$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa File: 438abf06-355b-3925-b81c-ed0f431c4a35.roa (raw, json) Hash identifier: w80/5xeBFEzAAlUmXJxZZ7pwBWXbW2/4fDX/ZRcIU+o= Subject key identifier: 61:1D:E4:43:E1:4B:03:7E:3E:6E:55:F9:10:15:53:2A:64:96:AD:0C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D6AAA879118804602D0C12B20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 3223 IP address blocks: 172.94.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:87:91:18:80:46:02:d0:c1:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=e002e1d5-ed63-4272-b0e8-1fa45353edf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9a:3f:80:90:96:94:09:b9:dd:cc:67:2e:0b: 61:1c:48:46:b6:d7:2c:4f:ae:a9:b5:3a:0d:f7:35: 09:0a:e6:54:a7:35:d1:c8:2b:bf:43:f9:0e:2d:2e: 3f:a7:3e:e7:bc:19:2e:8b:b9:c7:6b:09:64:1c:82: ae:03:50:47:f9:ba:75:e4:27:0e:33:f4:dc:c3:d5: 4a:27:d0:07:3e:86:46:3c:db:cc:f9:46:52:fd:ff: 62:d1:4d:c7:41:cb:9f:97:86:1b:a8:06:d6:ec:a6: aa:d0:a5:22:27:db:56:c2:33:68:43:55:b6:78:1a: 93:db:ce:98:43:9b:22:52:a2:2e:93:04:88:8e:28: d3:d7:1e:e8:f8:ae:c7:f4:22:40:a0:48:f1:5a:92: 65:90:1f:b5:e6:b1:28:8b:4b:cf:f1:d8:80:c6:d7: a1:f8:7e:f1:7b:e1:7b:f9:70:cb:37:c2:42:fc:29: 70:8d:a3:3a:0a:e8:f6:0e:fd:f3:aa:21:ed:ae:6e: 43:0f:2b:5d:2e:ef:cb:f4:ca:07:70:af:c7:c8:cf: 67:71:0b:cf:6c:ac:fb:d3:97:6c:1f:1f:04:37:41: f5:3d:e7:e9:4d:d9:ca:20:e8:35:97:e3:b4:1c:d9: 96:61:44:cb:bc:69:22:54:db:ec:89:26:32:7b:6d: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1D:E4:43:E1:4B:03:7E:3E:6E:55:F9:10:15:53:2A:64:96:AD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:11:e4:a5:ba:06:d1:5f:26:9d:e4:14:67:d3:57:20:14:a6: 29:c4:ad:c5:6d:82:7a:05:3f:a6:e5:65:72:6e:17:a1:57:6f: de:8e:db:8c:9a:0f:30:6a:99:d5:ec:be:e9:c8:89:db:41:20: a3:62:09:96:2c:fc:73:f6:04:52:d2:35:d8:25:9f:e6:21:81: 2e:2a:e3:90:5a:bf:c5:a0:db:06:25:a9:49:06:2b:83:7e:cf: 36:6f:de:d9:92:59:49:3e:c6:fc:a2:a0:a2:38:f1:0e:f3:b1: 16:f1:d5:b1:78:26:8d:d4:90:e8:a6:b6:ea:b4:a6:cb:a6:55: 88:d5:e4:52:d1:14:91:83:ef:90:31:bf:1a:66:7a:88:e3:3e: 88:5e:11:33:a6:86:90:71:a1:22:df:8c:b0:e6:f4:5a:0b:f7: 51:09:91:d5:40:83:e2:ec:82:7a:e0:b9:de:12:19:d6:c5:b9: 7e:49:61:b1:01:34:87:d4:77:fd:1e:93:45:41:35:6f:b8:66: bf:70:f1:f2:6f:b9:32:15:c7:42:e6:ee:e3:a4:0f:c4:a6:24: 74:3e:49:6a:b3:1d:42:4b:41:54:23:65:23:41:89:aa:93:f3: 45:0c:91:a6:c6:f6:2b:be:ed:8c:1e:4b:b0:11:57:8b:43:5b: 01:8f:b3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoeRGIBGAtDBKyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZTAwMmUxZDUtZWQ2My00MjcyLWIwZTgtMWZhNDUzNTNlZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZo/gJCWlAm53cxnLgthHEhGttcsT66ptToN 9zUJCuZUpzXRyCu/Q/kOLS4/pz7nvBkui7nHawlkHIKuA1BH+bp15CcOM/Tcw9VK J9AHPoZGPNvM+UZS/f9i0U3HQcufl4YbqAbW7Kaq0KUiJ9tWwjNoQ1W2eBqT286Y Q5siUqIukwSIjijT1x7o+K7H9CJAoEjxWpJlkB+15rEoi0vP8diAxteh+H7xe+F7 +XDLN8JC/ClwjaM6Cuj2Dv3zqiHtrm5DDytdLu/L9MoHcK/HyM9ncQvPbKz705ds Hx8EN0H1PefpTdnKIOg1l+O0HNmWYUTLvGkiVNvsiSYye22mVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEd5EPhSwN+Pm5V+RAVUypklq0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM4YWJmMDYtMzU1Yi0z OTI1LWI4MWMtZWQwZjQzMWM0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQR5KW6BtFfJp3kFGfTVyAUpinErcVtgnoFP6blZXJuF6FXb96O24ya DzBqmdXsvunIidtBIKNiCZYs/HP2BFLSNdgln+YhgS4q45Bav8Wg2wYlqUkGK4N+ zzZv3tmSWUk+xvyioKI48Q7zsRbx1bF4Jo3UkOimtuq0psumVYjV5FLRFJGD75Ax vxpmeojjPoheETOmhpBxoSLfjLDm9FoL91EJkdVAg+Lsgnrgud4SGdbFuX5JYbEB NIfUd/0ek0VBNW+4Zr9w8fJvuTIVx0Lm7uOkD8SmJHQ+SWqzHUJLQVQjZSNBiaqT 80UMkabG9iu+7YweS7ARV4tDWwGPs8A= -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:35 2026 by rpki-client