$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa File: 127335ac-7835-339e-98cf-19520d8ce2e9.roa (raw, json) Hash identifier: P/gyC/8D1GEG5JI+d7UTw2wKru281C1JCbzWX8KxAlY= Subject key identifier: E9:9C:39:F9:AF:76:90:10:73:C6:3D:CD:31:F1:B9:6F:CD:BF:53:38 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D65152591048A4F84A60CBD80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 3223 IP address blocks: 172.94.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:25:91:04:8a:4f:84:a6:0c:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=bf6989db-9779-4a07-9f76-8fcfc7559ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:0b:0f:ee:fe:db:82:1b:93:d6:f7:3b:b9: cc:96:bf:33:38:02:ff:d3:06:32:63:87:c8:9b:d9: 8e:55:ad:75:45:82:cc:70:20:de:2a:72:0d:67:78: 95:53:4e:cc:ad:6d:ae:cc:4c:63:83:a7:5c:fc:dc: 6c:ef:41:00:22:80:43:e7:51:f8:b6:8b:51:0c:08: ce:ac:de:9f:07:c0:b4:c1:72:94:5e:e6:2c:82:2e: e3:97:93:ee:ff:34:a5:40:39:ca:f6:82:73:91:05: d4:ab:c8:83:9f:6b:80:73:28:fd:ce:cf:01:22:f8: 9e:68:66:3c:7e:e1:8a:e3:12:54:95:87:15:ef:15: e5:80:ec:bb:fa:71:af:da:b9:2e:fb:b1:75:19:6a: 76:f9:61:90:e8:58:9a:12:f8:65:4b:d9:fb:f2:ca: 88:22:34:0f:72:77:9e:5c:b0:06:cb:b9:74:a9:00: 9a:1f:ab:cf:df:25:ac:5b:3c:80:0a:26:b4:95:c9: 80:4b:d1:81:a2:bd:f1:ac:6f:32:18:b1:98:6e:05: b0:7e:45:b6:04:5c:99:2d:81:6b:d8:fa:e7:e7:2e: c4:63:cd:c3:36:d1:a8:69:d3:c4:15:58:db:22:eb: 02:a4:98:48:59:93:b6:77:60:83:e3:8a:7f:a5:73: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:39:F9:AF:76:90:10:73:C6:3D:CD:31:F1:B9:6F:CD:BF:53:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f1:f8:7d:cc:e3:b9:1b:14:7e:0c:66:49:d4:52:c1:c1:99: b6:be:b3:2b:41:7a:d3:9c:c3:a8:f1:32:57:db:02:47:eb:a4: db:9a:c1:64:84:c8:c3:d9:6a:9b:de:83:31:a8:a9:2d:b3:e9: 39:f5:32:1e:96:b4:52:c1:1c:19:8d:b6:42:67:6d:44:09:5a: ca:83:6c:82:c9:e5:dd:bd:9c:f1:d7:c7:8d:58:b4:24:c7:95: c7:e2:20:66:31:8f:7c:e5:70:75:7b:dd:8f:4e:ad:4f:11:cb: cd:4d:6f:b8:e9:98:05:5a:d4:8a:ee:86:da:a3:96:4e:c1:a1: 8a:1c:ea:1e:7a:3e:94:f1:15:16:c7:84:16:7e:c4:8d:c4:6e: 99:30:53:6e:b5:8d:c0:e1:9e:8e:5f:5f:7d:b1:82:14:78:6a: 99:bb:a9:10:18:76:2e:d3:fb:c1:d1:4a:27:50:65:fa:73:f0: 70:fa:f8:ee:f3:d0:88:b2:52:a7:29:7d:88:54:05:a1:55:98: 8d:37:b7:60:22:3d:b2:92:56:0f:a7:5b:7c:ca:c1:38:85:34: 1e:c6:64:99:88:1a:1e:47:e1:1e:20:5b:17:ba:4c:5c:e3:c2: 74:19:3d:20:ab:e6:03:b3:63:9a:fe:5b:b2:8b:a8:87:00:ed: 5c:99:47:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSWRBIpPhKYMvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YmY2OTg5ZGItOTc3OS00YTA3LTlmNzYtOGZjZmM3NTU5YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWALD+7+24Ibk9b3O7nMlr8zOAL/0wYyY4fI m9mOVa11RYLMcCDeKnINZ3iVU07MrW2uzExjg6dc/Nxs70EAIoBD51H4totRDAjO rN6fB8C0wXKUXuYsgi7jl5Pu/zSlQDnK9oJzkQXUq8iDn2uAcyj9zs8BIvieaGY8 fuGK4xJUlYcV7xXlgOy7+nGv2rku+7F1GWp2+WGQ6FiaEvhlS9n78sqIIjQPcnee XLAGy7l0qQCaH6vP3yWsWzyACia0lcmAS9GBor3xrG8yGLGYbgWwfkW2BFyZLYFr 2Prn5y7EY83DNtGoadPEFVjbIusCpJhIWZO2d2CD44p/pXNNqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmcOfmvdpAQc8Y9zTHxuW/Nv1M4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTI3MzM1YWMtNzgzNS0z MzllLTk4Y2YtMTk1MjBkOGNlMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjx+H3M47kbFH4MZknUUsHBmba+sytBetOcw6jxMlfbAkfrpNuawWSE yMPZapvegzGoqS2z6Tn1Mh6WtFLBHBmNtkJnbUQJWsqDbILJ5d29nPHXx41YtCTH lcfiIGYxj3zlcHV73Y9OrU8Ry81Nb7jpmAVa1Iruhtqjlk7BoYoc6h56PpTxFRbH hBZ+xI3EbpkwU261jcDhno5fX32xghR4apm7qRAYdi7T+8HRSidQZfpz8HD6+O7z 0IiyUqcpfYhUBaFVmI03t2AiPbKSVg+nW3zKwTiFNB7GZJmIGh5H4R4gWxe6TFzj wnQZPSCr5gOzY5r+W7KLqIcA7VyZRxQ= -----END CERTIFICATE-----Generated at Fri Apr 17 14:41:02 2026 by rpki-client