$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json) Hash identifier: SqgHXsNYNUaADeK3uAhNpEFvrcEUfChp37cqzcfoDx8= Subject key identifier: 5A:50:29:65:8D:21:61:8D:49:AD:F7:98:5F:87:86:86:92:42:B9:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAB8C50290A4981C34FF9A190 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 9009 IP address blocks: 172.94.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:50:29:0a:49:81:c3:4f:f9:a1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=7a0d9aa6-154e-4ef4-9104-aaac59b9fc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:61:5c:da:56:8c:80:e1:2f:49:f3:56:1f: fc:ed:a1:48:f8:01:9f:41:5f:40:18:17:04:92:eb: ad:69:09:60:f4:67:ea:67:e0:cd:1d:d1:1d:44:a8: f6:af:45:09:bf:03:68:aa:02:c5:47:33:1a:64:94: 81:24:95:9a:ac:bd:41:a5:cc:2e:82:85:e4:03:7d: 00:d1:06:13:b8:8e:21:1b:32:00:64:79:eb:b8:0c: 35:44:0f:ab:aa:6e:eb:f1:10:8e:00:4a:2e:3d:f7: 5b:bf:07:ce:e6:2a:f9:08:41:d1:35:00:55:f6:dc: 0b:ca:d5:b2:34:1f:7d:18:d5:c9:a4:61:0a:3c:d7: 1c:4e:9f:f8:f1:22:16:87:b2:c0:5b:75:62:cc:b7: 86:bb:8b:d3:d2:72:e0:78:d0:df:8f:78:e5:52:01: 27:05:88:d4:24:fd:ab:ab:8e:b7:e4:08:ba:64:91: 97:31:39:0a:cf:19:d5:f2:1d:ee:24:22:b8:a8:fd: 56:1c:5a:4c:81:d2:cd:db:15:d6:c6:8d:95:bc:19: bf:6f:08:20:c5:87:9d:e0:ac:c5:6f:a7:d0:e4:ee: 84:23:05:95:35:58:d0:a8:ac:98:2f:f7:a9:61:7f: 6e:c8:a9:0a:7d:11:d9:34:e4:14:9f:58:ce:0c:1f: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:50:29:65:8D:21:61:8D:49:AD:F7:98:5F:87:86:86:92:42:B9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:65:66:db:db:3c:e1:fd:c6:ea:20:2a:73:bf:39:60:2a:3f: 34:0f:02:a4:db:9c:d6:64:bb:bf:40:80:96:34:e5:87:94:97: fe:b9:2c:3a:95:ff:ae:ce:10:b0:db:d5:d3:59:9c:4b:06:ed: fc:be:d4:23:70:34:bb:97:b8:7d:f6:d0:51:3b:ab:1e:65:5c: a2:73:f5:e0:22:9e:29:1e:39:45:06:4d:30:98:54:16:99:a4: 46:40:63:08:43:11:c3:10:c4:ea:d0:af:cf:ef:34:b6:54:12: 0f:98:38:32:cc:b7:f5:0e:c9:65:2e:9a:54:c9:52:e9:a0:53: 63:b7:1a:c3:37:c5:19:75:37:5e:a1:fd:f6:13:f3:50:95:27: 6c:f9:42:c6:66:fa:18:dc:31:1f:03:9a:da:62:4d:58:98:8c: 99:e7:14:61:01:74:37:3b:6b:d9:e1:10:29:f7:18:ab:f4:24: c4:56:3f:48:55:4c:a6:11:a7:8c:71:7e:48:9e:a5:a7:db:db: 13:d7:33:65:85:24:31:da:d4:69:4a:fe:b9:ad:04:4c:2e:c0: ea:68:20:76:fc:8a:eb:5a:c8:e6:3d:15:fc:6c:58:aa:0e:be: f9:bf:f1:22:70:0e:27:64:69:2c:10:7f:8d:a5:fe:4e:f4:a4: 45:7a:03:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjFApCkmBw0/5oZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk N2EwZDlhYTYtMTU0ZS00ZWY0LTkxMDQtYWFhYzU5YjlmYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDVhXNpWjIDhL0nzVh/87aFI+AGfQV9AGBcE kuutaQlg9GfqZ+DNHdEdRKj2r0UJvwNoqgLFRzMaZJSBJJWarL1BpcwugoXkA30A 0QYTuI4hGzIAZHnruAw1RA+rqm7r8RCOAEouPfdbvwfO5ir5CEHRNQBV9twLytWy NB99GNXJpGEKPNccTp/48SIWh7LAW3VizLeGu4vT0nLgeNDfj3jlUgEnBYjUJP2r q4635Ai6ZJGXMTkKzxnV8h3uJCK4qP1WHFpMgdLN2xXWxo2VvBm/bwggxYed4KzF b6fQ5O6EIwWVNVjQqKyYL/epYX9uyKkKfRHZNOQUn1jODB+GHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpQKWWNIWGNSa33mF+HhoaSQrkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBlZtvbPOH9xuogKnO/OWAqPzQPAqTbnNZku79AgJY05YeUl/65LDqV /67OELDb1dNZnEsG7fy+1CNwNLuXuH320FE7qx5lXKJz9eAinikeOUUGTTCYVBaZ pEZAYwhDEcMQxOrQr8/vNLZUEg+YODLMt/UOyWUumlTJUumgU2O3GsM3xRl1N16h /fYT81CVJ2z5QsZm+hjcMR8DmtpiTViYjJnnFGEBdDc7a9nhECn3GKv0JMRWP0hV TKYRp4xxfkiepafb2xPXM2WFJDHa1GlK/rmtBEwuwOpoIHb8iutayOY9FfxsWKoO vvm/8SJwDidkaSwQf42l/k70pEV6Axw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:38:09 2026 by rpki-client