$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/524bfd8d-8c89-34cd-a9a8-a61f239220e9.roa File: 524bfd8d-8c89-34cd-a9a8-a61f239220e9.roa (raw, json) Hash identifier: e0V2BY2QswoVGawbLbO1XLExmAVTmiLA8DtzpvVE1yU= Subject key identifier: 1A:F7:F5:08:C1:67:F9:AF:4C:94:9E:5D:10:DB:DA:B8:B6:53:E0:5F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBF9EE6220822D522784BC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/524bfd8d-8c89-34cd-a9a8-a61f239220e9.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:9e:e6:22:08:22:d5:22:78:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=3caff1a5-feac-4592-9a1b-358552b35269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:cc:4a:32:a2:4a:4b:68:78:50:3f:3a:3c: a4:81:48:0c:64:2e:d5:b2:45:7c:09:2e:c9:c1:44: 72:0f:36:e2:92:64:ab:fd:b2:70:de:11:a4:67:84: d8:be:44:27:bc:35:3b:36:ea:ca:73:08:41:2a:b9: a5:d0:5e:2c:76:7c:22:89:f0:d5:1b:42:2b:86:ca: f1:88:36:e5:46:5d:ba:8d:70:aa:57:0e:54:02:fc: 57:c6:10:6a:37:57:a8:d2:88:ab:1a:06:42:8d:2f: 24:2a:98:bb:37:96:b1:66:cf:5d:53:89:7a:e7:e3: 30:5f:b1:de:7b:51:61:4e:50:d6:b0:3f:a9:b0:a2: 61:86:c7:6d:c0:3c:45:a0:38:57:a9:ad:f2:de:ea: 6e:04:5d:dc:99:91:11:a6:a2:69:58:66:6e:e3:cc: e8:d0:c6:13:81:38:e2:4d:a0:35:c7:91:20:1e:c4: 6c:ad:40:8d:24:5d:dc:e3:bc:6f:dc:c5:f3:7e:bd: 9f:f1:eb:d1:5c:a4:b9:bb:22:52:d6:3b:57:86:f0: 27:d3:55:fe:ed:54:45:8a:5d:11:d4:58:2e:d7:cd: 09:5d:a2:a8:17:42:2c:06:ec:5c:f3:b2:ed:f8:58: d4:5b:7d:6d:ac:f3:f0:53:1a:b2:73:6c:11:09:47: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F7:F5:08:C1:67:F9:AF:4C:94:9E:5D:10:DB:DA:B8:B6:53:E0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/524bfd8d-8c89-34cd-a9a8-a61f239220e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:54:b4:5f:43:b9:86:31:63:2a:79:7a:f9:95:d8:97:68:1e: 5c:8f:a9:2b:a6:f0:bd:ec:b6:76:2d:46:85:18:1a:a8:e0:81: 19:80:f2:2e:28:62:8f:7c:41:3d:b2:36:eb:01:49:60:11:4d: b6:d7:e0:ee:ea:d4:db:ca:ef:0d:6e:6d:0c:ac:a0:f0:9d:ca: 04:8b:27:b7:4d:23:04:87:46:ab:27:bd:f5:5d:ae:89:93:4b: 1e:64:5a:76:82:cd:d0:29:36:88:14:d2:62:94:4f:80:8d:80: 33:9b:79:59:40:dd:6b:78:23:28:07:5d:41:3a:90:df:ee:0d: 47:90:41:5e:fd:84:7d:79:63:6b:ba:3b:56:62:d9:d8:70:3d: ab:f1:99:e8:f8:d6:d3:9e:3b:69:74:f8:82:a7:2a:22:c6:d4: 77:ec:0a:7a:90:fb:32:9b:7c:52:36:df:71:35:2f:17:d8:cf: 84:f5:27:be:c0:de:05:f9:a6:fb:f4:2d:04:0e:2a:1d:fc:9c: db:d8:d1:fb:1d:f4:6e:38:a7:a7:89:dc:da:0d:9a:81:12:07: cb:fd:93:97:10:13:7f:96:32:ce:ad:5f:57:b1:84:d7:48:df: d7:3e:29:8d:7d:f7:76:48:fb:55:4a:23:f6:4c:70:1a:1e:a1: 5d:02:9e:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov57mIggi1SJ4S8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk M2NhZmYxYTUtZmVhYy00NTkyLTlhMWItMzU4NTUyYjM1MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4rMSjKiSktoeFA/OjykgUgMZC7VskV8CS7J wURyDzbikmSr/bJw3hGkZ4TYvkQnvDU7NurKcwhBKrml0F4sdnwiifDVG0Irhsrx iDblRl26jXCqVw5UAvxXxhBqN1eo0oirGgZCjS8kKpi7N5axZs9dU4l65+MwX7He e1FhTlDWsD+psKJhhsdtwDxFoDhXqa3y3upuBF3cmZERpqJpWGZu48zo0MYTgTji TaA1x5EgHsRsrUCNJF3c47xv3MXzfr2f8evRXKS5uyJS1jtXhvAn01X+7VRFil0R 1Fgu180JXaKoF0IsBuxc87Lt+FjUW31trPPwUxqyc2wRCUdzMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr39QjBZ/mvTJSeXRDb2ri2U+BfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTI0YmZkOGQtOGM4OS0z NGNkLWE5YTgtYTYxZjIzOTIyMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlUtF9DuYYxYyp5evmV2JdoHlyPqSum8L3stnYtRoUYGqjggRmA8i4o Yo98QT2yNusBSWARTbbX4O7q1NvK7w1ubQysoPCdygSLJ7dNIwSHRqsnvfVdromT Sx5kWnaCzdApNogU0mKUT4CNgDObeVlA3Wt4IygHXUE6kN/uDUeQQV79hH15Y2u6 O1Zi2dhwPavxmej41tOeO2l0+IKnKiLG1HfsCnqQ+zKbfFI233E1LxfYz4T1J77A 3gX5pvv0LQQOKh38nNvY0fsd9G44p6eJ3NoNmoESB8v9k5cQE3+WMs6tX1exhNdI 39c+KY1993ZI+1VKI/ZMcBoeoV0CnpU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:49:54 2026 by rpki-client