$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa File: 85e02586-1263-3d5a-8bb9-97511820530e.roa (raw, json) Hash identifier: 2TwkjChEI45qpY4iv9noV2pf3h4N/FF6sxZG25fACr8= Subject key identifier: CB:6D:DE:A7:07:83:EB:DB:D2:B0:07:AB:43:F6:05:05:D2:A7:91:73 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA2640EDF54C32C1C6300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a2:64:0e:df:54:c3:2c:1c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=eb4ecb1c-acaf-4307-9bac-c6f7bb3812a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:1b:bf:49:f4:dc:b7:c7:b7:fd:88:e3:1b: 91:8f:9f:fc:38:e2:31:12:36:a7:30:17:52:ef:76: 93:ef:43:04:fc:f6:31:1e:ef:a0:17:d9:09:87:0a: ba:df:16:1a:2a:7f:5e:23:f1:b5:39:5c:ab:4b:17: 19:2d:99:f1:ca:20:d8:82:91:3e:0f:d6:22:8e:78: d4:2a:e3:dc:64:7a:d1:8e:03:70:31:87:68:df:e1: 60:1d:3a:5e:8e:8a:d3:f1:5a:39:d2:5b:95:62:02: 9d:be:6e:5c:43:b6:93:13:b3:5e:50:ab:00:b7:77: 7f:21:b5:04:20:d4:7f:5f:24:32:d7:37:22:53:6d: 9d:ef:59:56:68:02:9b:b3:1d:dd:44:4b:ab:b0:21: ea:69:46:9d:c2:d4:65:fd:3a:94:d7:3b:2b:4f:0f: cd:4c:2e:54:b2:b8:09:ee:f5:05:a4:7f:43:49:d7: 44:c5:59:9c:57:e9:93:80:7b:71:ef:72:9c:d6:13: 25:89:9a:07:f0:a8:87:fe:9c:1c:4b:1b:35:08:90: d7:00:8d:bc:ff:91:97:49:2a:3b:2f:55:60:bb:60: df:5d:b3:7a:73:7b:8c:a2:1e:44:d8:aa:b4:49:50: da:7e:73:4b:33:ab:63:f8:3e:94:4d:e4:5f:7d:cc: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6D:DE:A7:07:83:EB:DB:D2:B0:07:AB:43:F6:05:05:D2:A7:91:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85e02586-1263-3d5a-8bb9-97511820530e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:95:9e:3b:a9:dc:1d:86:65:6c:ae:ea:de:13:aa:f0:47:46: af:e6:26:3d:4e:16:a1:b8:be:3a:8b:94:55:f2:27:19:b3:9b: d3:81:c7:d9:51:22:fc:43:81:ac:5b:ca:b5:a8:84:d7:25:79: ac:93:75:2b:e0:80:b3:6e:43:b5:ba:0c:94:5c:12:8c:96:46: f6:18:e2:90:69:a6:8a:4a:40:02:6b:41:96:93:73:41:49:fe: e6:6e:93:3b:ca:b1:68:d0:21:6d:05:4c:ae:6b:bc:2e:35:cd: 01:90:f3:8c:d3:03:00:0c:ca:ef:ef:c6:74:cb:4f:db:c9:b0: cc:ab:e5:23:e8:45:e7:07:63:38:d3:7c:cd:46:89:1f:49:4c: 76:c3:d2:8d:d2:7c:bf:e3:38:53:f7:18:be:90:41:ea:b7:79: 5a:c9:7e:e3:54:14:d9:3a:ae:b8:65:14:9d:d2:f4:63:52:30: 55:22:d5:8a:8c:c5:87:e2:fc:cd:8e:c1:a1:0d:65:dc:34:4a: 42:3c:e5:36:47:50:9e:41:ac:3a:a7:5d:1f:ac:22:f3:57:a2: 2c:a2:a0:c4:ab:32:23:97:34:1c:54:60:72:25:3b:69:58:0a: 34:62:09:37:1b:96:ec:46:a5:3f:42:56:f8:fc:01:f8:d8:99: ce:20:a0:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6JkDt9UwywcYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZWI0ZWNiMWMtYWNhZi00MzA3LTliYWMtYzZmN2JiMzgxMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr4bv0n03LfHt/2I4xuRj5/8OOIxEjanMBdS 73aT70ME/PYxHu+gF9kJhwq63xYaKn9eI/G1OVyrSxcZLZnxyiDYgpE+D9YijnjU KuPcZHrRjgNwMYdo3+FgHTpejorT8Vo50luVYgKdvm5cQ7aTE7NeUKsAt3d/IbUE INR/XyQy1zciU22d71lWaAKbsx3dREursCHqaUadwtRl/TqU1zsrTw/NTC5UsrgJ 7vUFpH9DSddExVmcV+mTgHtx73Kc1hMliZoH8KiH/pwcSxs1CJDXAI28/5GXSSo7 L1Vgu2DfXbN6c3uMoh5E2Kq0SVDafnNLM6tj+D6UTeRffcwDqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtt3qcHg+vb0rAHq0P2BQXSp5FzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODVlMDI1ODYtMTI2My0z ZDVhLThiYjktOTc1MTE4MjA1MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2Vnjup3B2GZWyu6t4TqvBHRq/mJj1OFqG4vjqLlFXyJxmzm9OBx9lR IvxDgaxbyrWohNcleayTdSvggLNuQ7W6DJRcEoyWRvYY4pBppopKQAJrQZaTc0FJ /uZukzvKsWjQIW0FTK5rvC41zQGQ84zTAwAMyu/vxnTLT9vJsMyr5SPoRecHYzjT fM1GiR9JTHbD0o3SfL/jOFP3GL6QQeq3eVrJfuNUFNk6rrhlFJ3S9GNSMFUi1YqM xYfi/M2OwaENZdw0SkI85TZHUJ5BrDqnXR+sIvNXoiyioMSrMiOXNBxUYHIlO2lY CjRiCTcbluxGpT9CVvj8AfjYmc4goG8= -----END CERTIFICATE-----Generated at Fri Apr 17 15:21:24 2026 by rpki-client