$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/78c2e33a-a50b-3e97-8857-bfd7f9214499.roa File: 78c2e33a-a50b-3e97-8857-bfd7f9214499.roa (raw, json) Hash identifier: lPBSF22xA6QRLWpbQnwuReAV9VaTSBkaZ6rPHJwIMYo= Subject key identifier: F2:91:E2:86:52:DE:51:DD:18:A0:3F:19:B2:5F:74:F1:C2:CD:2E:5E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA13251FB71E0889CFF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/78c2e33a-a50b-3e97-8857-bfd7f9214499.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a1:32:51:fb:71:e0:88:9c:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=8f53d850-9b12-422a-866f-8b6a6453e250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:97:2b:77:53:46:71:99:a7:1f:99:0a:b1:5a: e8:a7:56:b5:d2:cb:dc:43:60:4f:19:de:b5:af:d0: 01:55:17:7b:fc:85:8f:7e:37:5d:cc:ba:68:d9:18: 79:47:38:a0:79:56:53:07:cd:88:fc:bd:d7:d1:ef: 3e:08:3d:53:5b:71:8e:b9:4e:a6:1a:a4:7c:90:5c: 26:94:25:f1:01:2a:ac:dc:f7:66:5e:36:76:d6:42: 59:1f:9b:58:9d:ef:52:a9:09:64:10:0b:d9:f8:7d: ed:7a:92:ae:c3:c8:f6:00:7a:49:15:bb:09:40:a3: 18:f8:c8:f4:ee:5e:4e:15:4d:c6:aa:ba:3f:20:a5: 36:8d:1a:3f:d0:f8:06:50:08:e4:d2:bc:c9:38:bf: 3a:93:77:05:65:6f:04:1c:a4:69:e0:68:b7:3c:b6: 45:9f:b2:7d:d7:b5:d3:39:e7:6c:f2:32:f3:9b:71: 1a:64:c2:7a:55:34:ed:2d:2c:92:40:e2:7e:2c:e8: d5:db:47:4e:cb:83:c2:9b:0e:87:b3:b8:ec:a5:7d: 71:b1:d9:04:1e:1d:06:77:8f:76:ba:94:bb:d1:18: da:9e:a1:d5:9d:ac:52:6c:31:e3:7f:14:c0:02:01: d0:18:f7:52:d7:7a:f4:12:bb:2e:3c:b6:1e:5f:2f: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:E2:86:52:DE:51:DD:18:A0:3F:19:B2:5F:74:F1:C2:CD:2E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/78c2e33a-a50b-3e97-8857-bfd7f9214499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:83:b1:47:c8:9f:8f:db:d5:c1:f5:ff:88:de:54:e9:41:77: bb:6c:27:10:3e:f6:28:b4:83:52:8f:e3:98:88:91:0b:0e:61: b0:aa:bb:34:59:e5:b7:c3:fd:62:9b:1a:88:31:2b:ae:af:3c: 6c:bb:f1:01:55:52:31:73:d3:18:49:0f:94:85:ac:8c:b5:83: 10:9f:ce:dd:80:3d:15:ce:49:fa:85:56:2c:38:bf:02:4f:fb: b8:de:81:48:07:44:05:50:06:19:5f:44:be:d3:81:f6:94:15: 50:af:62:e0:a4:0b:a1:95:52:fc:c4:ed:01:be:ef:30:8f:24: e7:63:b3:79:73:75:ea:3e:f9:aa:75:b0:1a:b7:ab:a7:6a:6e: 7e:f3:d0:be:b5:44:23:4b:27:1a:e2:e3:9a:8a:0f:68:db:9e: 23:b7:4e:4e:c2:2d:39:68:97:54:5a:62:41:96:7f:ea:71:f4: d5:24:29:01:57:62:6e:69:54:66:60:7a:c0:74:61:72:e7:ec: b2:87:0f:e9:0c:ca:e4:42:22:cd:cc:64:d8:3e:11:3d:64:11: 18:68:dc:eb:46:49:e6:9c:fe:ae:86:40:39:6f:b1:62:f5:7c: 3a:63:7c:92:04:0f:3f:c3:cd:8b:e6:17:46:dd:18:66:d0:83: 35:a0:57:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6EyUftx4Iic/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk OGY1M2Q4NTAtOWIxMi00MjJhLTg2NmYtOGI2YTY0NTNlMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpcrd1NGcZmnH5kKsVrop1a10svcQ2BPGd61 r9ABVRd7/IWPfjddzLpo2Rh5RzigeVZTB82I/L3X0e8+CD1TW3GOuU6mGqR8kFwm lCXxASqs3PdmXjZ21kJZH5tYne9SqQlkEAvZ+H3tepKuw8j2AHpJFbsJQKMY+Mj0 7l5OFU3Gqro/IKU2jRo/0PgGUAjk0rzJOL86k3cFZW8EHKRp4Gi3PLZFn7J917XT Oeds8jLzm3EaZMJ6VTTtLSySQOJ+LOjV20dOy4PCmw6Hs7jspX1xsdkEHh0Gd492 upS70RjanqHVnaxSbDHjfxTAAgHQGPdS13r0ErsuPLYeXy/fIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKR4oZS3lHdGKA/GbJfdPHCzS5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzhjMmUzM2EtYTUwYi0z ZTk3LTg4NTctYmZkN2Y5MjE0NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiDsUfIn4/b1cH1/4jeVOlBd7tsJxA+9ii0g1KP45iIkQsOYbCquzRZ 5bfD/WKbGogxK66vPGy78QFVUjFz0xhJD5SFrIy1gxCfzt2APRXOSfqFViw4vwJP +7jegUgHRAVQBhlfRL7TgfaUFVCvYuCkC6GVUvzE7QG+7zCPJOdjs3lzdeo++ap1 sBq3q6dqbn7z0L61RCNLJxri45qKD2jbniO3Tk7CLTlol1RaYkGWf+px9NUkKQFX Ym5pVGZgesB0YXLn7LKHD+kMyuRCIs3MZNg+ET1kERho3OtGSeac/q6GQDlvsWL1 fDpjfJIEDz/DzYvmF0bdGGbQgzWgV6Y= -----END CERTIFICATE-----Generated at Fri Apr 17 11:40:17 2026 by rpki-client