa File: ecc2d811-2654-3b7a-a080-044317643aa7.roa (raw, json) Hash identifier: KhIV9Eg4OAuLQ91nZM1453t8Eq//f/shFPEgaKg5KS4= Subject key identifier: C9:00:B5:7F:1F:DC:B8:04:B0:E0:B1:3F:AC:EC:84:E4:BC:14:19:22 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E2F045C233F38DCAFA8B14480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 132372 IP address blocks: 172.94.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:5c:23:3f:38:dc:af:a8:b1:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=4156993e-4d16-4d9b-99b3-4a3b621a319c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:6e:44:a1:bb:05:af:3c:ce:79:63:f2:16: 4f:a0:52:0b:8a:bf:2e:fb:57:41:88:00:d7:e1:82: df:7c:bb:f7:ae:90:37:84:36:2f:67:9b:35:db:3c: 86:a7:90:56:2a:7e:dc:23:8c:01:cc:98:e3:3d:e5: 74:a1:6e:13:77:84:80:f6:62:8b:e2:54:d9:00:7d: 34:3f:35:7b:38:78:a6:b5:4c:bf:4e:c4:68:69:fc: 14:75:ad:c1:36:4f:22:6a:32:e4:02:7a:a6:32:c6: e4:82:63:94:89:78:18:16:29:f9:e2:78:9a:b9:b0: c1:ff:63:2f:77:38:c2:13:e5:bd:81:f5:49:cd:6c: 9e:bf:69:76:81:a3:7c:c9:68:93:72:a7:05:bc:a7: 41:1f:39:39:57:5e:69:e6:b0:6a:67:af:c5:dc:61: 57:c3:18:0f:f0:41:76:01:df:59:17:5d:db:05:e5: de:40:1e:53:40:ed:86:af:af:c7:b6:bc:bf:bd:b3: 59:71:31:69:c6:79:bd:84:ef:4e:e8:19:17:49:52: e0:e0:2e:a8:ff:f2:69:10:ab:e0:cc:83:78:43:74: 5c:bd:0b:8a:14:ee:bb:76:ef:5b:cd:e0:49:75:bb: a4:33:f7:9a:4f:a4:e0:f2:d3:71:dd:18:a6:5a:e6: cb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:00:B5:7F:1F:DC:B8:04:B0:E0:B1:3F:AC:EC:84:E4:BC:14:19:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:83:9f:65:d4:f6:28:f1:a0:24:80:e2:e2:1e:39:85:c8:16: b3:5e:d7:2c:ca:12:df:64:6b:5f:e4:cd:35:61:5c:a3:d6:e9: 8c:29:bd:8e:1a:8f:0a:3e:b0:19:46:dd:6b:07:e2:59:45:54: 68:7d:45:f1:5c:2a:78:c4:6e:07:fd:d0:fd:dd:24:7c:07:44: 17:cb:c7:cb:a4:0e:1e:b1:24:8b:31:39:0e:ee:dc:e9:a1:00: c2:08:e2:fe:26:cf:3b:56:ac:6a:d1:f5:ad:e4:c9:2c:de:11: ed:aa:bf:ed:19:59:af:67:2f:33:81:bf:91:c2:b9:18:77:0b: f0:e1:6c:ba:9e:b6:ea:ec:dc:f5:74:f0:ca:32:0f:d3:4e:28: 10:15:cf:1d:eb:c8:4c:da:83:cb:d5:5c:88:32:d8:ae:11:19: 07:0c:d4:1a:c4:7c:4b:02:e0:cd:ac:43:e2:98:ea:5c:c7:87: 46:52:94:24:8d:49:f9:0f:58:61:7e:5f:90:f5:20:db:84:ad: f3:de:04:d8:3e:1f:11:4c:fd:81:c6:f6:3d:ed:4b:d4:46:6c: c2:66:6c:b1:bf:a9:65:78:b1:29:e2:e6:b4:8e:09:c6:ae:d9: 21:65:75:40:28:0c:41:a9:3a:32:7b:d9:bc:38:b6:6c:64:b0: 5e:0a:54:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFwjPzjcr6ixRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk NDE1Njk5M2UtNGQxNi00ZDliLTk5YjMtNGEzYjYyMWEzMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG5uRKG7Ba88znlj8hZPoFILir8u+1dBiADX 4YLffLv3rpA3hDYvZ5s12zyGp5BWKn7cI4wBzJjjPeV0oW4Td4SA9mKL4lTZAH00 PzV7OHimtUy/TsRoafwUda3BNk8iajLkAnqmMsbkgmOUiXgYFin54niaubDB/2Mv dzjCE+W9gfVJzWyev2l2gaN8yWiTcqcFvKdBHzk5V15p5rBqZ6/F3GFXwxgP8EF2 Ad9ZF13bBeXeQB5TQO2Gr6/Htry/vbNZcTFpxnm9hO9O6BkXSVLg4C6o//JpEKvg zIN4Q3RcvQuKFO67du9bzeBJdbukM/eaT6Tg8tNx3RimWubLWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkAtX8f3LgEsOCxP6zshOS8FBkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWNjMmQ4MTEtMjY1NC0z YjdhLWEwODAtMDQ0MzE3NjQzYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2Dn2XU9ijxoCSA4uIeOYXIFrNe1yzKEt9ka1/kzTVhXKPW6YwpvY4a jwo+sBlG3WsH4llFVGh9RfFcKnjEbgf90P3dJHwHRBfLx8ukDh6xJIsxOQ7u3Omh AMII4v4mzztWrGrR9a3kySzeEe2qv+0ZWa9nLzOBv5HCuRh3C/DhbLqeturs3PV0 8MoyD9NOKBAVzx3ryEzag8vVXIgy2K4RGQcM1BrEfEsC4M2sQ+KY6lzHh0ZSlCSN SfkPWGF+X5D1INuErfPeBNg+HxFM/YHG9j3tS9RGbMJmbLG/qWV4sSni5rSOCcau 2SFldUAoDEGpOjJ72bw4tmxksF4KVKY= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:08 2026 by rpki-client