$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa File: 9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa (raw, json) Hash identifier: SUQs/dw6EtrO1o5A11tU84IWVm6mUxFZhx22O8qCkRI= Subject key identifier: 61:39:61:3C:3F:E8:7A:6E:29:52:D0:39:A3:06:D3:09:AD:CF:C3:F1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB551F2396D8C26F440E3BC00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 9009 IP address blocks: 172.94.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f2:39:6d:8c:26:f4:40:e3:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=25e146c7-a0ee-419d-ae1c-19198418235a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d5:88:85:b1:e8:12:e7:c7:8f:d3:2c:be:57: 89:f7:e2:8f:70:66:bb:66:d5:7f:b2:d6:86:bd:b2: 28:e1:fa:78:9f:e6:da:fa:9e:59:fe:f0:c5:0c:cb: a6:09:9d:9b:06:80:bd:77:67:ad:ab:4f:f3:04:be: 94:f6:0e:b2:3f:a8:3a:4b:1f:b5:54:ff:e3:ef:a0: 7c:8d:40:61:ed:53:0e:d9:8f:f5:41:63:77:7c:6d: 13:c8:4c:fb:02:d6:e5:db:70:f2:75:7f:cf:93:f2: 19:0b:e8:66:5e:56:16:da:ca:21:87:08:a7:49:00: fe:be:ee:6c:ca:3e:0f:ce:dd:ca:d9:1a:67:7d:3c: f3:d0:ee:77:22:4f:3d:90:9b:12:95:56:5a:76:95: a7:c9:a3:a9:bf:a9:ff:43:fd:5b:be:86:0f:b6:6a: e8:1f:78:41:5f:93:d7:04:2d:a0:69:e7:e1:e9:5e: 68:18:f9:3f:6c:8c:04:d5:24:27:8a:e1:3c:29:d2: 91:f4:fb:c3:38:b1:f9:71:6f:47:53:06:34:87:03: 70:27:16:61:34:21:dc:98:0e:4a:43:9b:3a:ac:fe: b0:ce:41:eb:a3:40:92:d9:bc:e8:2d:b8:55:3b:3f: 99:bb:92:fb:df:1e:34:30:bd:5d:db:15:74:36:f1: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:61:3C:3F:E8:7A:6E:29:52:D0:39:A3:06:D3:09:AD:CF:C3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c0:5b:2b:4a:00:b2:f7:c2:e1:b0:fa:64:24:70:7c:30:f9: e1:d5:19:c7:85:6a:c9:f0:82:81:17:2a:f9:fa:1f:84:6e:33: 45:7e:cc:1d:5c:28:08:e0:8f:00:75:c2:a0:3f:f1:7e:c8:f9: 98:3c:fb:e3:32:ba:48:7a:7a:19:77:52:93:1b:a5:6e:73:00: 01:9a:a9:2c:3f:61:f3:77:65:f8:0b:52:f6:8e:c3:76:e0:c0: 23:83:c7:4b:f0:00:41:2a:bc:40:11:49:ca:4b:b0:8d:4a:98: c1:34:f9:4c:ec:9c:55:8c:33:84:d0:c6:34:73:fa:ec:71:4a: 8d:45:aa:30:ea:94:35:bd:fb:f4:b2:bd:6f:6a:3b:15:19:fa: 6f:48:1d:4f:5f:f2:ea:0b:53:15:3a:d9:37:02:20:cd:73:5c: 6c:27:f1:be:ef:80:5c:c3:f4:cc:9a:f5:e5:7d:19:f5:e3:3f: 20:5a:ec:ab:05:f4:da:fc:71:24:a0:e8:5e:e2:96:aa:40:66: 7e:aa:29:1d:c7:5e:31:a0:69:cc:55:83:44:f4:e6:aa:ea:31: d2:62:2c:4d:cc:90:23:b3:d4:01:8f:2d:d1:d3:72:bc:a0:48: 02:01:a5:47:ab:73:60:49:d6:2c:e0:65:cf:58:80:50:97:a6: 73:fc:4d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfI5bYwm9EDjvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MjVlMTQ2YzctYTBlZS00MTlkLWFlMWMtMTkxOTg0MTgyMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtWIhbHoEufHj9MsvleJ9+KPcGa7ZtV/staG vbIo4fp4n+ba+p5Z/vDFDMumCZ2bBoC9d2etq0/zBL6U9g6yP6g6Sx+1VP/j76B8 jUBh7VMO2Y/1QWN3fG0TyEz7Atbl23DydX/Pk/IZC+hmXlYW2sohhwinSQD+vu5s yj4Pzt3K2RpnfTzz0O53Ik89kJsSlVZadpWnyaOpv6n/Q/1bvoYPtmroH3hBX5PX BC2gaefh6V5oGPk/bIwE1SQniuE8KdKR9PvDOLH5cW9HUwY0hwNwJxZhNCHcmA5K Q5s6rP6wzkHro0CS2bzoLbhVOz+Zu5L73x40ML1d2xV0NvGnJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE5YTw/6HpuKVLQOaMG0wmtz8PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQwODc2YWEtOWM2ZC0z MzU1LTlkZWEtMDg2MmMwZTJiMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF59MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfAWytKALL3wuGw+mQkcHww+eHVGceFasnwgoEXKvn6H4RuM0V+zB1c KAjgjwB1wqA/8X7I+Zg8++Myukh6ehl3UpMbpW5zAAGaqSw/YfN3ZfgLUvaOw3bg wCODx0vwAEEqvEARScpLsI1KmME0+UzsnFWMM4TQxjRz+uxxSo1FqjDqlDW9+/Sy vW9qOxUZ+m9IHU9f8uoLUxU62TcCIM1zXGwn8b7vgFzD9Mya9eV9GfXjPyBa7KsF 9Nr8cSSg6F7ilqpAZn6qKR3HXjGgacxVg0T05qrqMdJiLE3MkCOz1AGPLdHTcryg SAIBpUerc2BJ1izgZc9YgFCXpnP8TbI= -----END CERTIFICATE-----Generated at Sun Mar 1 20:30:53 2026 by rpki-client