$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa File: 821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa (raw, json) Hash identifier: SNd0IH7TC1b+cBXYeOLnM/S0+0ZlWmM5DbG2kL0SoUQ= Subject key identifier: 28:72:4F:F3:D1:7E:CF:54:A8:9A:79:42:34:8C:B9:BF:02:1B:1C:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CC777453F7BB98337DF1F1E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 9009 IP address blocks: 172.94.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:45:3f:7b:b9:83:37:df:1f:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=733156bf-dfcf-44a7-9691-0cebae74ab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:8e:1b:df:69:70:e6:de:b5:9e:f6:eb:4e: 0c:08:0c:13:06:43:58:56:05:93:53:b7:50:4f:92: 48:f1:fc:55:41:cc:04:95:d7:05:8e:19:dc:af:98: 39:ea:9a:f1:e8:af:4a:78:bc:0d:ad:9c:b9:2a:7a: 16:e3:3e:aa:ea:6c:0a:91:5a:4e:d3:0b:28:0f:1c: 12:78:aa:b9:d9:f2:cf:58:a1:1a:c9:3a:55:4d:c4: 69:7d:ae:ef:69:19:68:0d:d3:b3:c6:86:19:f6:32: 4f:44:d1:ba:e0:88:f7:2d:d9:30:21:1f:b9:f4:94: 42:6a:72:21:46:d0:91:08:e0:b8:7b:30:c7:06:e3: 57:f9:8f:1d:4f:41:a9:0f:7a:22:01:c0:a9:82:b7: fd:b8:af:50:37:d9:87:89:54:23:36:bb:51:a3:ce: f6:28:5f:1d:71:2c:f6:46:1c:41:0a:a9:fe:25:61: 3e:9f:96:64:fd:6b:4a:b8:7d:f4:ee:3b:5d:04:06: 21:47:69:84:bf:cd:08:b6:a6:5b:81:45:44:94:2f: a1:75:5d:c4:e1:f6:a1:f9:bf:c4:a0:a5:07:87:dc: bb:d5:d7:d0:a1:ac:55:d2:22:e3:12:23:f5:d3:20: 2d:ed:3b:0d:1a:17:42:85:f6:b2:db:4e:47:70:5f: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:72:4F:F3:D1:7E:CF:54:A8:9A:79:42:34:8C:B9:BF:02:1B:1C:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/821e75d4-5990-3e1a-90d2-0ff2b96e0338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e8:36:67:02:c4:26:f7:31:b8:82:f8:25:39:b5:db:d2:c4: a0:7b:19:17:93:54:ac:df:aa:cc:d0:2e:22:7b:4c:24:79:96: 86:0e:6f:c1:dd:0e:51:59:8d:e0:b6:26:71:e3:2a:6a:40:ca: 15:4d:1b:8c:a1:a1:5a:48:5d:00:52:91:36:a1:ec:f4:88:57: c8:d3:7b:4a:a2:b0:8c:25:bc:0f:ae:d4:d9:6f:86:e7:d6:4f: 41:da:13:e5:28:de:f2:a9:ed:23:c6:02:94:82:42:6e:b1:dc: e4:64:b7:35:13:88:86:0f:6b:0d:63:ea:ae:90:2f:fc:bd:f6: 7b:a0:ca:4f:0c:55:d1:ea:9b:cd:b8:0c:d6:04:8e:71:08:a7: 44:37:62:b7:68:19:e2:c1:ce:5b:16:db:93:e1:03:9b:ab:a2: d6:e4:fa:80:b6:95:00:e7:0d:38:00:11:8b:fd:73:78:1a:ac: 5c:63:25:0b:33:5c:cb:42:16:69:d7:6b:21:22:98:16:17:81: f1:7d:9b:20:2c:38:51:9a:61:41:d6:51:a7:8f:67:78:60:dc: f6:25:99:4b:1b:32:5a:21:ae:62:7d:ea:22:b5:db:f5:6d:12: 07:15:2f:5e:48:88:6c:89:a5:f2:97:87:b1:72:8c:27:24:5e: 95:c5:c7:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0U/e7mDN98fHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk NzMzMTU2YmYtZGZjZi00NGE3LTk2OTEtMGNlYmFlNzRhYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14SOG99pcObetZ72604MCAwTBkNYVgWTU7dQ T5JI8fxVQcwEldcFjhncr5g56prx6K9KeLwNrZy5KnoW4z6q6mwKkVpO0wsoDxwS eKq52fLPWKEayTpVTcRpfa7vaRloDdOzxoYZ9jJPRNG64Ij3LdkwIR+59JRCanIh RtCRCOC4ezDHBuNX+Y8dT0GpD3oiAcCpgrf9uK9QN9mHiVQjNrtRo872KF8dcSz2 RhxBCqn+JWE+n5Zk/WtKuH307jtdBAYhR2mEv80ItqZbgUVElC+hdV3E4fah+b/E oKUHh9y71dfQoaxV0iLjEiP10yAt7TsNGhdChfay205HcF8eJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChyT/PRfs9UqJp5QjSMub8CGxzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODIxZTc1ZDQtNTk5MC0z ZTFhLTkwZDItMGZmMmI5NmUwMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIroNmcCxCb3MbiC+CU5tdvSxKB7GReTVKzfqszQLiJ7TCR5loYOb8Hd DlFZjeC2JnHjKmpAyhVNG4yhoVpIXQBSkTah7PSIV8jTe0qisIwlvA+u1NlvhufW T0HaE+Uo3vKp7SPGApSCQm6x3ORktzUTiIYPaw1j6q6QL/y99nugyk8MVdHqm824 DNYEjnEIp0Q3YrdoGeLBzlsW25PhA5urotbk+oC2lQDnDTgAEYv9c3garFxjJQsz XMtCFmnXayEimBYXgfF9myAsOFGaYUHWUaePZ3hg3PYlmUsbMlohrmJ96iK12/Vt EgcVL15IiGyJpfKXh7FyjCckXpXFx8Q= -----END CERTIFICATE-----Generated at Mon Mar 2 00:30:23 2026 by rpki-client