$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa File: f393d880-9d6e-3953-a98b-12516ebc54b1.roa (raw, json) Hash identifier: qkJ9N5MGUQ9E0bfv/U3KnXCP5DfJ1DOAzS/7i0NhsOM= Subject key identifier: A1:71:DE:66:4F:4D:DF:73:D5:BC:17:2A:8A:F0:78:DD:8A:62:22:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E7204D56E51BD461EAE86F682 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 212238 IP address blocks: 172.94.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d5:6e:51:bd:46:1e:ae:86:f6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=bed277b1-67c9-4924-ad61-8f1d768d6e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:3f:b7:0a:d6:cd:09:8f:e9:2a:21:c0:b0: 60:0e:4d:a8:9a:44:34:1b:41:16:ec:2a:4f:c4:ff: ad:5c:49:66:e3:73:b9:d1:d3:4a:56:51:84:db:4a: f0:70:7e:fc:cd:3e:83:6c:75:cc:4e:7b:d6:fc:c4: bf:a4:83:d6:67:39:78:fb:29:0c:71:5e:1c:ac:10: 19:81:b8:1e:43:58:f2:82:32:b7:cc:d0:2f:fc:ec: 02:b1:6c:f9:82:f5:c9:0b:bf:9e:55:f2:87:cb:41: 05:80:1a:7d:cb:bd:70:2f:94:8f:88:45:d6:4d:a7: 37:10:59:38:9d:f9:18:ea:c8:21:34:5f:79:6b:53: d5:c3:6e:67:c7:fa:09:81:5d:d6:b6:d6:2b:d4:37: 7f:f2:07:1e:62:e9:03:82:9c:d6:0c:a1:3e:a3:3a: e8:b4:ab:6c:6a:a6:eb:59:4a:a4:cc:17:53:6f:5e: d5:38:e3:b6:27:81:fa:ec:16:ce:4d:87:87:84:92: 46:73:29:54:d0:65:2c:62:30:79:80:91:7b:be:50: a7:ea:3d:96:1a:1c:aa:47:d3:c6:86:f9:ff:7e:00: 01:37:f3:56:8a:b7:51:de:69:c7:f4:82:58:f5:51: e0:1b:c6:13:e4:3a:7e:fd:3f:b0:a4:ad:12:e4:4a: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:DE:66:4F:4D:DF:73:D5:BC:17:2A:8A:F0:78:DD:8A:62:22:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5b:33:39:74:ec:16:0c:c3:41:ca:4c:0c:cd:cb:53:03:7f: 60:fe:55:71:8e:11:9b:fc:9f:85:f4:33:1b:7b:e7:27:7c:56: 0a:ba:54:e1:c8:41:67:3d:02:b6:27:e0:8d:fc:8f:df:4d:df: f9:6b:72:b3:65:1c:1f:db:34:93:87:48:f6:6a:de:c3:fa:ff: 66:c3:57:05:a0:3b:dd:65:64:99:61:f6:85:d9:e3:e1:56:d4: 25:a2:4f:b9:86:1b:4b:00:68:af:b5:e7:a0:00:bc:65:b9:4d: f9:a1:e0:23:43:4f:ab:06:3f:04:c8:fc:f3:d1:b7:4c:28:1f: 5e:69:ae:20:75:7d:19:42:5a:7b:35:6f:58:be:d0:09:44:ec: 33:57:3d:b9:aa:93:71:e7:52:65:b7:52:df:3a:ea:ed:df:a1: df:cf:22:33:f2:5c:38:69:e2:42:c0:37:04:e5:5e:a9:ec:00: 8c:7c:d3:36:4c:38:63:e5:0f:51:73:93:ef:56:3b:2f:e1:eb: 4e:37:a4:bd:8b:d4:74:8d:28:3d:6f:b7:82:ef:22:2f:cf:79: 9d:4d:04:ea:8a:60:fb:96:0b:69:d9:37:10:66:12:99:76:5c: 5d:47:b9:56:0c:14:37:3a:07:cb:8c:9b:89:00:42:f6:7e:6a: 6f:c3:b7:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNVuUb1GHq6G9oIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YmVkMjc3YjEtNjdjOS00OTI0LWFkNjEtOGYxZDc2OGQ2ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGQ/twrWzQmP6SohwLBgDk2omkQ0G0EW7CpP xP+tXElm43O50dNKVlGE20rwcH78zT6DbHXMTnvW/MS/pIPWZzl4+ykMcV4crBAZ gbgeQ1jygjK3zNAv/OwCsWz5gvXJC7+eVfKHy0EFgBp9y71wL5SPiEXWTac3EFk4 nfkY6sghNF95a1PVw25nx/oJgV3WttYr1Dd/8gceYukDgpzWDKE+ozrotKtsaqbr WUqkzBdTb17VOOO2J4H67BbOTYeHhJJGcylU0GUsYjB5gJF7vlCn6j2WGhyqR9PG hvn/fgABN/NWirdR3mnH9IJY9VHgG8YT5Dp+/T+wpK0S5ErLqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFx3mZPTd9z1bwXKorweN2KYiJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjM5M2Q4ODAtOWQ2ZS0z OTUzLWE5OGItMTI1MTZlYmM1NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxbMzl07BYMw0HKTAzNy1MDf2D+VXGOEZv8n4X0Mxt75yd8Vgq6VOHI QWc9ArYn4I38j99N3/lrcrNlHB/bNJOHSPZq3sP6/2bDVwWgO91lZJlh9oXZ4+FW 1CWiT7mGG0sAaK+156AAvGW5Tfmh4CNDT6sGPwTI/PPRt0woH15priB1fRlCWns1 b1i+0AlE7DNXPbmqk3HnUmW3Ut866u3fod/PIjPyXDhp4kLANwTlXqnsAIx80zZM OGPlD1Fzk+9WOy/h6043pL2L1HSNKD1vt4LvIi/PeZ1NBOqKYPuWC2nZNxBmEpl2 XF1HuVYMFDc6B8uMm4kAQvZ+am/Dt2A= -----END CERTIFICATE-----Generated at Tue Jul 21 14:58:52 2026 by rpki-client