$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/067673be-5a2a-3601-90bf-b5dd9c2790db.roa File: 067673be-5a2a-3601-90bf-b5dd9c2790db.roa (raw, json) Hash identifier: ZpgCbt+5Jac6F7FWUj7prY3Apk3GZW+6txOnL1JVBig= Subject key identifier: 73:7E:62:07:00:26:89:6A:E2:3E:9C:AA:0B:35:07:B5:2E:C9:3D:9C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBF9E8E4CD9AF7079B9BC60 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/067673be-5a2a-3601-90bf-b5dd9c2790db.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:9e:8e:4c:d9:af:70:79:b9:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=03ceff47-1629-4d7e-9570-7414ba64674a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:5c:89:5a:43:71:a3:fc:91:a7:e6:c8:a2: dc:d6:e6:22:bb:17:21:1c:67:f5:bd:d5:1e:51:1b: 5c:97:23:55:34:a7:6d:69:38:a5:6e:95:a2:8c:9d: 34:d4:5d:64:af:93:93:18:c5:f6:53:5c:e8:12:c5: 3c:b4:48:26:bc:e9:8b:ef:da:11:21:f1:40:d0:5a: c5:75:55:c8:5c:b4:ee:8e:16:bb:52:b0:35:69:04: 6a:8a:29:bf:c8:c9:be:50:ac:7b:07:fc:2e:79:2f: 2f:5a:de:c4:1a:b0:b0:68:84:df:bc:a1:ce:79:af: ca:a7:05:e9:f8:fd:44:23:50:1f:89:8a:92:c7:66: f9:67:0f:21:5e:67:31:b4:7d:94:4f:83:9a:eb:32: cf:17:97:75:4e:f0:9c:0e:01:0a:e1:3f:61:63:76: 68:dc:18:e2:a3:b1:f6:eb:26:ac:90:1d:45:2a:97: 77:8f:a2:c3:41:a8:b5:61:2f:90:f5:29:b0:e1:a5: ea:5d:9d:5d:d6:ed:37:a2:07:fe:a5:8a:7e:14:a6: 76:4b:33:79:ba:63:82:9c:e3:5a:08:45:81:37:04: 66:6a:f9:dd:80:ea:b9:27:92:93:18:25:c6:5c:05: 19:af:a7:63:51:a6:4d:9a:00:ea:6b:e4:dc:01:d6: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:62:07:00:26:89:6A:E2:3E:9C:AA:0B:35:07:B5:2E:C9:3D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/067673be-5a2a-3601-90bf-b5dd9c2790db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ad:23:66:f5:dd:46:6e:56:f0:eb:33:5b:38:09:14:c6:fb: e4:b6:d8:b3:88:94:01:e6:b4:86:97:97:f4:d4:1e:2e:7c:ef: cb:1e:52:4b:bb:2f:c9:7c:4c:de:be:b0:e0:4a:d3:c5:80:f3: 94:e0:f8:0c:07:ee:6d:f0:1c:5a:09:98:2d:f9:65:11:27:2f: b0:71:e0:c9:e9:06:da:d9:57:6f:81:86:11:71:ce:88:de:fb: 21:13:4b:61:8c:fb:c5:cc:4c:7e:c4:f7:5d:50:58:82:7c:9b: e7:32:6e:36:07:c7:cf:33:47:b6:74:ed:8b:a1:87:24:a0:46: da:32:db:4b:4a:11:70:aa:1e:6f:da:b8:8e:c7:1a:46:79:d1: 6b:5a:7f:84:ce:60:fa:e1:bf:7e:dd:cc:7e:2a:6b:3e:20:6e: 2a:aa:54:00:02:3f:0d:7f:ca:77:83:68:92:57:7c:5a:01:7f: 42:3f:76:0a:6b:32:70:f9:78:eb:5e:95:1a:76:8e:a1:13:f5: 11:3c:2f:a9:e4:51:eb:8f:d4:b5:58:d0:10:06:25:46:26:05: 97:ac:26:a0:bd:85:c5:d8:fd:43:cc:f4:49:86:b7:26:ff:97: 9c:12:49:82:47:15:78:c4:77:03:f1:84:c6:4f:82:9b:34:a4: cb:f3:96:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov56OTNmvcHm5vGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk MDNjZWZmNDctMTYyOS00ZDdlLTk1NzAtNzQxNGJhNjQ2NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwNciVpDcaP8kafmyKLc1uYiuxchHGf1vdUe URtclyNVNKdtaTilbpWijJ001F1kr5OTGMX2U1zoEsU8tEgmvOmL79oRIfFA0FrF dVXIXLTujha7UrA1aQRqiim/yMm+UKx7B/wueS8vWt7EGrCwaITfvKHOea/KpwXp +P1EI1AfiYqSx2b5Zw8hXmcxtH2UT4Oa6zLPF5d1TvCcDgEK4T9hY3Zo3Bjio7H2 6yaskB1FKpd3j6LDQai1YS+Q9Smw4aXqXZ1d1u03ogf+pYp+FKZ2SzN5umOCnONa CEWBNwRmavndgOq5J5KTGCXGXAUZr6djUaZNmgDqa+TcAdZyFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN+YgcAJolq4j6cqgs1B7UuyT2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDY3NjczYmUtNWEyYS0z NjAxLTkwYmYtYjVkZDljMjc5MGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACytI2b13UZuVvDrM1s4CRTG++S22LOIlAHmtIaXl/TUHi5878seUku7 L8l8TN6+sOBK08WA85Tg+AwH7m3wHFoJmC35ZREnL7Bx4MnpBtrZV2+BhhFxzoje +yETS2GM+8XMTH7E911QWIJ8m+cybjYHx88zR7Z07YuhhySgRtoy20tKEXCqHm/a uI7HGkZ50Wtaf4TOYPrhv37dzH4qaz4gbiqqVAACPw1/yneDaJJXfFoBf0I/dgpr MnD5eOtelRp2jqET9RE8L6nkUeuP1LVY0BAGJUYmBZesJqC9hcXY/UPM9EmGtyb/ l5wSSYJHFXjEdwPxhMZPgps0pMvzlmQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:13:24 2026 by rpki-client