$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa File: 28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa (raw, json) Hash identifier: aypMitZ+uKkG8RSFaP1iWBNDhcJR1y9tp0sUcPE/Eiw= Subject key identifier: 27:E7:47:9C:71:F6:FA:F2:6A:58:10:B3:43:81:7A:12:0F:80:B1:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D6AAA887E9061EDE55A479C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 40676 IP address blocks: 172.94.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:88:7e:90:61:ed:e5:5a:47:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=40f96caf-1e54-4762-95e0-5a8841988105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:75:0a:b5:bf:75:83:4f:85:13:51:83:bd:30: 56:24:df:f7:ba:d1:59:0f:b1:de:e2:75:99:eb:42: db:49:16:8e:85:15:1b:86:05:71:f5:bd:27:55:9a: 44:08:d7:38:35:f3:dd:2a:03:cf:7c:ce:45:11:c0: ca:59:5b:81:77:8f:9f:8c:1f:23:43:a3:89:0c:b7: bc:36:30:53:5d:9b:eb:fb:86:67:9e:6c:c2:09:f2: f8:b7:7a:bb:d3:cf:ac:9e:1d:25:d1:0d:22:ea:43: 8e:fe:bd:a6:1f:4f:14:2b:1f:78:d4:cd:72:5c:ce: e6:45:36:19:98:fa:2a:0e:da:a3:6b:3f:25:8c:f7: 05:de:21:1e:95:b4:28:f4:67:50:95:ad:76:a3:02: d7:84:2f:31:97:80:c7:1c:74:26:f8:76:9f:a2:b7: bb:3b:47:0b:5a:5a:8f:9d:23:20:75:e4:02:e8:d1: 06:dd:a9:e7:30:ad:9c:5f:64:14:04:00:aa:b8:cf: 3c:3c:3d:39:69:22:65:98:86:fc:1a:ac:20:44:eb: 4c:03:45:33:39:e4:ef:96:b4:88:3e:78:c3:4c:d6: 66:67:4a:31:35:d9:66:e6:02:a5:a1:56:3c:9c:dd: f3:fb:5c:af:fe:92:f3:cc:57:05:c4:4a:d4:bb:cf: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E7:47:9C:71:F6:FA:F2:6A:58:10:B3:43:81:7A:12:0F:80:B1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a6:a4:09:59:60:c5:6a:89:f6:13:52:d0:d7:ce:67:4c:0b: 28:ba:ba:6d:31:61:b1:14:c7:f9:00:2a:58:c1:a2:49:6f:df: 09:1e:9d:18:f9:b8:c1:55:e9:d8:fe:e7:17:4c:eb:93:e1:af: 67:08:17:fd:3a:78:51:cc:d5:1f:70:4d:6a:12:88:db:c6:00: 2c:76:48:7b:0e:8e:97:ef:55:7c:05:71:d4:ea:d1:07:1b:b0: fb:d3:c3:b2:16:59:d8:d2:bb:0d:97:78:6a:5c:61:80:40:19: 0b:29:69:f8:d0:4f:fe:4b:2e:d9:b2:07:42:cb:1d:b0:19:62: 12:00:ac:0c:70:ec:c8:c6:f5:96:98:38:1e:c6:6b:55:85:97: a0:52:a2:8d:fd:86:f9:03:27:a5:9d:63:bb:04:ce:da:61:6e: 89:4c:f9:fc:57:e1:93:40:67:b8:9b:de:40:5e:19:31:8f:d6: 10:24:f5:a0:fe:af:ca:7d:d3:cf:04:1d:36:45:49:1c:9f:5d: c5:d3:aa:c3:72:32:6a:56:88:7c:b7:6e:c6:16:ee:3e:78:72: d9:28:89:1d:18:fb:c6:90:67:97:5f:d2:75:ea:ab:f4:d5:04: 4d:12:f1:3b:fc:5f:12:8d:5a:03:88:93:80:7b:fa:3d:5f:ec: e9:94:bc:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoh+kGHt5VpHnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NDBmOTZjYWYtMWU1NC00NzYyLTk1ZTAtNWE4ODQxOTg4MTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnUKtb91g0+FE1GDvTBWJN/3utFZD7He4nWZ 60LbSRaOhRUbhgVx9b0nVZpECNc4NfPdKgPPfM5FEcDKWVuBd4+fjB8jQ6OJDLe8 NjBTXZvr+4ZnnmzCCfL4t3q708+snh0l0Q0i6kOO/r2mH08UKx941M1yXM7mRTYZ mPoqDtqjaz8ljPcF3iEelbQo9GdQla12owLXhC8xl4DHHHQm+Hafore7O0cLWlqP nSMgdeQC6NEG3annMK2cX2QUBACquM88PD05aSJlmIb8GqwgROtMA0UzOeTvlrSI PnjDTNZmZ0oxNdlm5gKloVY8nN3z+1yv/pLzzFcFxErUu89++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfnR5xx9vryalgQs0OBehIPgLHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjgyMTVhYmItNGNiMS0z YjUyLWFhYzUtNWEwM2MxYzYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6mpAlZYMVqifYTUtDXzmdMCyi6um0xYbEUx/kAKljBoklv3wkenRj5 uMFV6dj+5xdM65Phr2cIF/06eFHM1R9wTWoSiNvGACx2SHsOjpfvVXwFcdTq0Qcb sPvTw7IWWdjSuw2XeGpcYYBAGQspafjQT/5LLtmyB0LLHbAZYhIArAxw7MjG9ZaY OB7Ga1WFl6BSoo39hvkDJ6WdY7sEztphbolM+fxX4ZNAZ7ib3kBeGTGP1hAk9aD+ r8p9088EHTZFSRyfXcXTqsNyMmpWiHy3bsYW7j54ctkoiR0Y+8aQZ5df0nXqq/TV BE0S8Tv8XxKNWgOIk4B7+j1f7OmUvFg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:03:37 2026 by rpki-client