$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa File: 1043ec17-c314-38f1-a981-75d7cdb43eba.roa (raw, json) Hash identifier: HgUWCrZ3Zdnbjcofj9csebJIoogiUa8tX+EdZBVIxN0= Subject key identifier: 0F:78:71:FB:87:9C:80:0B:ED:B6:21:BF:DD:59:57:44:59:F8:9A:74 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA10B4C32F859CD860A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a1:0b:4c:32:f8:59:cd:86:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=13aa13da-4091-40ca-9ead-1b3ffcc1d507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:8d:57:2b:05:da:d2:5c:bb:21:cd:24:97: 44:22:a3:f0:df:bd:e2:d8:5d:6e:38:f5:7e:cd:5a: 28:90:e3:be:d2:d8:27:a3:12:22:85:50:69:98:be: c3:a9:84:3c:30:bb:a4:26:5e:6b:36:de:14:0e:43: 54:76:3d:c9:e2:b6:91:ad:e1:d6:a5:2f:48:a3:33: 23:72:86:34:33:58:a0:d7:a3:e1:e7:20:f7:fe:b1: 36:95:e7:d6:66:36:83:10:a5:2c:5c:58:36:4b:e3: 2c:f5:b8:82:aa:37:73:a5:d4:a4:63:35:15:04:c7: f8:31:f8:ac:46:8f:fc:c1:b5:e7:46:75:d5:ca:20: 5d:b0:94:32:51:a2:bd:ac:3a:fa:6b:cd:e7:4e:8c: 24:3f:66:5e:0a:f6:5d:88:01:cf:a1:f4:25:d7:44: 5d:da:8d:8e:ab:41:ce:92:63:77:fa:3f:46:75:c8: ab:00:82:c6:6b:c0:b5:13:09:03:16:e9:f4:3d:4f: f9:47:b0:d9:d9:58:5a:50:e5:af:51:1a:5a:0a:97: 97:92:2e:56:d0:42:65:8a:85:72:2a:7c:17:c5:e7: c8:50:33:7d:39:d1:ad:fc:00:11:55:4b:04:5c:b5: 8a:22:c0:6b:94:fe:97:11:16:e2:80:8e:27:29:b5: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:78:71:FB:87:9C:80:0B:ED:B6:21:BF:DD:59:57:44:59:F8:9A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4c:04:e7:0e:3f:83:e0:05:9e:96:38:98:69:fd:43:40:38: c4:f6:14:d3:b1:4c:c6:71:8e:81:19:43:99:88:93:d7:48:48: 1b:d4:65:eb:19:a5:fa:0c:37:ab:7a:6e:64:fd:2a:fa:d8:24: a5:a8:d1:ef:dd:88:2f:c2:61:5f:ae:49:86:9a:e3:2b:b5:86: 9f:5f:7d:72:57:a8:00:4d:1b:85:3d:06:d4:31:f5:3e:19:2b: e9:bd:bf:62:f6:e1:44:58:85:22:87:b0:15:60:f5:fa:af:ef: 86:29:84:2f:2c:53:00:ee:4d:af:1f:c3:33:9b:38:ce:12:24: d8:d2:80:20:62:ac:c5:53:35:41:a1:51:45:01:a6:35:46:15: b7:66:31:99:ad:7b:b7:ed:4c:eb:51:09:00:e0:0d:d9:02:30: 11:f4:0d:22:6d:bb:a9:e0:5e:3a:3d:cd:71:ec:e6:b9:08:a4: 4f:6f:6e:6a:7e:1e:fd:f8:9a:79:e0:1f:a6:de:5f:86:c2:33: f0:1a:4e:bb:ea:2e:53:32:df:11:6d:54:4b:7d:4b:c3:a1:59: 59:0e:33:56:ce:57:56:c3:a6:df:ec:76:f3:70:2c:f2:70:2e: 27:b2:26:09:3d:c6:45:28:7a:da:5c:80:25:b7:a0:52:12:ca: 8a:0e:38:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6ELTDL4Wc2GCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk MTNhYTEzZGEtNDA5MS00MGNhLTllYWQtMWIzZmZjYzFkNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YWNVysF2tJcuyHNJJdEIqPw373i2F1uOPV+ zVookOO+0tgnoxIihVBpmL7DqYQ8MLukJl5rNt4UDkNUdj3J4raRreHWpS9IozMj coY0M1ig16Ph5yD3/rE2lefWZjaDEKUsXFg2S+Ms9biCqjdzpdSkYzUVBMf4Mfis Ro/8wbXnRnXVyiBdsJQyUaK9rDr6a83nTowkP2ZeCvZdiAHPofQl10Rd2o2Oq0HO kmN3+j9GdcirAILGa8C1EwkDFun0PU/5R7DZ2VhaUOWvURpaCpeXki5W0EJlioVy KnwXxefIUDN9OdGt/AARVUsEXLWKIsBrlP6XERbigI4nKbVs/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA94cfuHnIAL7bYhv91ZV0RZ+Jp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTA0M2VjMTctYzMxNC0z OGYxLWE5ODEtNzVkN2NkYjQzZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdMBOcOP4PgBZ6WOJhp/UNAOMT2FNOxTMZxjoEZQ5mIk9dISBvUZesZ pfoMN6t6bmT9KvrYJKWo0e/diC/CYV+uSYaa4yu1hp9ffXJXqABNG4U9BtQx9T4Z K+m9v2L24URYhSKHsBVg9fqv74YphC8sUwDuTa8fwzObOM4SJNjSgCBirMVTNUGh UUUBpjVGFbdmMZmte7ftTOtRCQDgDdkCMBH0DSJtu6ngXjo9zXHs5rkIpE9vbmp+ Hv34mnngH6beX4bCM/AaTrvqLlMy3xFtVEt9S8OhWVkOM1bOV1bDpt/sdvNwLPJw LieyJgk9xkUoetpcgCW3oFISyooOOJw= -----END CERTIFICATE-----Generated at Fri Apr 17 10:13:27 2026 by rpki-client