$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1639d5aa-d8cc-313e-a31e-bf9776952ac8.roa File: 1639d5aa-d8cc-313e-a31e-bf9776952ac8.roa (raw, json) Hash identifier: XEKYNhVpxpJWEYwnbyvXlYzHw3ReQ/AOWsM3OGzFC0E= Subject key identifier: 89:4E:6B:E6:D2:EC:DC:C5:AC:B1:7E:23:4B:88:CA:03:CA:CF:DD:BF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CEFF22412F68979852A908CC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1639d5aa-d8cc-313e-a31e-bf9776952ac8.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 137409 IP address blocks: 172.94.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:24:12:f6:89:79:85:2a:90:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=eb33bff8-a6df-47d1-a776-ff5c3451a565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:6c:72:35:40:81:e9:7c:b3:cc:9e:3e:8b: 17:9e:ce:93:6d:10:24:a5:2f:39:e6:ee:47:df:27: 63:2c:54:1f:27:5b:bf:9c:6b:48:fc:52:1f:b7:ac: fd:62:a2:d7:fe:76:b5:2e:f5:21:e3:82:ea:3d:53: 9b:a4:48:ba:52:ae:8f:6d:06:d6:d3:07:6e:46:56: 70:fa:16:2d:4b:42:06:d6:bd:fc:51:56:df:90:e8: 04:30:ba:ad:3a:16:dc:61:6f:ba:d8:fc:f0:35:95: dc:76:38:f1:94:fd:74:7c:29:98:0f:f8:3f:fd:ca: fc:f5:af:f5:ca:05:33:b8:ab:44:76:35:c5:8e:d6: 4a:56:cd:34:07:18:32:cf:b4:61:53:64:70:91:38: 7d:c5:7c:bc:db:07:ca:66:98:94:3d:22:41:00:3c: fc:07:71:ac:14:87:47:a8:c9:66:3a:83:77:6f:8b: 6d:8b:c3:d3:a9:5b:0a:fe:2e:de:bf:48:68:f3:1e: fa:de:19:af:82:75:3a:bb:3c:0b:6f:2f:2e:de:48: 27:b5:98:e0:fa:d3:84:2b:00:12:dc:67:76:6d:c3: d0:b2:5a:5c:f1:58:06:7e:e5:4a:f2:cf:f5:be:8e: 0e:bb:f5:5a:1f:70:97:39:60:de:4e:c8:f6:fe:da: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:6B:E6:D2:EC:DC:C5:AC:B1:7E:23:4B:88:CA:03:CA:CF:DD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1639d5aa-d8cc-313e-a31e-bf9776952ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:49:ca:59:12:09:3c:58:cb:5b:32:3c:34:2b:d1:ae:41:b8: af:75:3c:2d:30:5f:a6:9f:8c:5e:77:41:41:cb:2a:76:1c:c0: 77:08:1b:0b:5e:66:e3:55:b0:74:2f:01:14:25:83:3c:a7:62: 62:77:51:cf:5d:68:cd:50:77:d9:8c:5f:e1:e3:41:64:0a:66: 22:d4:5f:c2:ad:bb:60:2a:6b:20:a5:34:bd:d2:d8:d9:93:91: 51:74:d9:93:a2:c9:75:40:06:b9:bf:81:18:2e:25:27:47:45: 98:4c:00:d7:f9:4d:54:4a:13:53:3d:ac:91:6a:a9:a2:09:52: 67:02:40:cf:92:cd:4c:18:21:a6:33:5a:ed:cf:96:19:32:bb: 8b:10:a6:87:c9:1b:55:1b:c0:c6:8d:46:97:b1:43:09:c2:b6: 1a:f4:86:ae:ab:76:70:b5:d5:94:b4:26:08:f5:5e:93:90:e4: ff:b8:8b:64:b5:00:87:07:80:ac:1a:50:2f:0d:ea:d4:49:b4: c1:b4:dd:e9:60:46:02:0d:78:53:61:35:fd:3a:99:42:f7:cb: 25:69:81:06:ae:b4:7f:4b:08:34:f6:4f:fd:68:6b:08:23:43: 66:b9:54:5d:07:6c:3c:e6:8b:ee:28:9d:45:f1:30:1f:f5:f7: 7b:11:f3:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8iQS9ol5hSqQjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk ZWIzM2JmZjgtYTZkZi00N2QxLWE3NzYtZmY1YzM0NTFhNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudVscjVAgel8s8yePosXns6TbRAkpS855u5H 3ydjLFQfJ1u/nGtI/FIft6z9YqLX/na1LvUh44LqPVObpEi6Uq6PbQbW0wduRlZw +hYtS0IG1r38UVbfkOgEMLqtOhbcYW+62PzwNZXcdjjxlP10fCmYD/g//cr89a/1 ygUzuKtEdjXFjtZKVs00Bxgyz7RhU2RwkTh9xXy82wfKZpiUPSJBADz8B3GsFIdH qMlmOoN3b4tti8PTqVsK/i7ev0ho8x763hmvgnU6uzwLby8u3kgntZjg+tOEKwAS 3Gd2bcPQslpc8VgGfuVK8s/1vo4Ou/VaH3CXOWDeTsj2/tpFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlOa+bS7NzFrLF+I0uIygPKz92/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTYzOWQ1YWEtZDhjYy0z MTNlLWEzMWUtYmY5Nzc2OTUyYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANJylkSCTxYy1syPDQr0a5BuK91PC0wX6afjF53QUHLKnYcwHcIGwte ZuNVsHQvARQlgzynYmJ3Uc9daM1Qd9mMX+HjQWQKZiLUX8Ktu2AqayClNL3S2NmT kVF02ZOiyXVABrm/gRguJSdHRZhMANf5TVRKE1M9rJFqqaIJUmcCQM+SzUwYIaYz Wu3Plhkyu4sQpofJG1UbwMaNRpexQwnCthr0hq6rdnC11ZS0Jgj1XpOQ5P+4i2S1 AIcHgKwaUC8N6tRJtMG03elgRgINeFNhNf06mUL3yyVpgQautH9LCDT2T/1oawgj Q2a5VF0HbDzmi+4onUXxMB/193sR8+8= -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:20 2026 by rpki-client