$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa File: 70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa (raw, json) Hash identifier: 5hyS8jcePGqZuIYIrwHylpS9x3V2b5Xg95HuNZulHG8= Subject key identifier: 96:FF:54:B8:30:82:53:75:B6:0B:45:E5:FF:8C:AA:96:B9:56:7B:FA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D8C2AA005539084DEDD602F78 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.94.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a0:05:53:90:84:de:dd:60:2f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=d4d53eff-19d8-43a7-982c-8941fa554cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:26:41:40:45:de:92:81:75:e1:ce:9f:44: df:00:20:11:df:9a:00:11:cc:68:f2:43:c9:8b:3d: d8:70:94:49:a6:26:ad:27:2f:62:d9:45:0f:4b:08: 4a:9c:f3:52:51:a2:3e:b9:c9:f1:30:35:a0:e7:a3: d8:98:cc:f1:d5:8e:f7:c3:92:eb:68:80:63:ae:96: 23:05:ee:79:d1:b5:51:5c:9c:4c:f7:7a:be:d9:22: 0d:8c:aa:09:66:88:ad:96:18:85:de:f9:a7:48:b0: 06:81:8e:8d:a1:d5:e1:cb:db:8d:38:cd:86:42:fc: 56:e1:91:3c:89:a9:9a:ee:d3:a7:c5:9d:be:d3:d2: cf:6b:31:26:5b:28:42:4e:a1:d1:c6:32:1e:52:6a: db:6e:87:16:07:1e:d5:41:85:e3:1e:41:6b:73:71: a5:92:c7:32:4c:e2:39:2c:70:4d:be:7b:c7:52:b8: 63:ec:d4:5e:c9:dc:aa:c1:32:74:a6:c8:fd:06:d7: e0:4f:4c:35:73:dc:5b:dd:1c:15:69:8c:a8:49:4e: 83:6d:e6:3d:72:02:78:fa:21:68:c6:fe:09:20:ad: 3f:96:26:10:83:d9:86:1b:d6:d1:8b:b3:5c:fc:be: 3f:db:80:f7:47:51:34:af:ab:48:e0:42:03:3f:3a: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:54:B8:30:82:53:75:B6:0B:45:E5:FF:8C:AA:96:B9:56:7B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a8:27:0f:08:3f:73:54:c7:31:c8:03:07:18:bb:3a:6b:30: b8:d0:00:33:c9:54:88:f0:c1:45:11:d3:b6:20:ec:2c:ec:ef: 0d:39:2b:b4:6b:dd:4c:0e:88:e5:1e:b7:c4:84:e1:25:9c:0b: d1:88:43:ab:36:89:5d:65:f9:60:7a:d1:6d:4d:15:0b:80:3d: d0:93:c3:c0:27:18:17:69:7e:b4:eb:04:3a:e3:53:49:f7:de: 12:a2:1d:72:13:2b:e5:cc:9d:24:d0:39:96:3d:ca:52:bb:36: 01:cc:33:04:42:85:65:91:21:52:2b:08:68:81:53:39:ec:1a: 09:5d:0c:8f:d4:e2:f4:ef:a5:a0:1d:71:b0:37:37:2a:1b:d0: 42:98:aa:b7:2b:fc:c8:7b:f6:fd:79:22:ee:11:c6:39:e4:c6: 10:91:21:a6:13:72:1f:bb:c6:99:f1:00:ee:bf:f2:e9:78:b6: 58:ab:f3:5b:80:34:6a:58:c2:5e:51:b6:09:3d:e2:ea:bc:10: 33:02:d1:ab:6a:a2:74:1f:73:fc:59:d0:a8:cb:a8:b3:d7:da: 86:fb:c5:50:63:86:25:44:13:a1:93:6b:89:a9:65:7d:68:8f: 48:01:49:b7:34:d8:a8:bf:e6:d3:a9:5a:4a:57:47:0f:f4:55: 53:19:48:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqAFU5CE3t1gL3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ZDRkNTNlZmYtMTlkOC00M2E3LTk4MmMtODk0MWZhNTU0Y2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR4mQUBF3pKBdeHOn0TfACAR35oAEcxo8kPJ iz3YcJRJpiatJy9i2UUPSwhKnPNSUaI+ucnxMDWg56PYmMzx1Y73w5LraIBjrpYj Be550bVRXJxM93q+2SINjKoJZoitlhiF3vmnSLAGgY6NodXhy9uNOM2GQvxW4ZE8 iama7tOnxZ2+09LPazEmWyhCTqHRxjIeUmrbbocWBx7VQYXjHkFrc3GlkscyTOI5 LHBNvnvHUrhj7NReydyqwTJ0psj9BtfgT0w1c9xb3RwVaYyoSU6DbeY9cgJ4+iFo xv4JIK0/liYQg9mGG9bRi7Nc/L4/24D3R1E0r6tI4EIDPzok/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb/VLgwglN1tgtF5f+Mqpa5Vnv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzBjMWQ0ZWUtZGIwOS0z Zjk0LWIwZjgtODY2ZGQyYmRjYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqoJw8IP3NUxzHIAwcYuzprMLjQADPJVIjwwUUR07Yg7Czs7w05K7Rr 3UwOiOUet8SE4SWcC9GIQ6s2iV1l+WB60W1NFQuAPdCTw8AnGBdpfrTrBDrjU0n3 3hKiHXITK+XMnSTQOZY9ylK7NgHMMwRChWWRIVIrCGiBUznsGgldDI/U4vTvpaAd cbA3Nyob0EKYqrcr/Mh79v15Iu4RxjnkxhCRIaYTch+7xpnxAO6/8ul4tlir81uA NGpYwl5Rtgk94uq8EDMC0atqonQfc/xZ0KjLqLPX2ob7xVBjhiVEE6GTa4mpZX1o j0gBSbc02Ki/5tOpWkpXRw/0VVMZSAE= -----END CERTIFICATE-----Generated at Sun Apr 19 08:56:48 2026 by rpki-client