$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70a1ddcf-c6da-37c4-8384-90f4f33fe335.roa File: 70a1ddcf-c6da-37c4-8384-90f4f33fe335.roa (raw, json) Hash identifier: YZZ5s24IEtHoXXC8keyVfIPcLsiTn+bc1VkXxuHHLLY= Subject key identifier: C1:09:10:DD:95:04:09:F2:17:75:97:94:8C:6A:56:63:48:1C:3D:20 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBF9EADC5FD1C2B11533900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70a1ddcf-c6da-37c4-8384-90f4f33fe335.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:9e:ad:c5:fd:1c:2b:11:53:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=643a8e06-31c9-4eef-9482-2278f53eb0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:23:33:c6:ff:a7:59:d2:02:73:a7:f1:02: 09:6d:94:f6:25:62:3d:32:e9:44:c2:6f:54:b3:28: 58:c6:c3:20:a3:eb:a3:44:18:34:b8:b9:43:7b:6a: 91:92:6d:c7:f9:98:04:8b:39:3c:05:8f:6a:1c:ad: 5c:d0:fd:eb:27:a9:36:73:29:c8:00:cc:e4:df:be: 1b:bf:41:e6:8c:b9:82:1d:3e:45:59:d2:3a:5e:b5: 44:d3:ff:72:4e:14:c1:12:ad:d5:5a:88:01:a3:67: 0e:34:ac:fd:7e:cc:6e:40:ec:00:43:a0:14:c4:34: fc:01:eb:17:0d:d4:30:cd:bb:ff:ff:f1:a1:04:31: 9b:5a:c8:5f:f0:39:f9:f6:4f:40:34:2f:46:f5:84: f0:78:5e:3c:47:c5:96:fb:40:6a:38:ad:22:d3:d2: 6a:b6:b5:62:a2:1f:8d:ea:2a:86:9c:7c:25:2b:00: 69:b2:a8:88:92:70:10:72:a5:38:52:e6:04:00:e8: cf:5a:42:86:2c:94:3d:a8:86:f0:63:2d:81:a8:b5: 3f:51:02:70:42:61:ee:34:72:ce:36:8e:be:1c:fe: eb:0c:ae:b3:02:40:3a:9a:48:9b:39:12:11:b9:a2: e2:b0:99:59:e3:f4:3c:36:17:a0:23:7f:fe:04:93: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:10:DD:95:04:09:F2:17:75:97:94:8C:6A:56:63:48:1C:3D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70a1ddcf-c6da-37c4-8384-90f4f33fe335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:75:fe:3c:2c:50:8d:6c:40:bf:60:7d:2c:db:c2:50:02:b5: 86:4b:63:fb:22:85:b0:ef:31:38:10:f3:d0:86:60:50:60:46: 4d:59:45:3f:96:71:40:18:6e:9d:a6:35:bc:7d:7d:64:7e:f4: 87:4a:7f:ae:44:b3:a1:f1:ad:38:b0:41:30:46:6d:53:8f:02: 9a:bc:48:4c:9f:c5:19:3a:91:10:92:0d:81:70:ff:40:31:d5: f3:a9:97:34:1d:f9:87:5f:b2:04:fe:55:21:ce:7a:65:a6:0c: 72:eb:f3:da:d1:bb:cd:32:ab:73:7f:d3:07:1d:0a:4f:91:e9: cd:87:11:85:9d:2e:bf:4e:aa:ba:ae:91:5a:f2:fb:3a:e3:48: fb:8d:d4:e1:c5:bb:a0:bc:e3:e4:a7:45:0c:a8:a3:bc:34:94: 7a:db:aa:b2:f0:5d:f2:9f:08:56:90:90:f8:01:49:9a:73:7e: 0c:88:f0:a6:3a:2c:61:a3:25:8f:7a:33:b8:57:be:21:3a:e7: b2:12:1b:07:d8:fc:6d:25:5e:57:b5:03:9b:80:71:72:c5:a9: e8:d5:d0:5a:fa:b0:c6:1e:34:19:92:e3:45:cb:5b:bd:f7:70: a0:d0:f3:9e:b7:2b:19:39:85:4e:e8:d6:f8:cc:95:98:d7:a0: e8:42:1b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov56txf0cKxFTOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk NjQzYThlMDYtMzFjOS00ZWVmLTk0ODItMjI3OGY1M2ViMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc8jM8b/p1nSAnOn8QIJbZT2JWI9MulEwm9U syhYxsMgo+ujRBg0uLlDe2qRkm3H+ZgEizk8BY9qHK1c0P3rJ6k2cynIAMzk374b v0HmjLmCHT5FWdI6XrVE0/9yThTBEq3VWogBo2cONKz9fsxuQOwAQ6AUxDT8AesX DdQwzbv///GhBDGbWshf8Dn59k9ANC9G9YTweF48R8WW+0BqOK0i09JqtrVioh+N 6iqGnHwlKwBpsqiIknAQcqU4UuYEAOjPWkKGLJQ9qIbwYy2BqLU/UQJwQmHuNHLO No6+HP7rDK6zAkA6mkibORIRuaLisJlZ4/Q8NhegI3/+BJPsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEJEN2VBAnyF3WXlIxqVmNIHD0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzBhMWRkY2YtYzZkYS0z N2M0LTgzODQtOTBmNGYzM2ZlMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ1/jwsUI1sQL9gfSzbwlACtYZLY/sihbDvMTgQ89CGYFBgRk1ZRT+W cUAYbp2mNbx9fWR+9IdKf65Es6HxrTiwQTBGbVOPApq8SEyfxRk6kRCSDYFw/0Ax 1fOplzQd+YdfsgT+VSHOemWmDHLr89rRu80yq3N/0wcdCk+R6c2HEYWdLr9Oqrqu kVry+zrjSPuN1OHFu6C84+SnRQyoo7w0lHrbqrLwXfKfCFaQkPgBSZpzfgyI8KY6 LGGjJY96M7hXviE657ISGwfY/G0lXle1A5uAcXLFqejV0Fr6sMYeNBmS40XLW733 cKDQ8563Kxk5hU7o1vjMlZjXoOhCG1E= -----END CERTIFICATE-----Generated at Fri Apr 17 07:31:40 2026 by rpki-client