$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa File: a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa (raw, json) Hash identifier: NcaxiFN3iqPNnTvHqQhR3bmMsM103iJquXFUXgCterE= Subject key identifier: FC:31:9E:06:F1:B0:75:28:09:A5:73:1E:B9:91:B1:B0:47:79:65:9F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D80FFF23F905A3025831894D0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 40676 IP address blocks: 172.94.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f2:3f:90:5a:30:25:83:18:94:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=056508f7-fa7c-4c01-8e8f-fa46fd55dc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:9b:75:77:19:2f:2b:b6:bb:16:08:46:14: 65:64:28:6d:60:ca:ba:5b:78:05:78:17:00:55:54: 1f:bb:a4:15:c1:8a:f2:eb:dd:f9:87:6c:72:eb:88: 8f:2a:47:e3:94:c3:82:87:3a:29:cd:28:fe:06:04: e8:22:1b:2f:10:46:07:4f:56:58:f2:c7:0b:46:6a: b5:38:08:8b:99:a7:84:45:4d:de:b8:15:35:12:4f: db:4a:e3:c6:4e:74:df:73:a0:a8:fa:8b:9e:d4:c6: d3:07:5e:33:00:53:e7:7f:90:ad:6c:b6:6c:cb:4b: c3:3d:c6:04:d4:3b:8d:2a:c8:ef:1e:3f:af:c2:3b: 3b:7d:e4:76:17:70:9f:64:da:1d:5f:19:e4:a1:93: 6e:80:ff:a9:f4:88:b7:4f:c3:b1:83:86:5a:c7:a6: b6:d1:7a:bc:fb:dc:e7:0d:3e:0e:56:78:95:e4:f6: 70:51:5c:9c:b0:98:3c:ba:66:54:2e:38:ac:06:3c: ff:9c:44:a7:82:b8:5e:90:d7:4e:1f:b8:5f:76:73: 78:f8:e8:e8:a4:9b:e7:26:0a:2b:b6:b9:f9:0e:59: fb:1f:98:db:1e:f8:5e:47:9f:0b:99:8b:b2:ad:2c: 2c:00:06:3a:3c:5f:04:1c:57:ec:96:58:ed:df:e5: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:31:9E:06:F1:B0:75:28:09:A5:73:1E:B9:91:B1:B0:47:79:65:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:11:66:36:68:ef:ee:76:ff:c2:68:da:c4:b6:35:01:24:82: 0f:bf:36:e3:c7:96:92:19:45:48:02:8d:ee:58:aa:0a:73:89: 35:34:d6:9b:05:42:ad:aa:7e:d7:ab:c1:53:5d:1c:1f:59:c7: 39:c8:dd:11:38:87:ba:df:96:e2:74:83:a3:2c:3e:36:ec:06: d1:46:98:e0:8d:4d:3f:71:76:5b:ff:30:06:b4:d8:67:74:9b: 1d:f4:39:48:6d:41:33:db:5b:ed:f2:69:b8:1a:03:09:7d:a5: be:74:0e:4f:35:b3:3f:36:7e:c7:8f:e7:5f:2c:8e:27:e7:94: 65:a5:f8:cf:66:5a:a9:1d:4c:eb:14:d5:e2:ac:3e:4c:47:c7: e3:cb:97:1c:37:86:0d:81:c1:c8:2d:aa:38:b1:62:1b:34:23: 7d:94:5b:e1:ec:39:b9:c9:b2:de:a6:74:9c:3f:f1:98:62:16: 2d:e5:14:ff:54:74:03:17:b1:25:65:3a:75:de:f8:db:7e:e7: 28:85:fe:8c:ad:3b:b4:ab:ee:53:a0:e9:ef:cf:49:1b:02:f8: 46:46:3f:40:fd:0b:61:29:2b:9c:01:3b:d2:3f:fe:87:de:79: f0:6a:0e:5f:6a:bf:a9:0d:e1:d7:34:83:db:30:d2:2d:31:c7: 9b:5d:70:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//I/kFowJYMYlNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MDU2NTA4ZjctZmE3Yy00YzAxLThlOGYtZmE0NmZkNTVkYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikubdXcZLyu2uxYIRhRlZChtYMq6W3gFeBcA VVQfu6QVwYry6935h2xy64iPKkfjlMOChzopzSj+BgToIhsvEEYHT1ZY8scLRmq1 OAiLmaeERU3euBU1Ek/bSuPGTnTfc6Co+oue1MbTB14zAFPnf5CtbLZsy0vDPcYE 1DuNKsjvHj+vwjs7feR2F3CfZNodXxnkoZNugP+p9Ii3T8Oxg4Zax6a20Xq8+9zn DT4OVniV5PZwUVycsJg8umZULjisBjz/nESngrhekNdOH7hfdnN4+OjopJvnJgor trn5Dln7H5jbHvheR58LmYuyrSwsAAY6PF8EHFfslljt3+VP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwxngbxsHUoCaVzHrmRsbBHeWWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTg3ZWEzZDQtOGVmMi0z Y2VkLTlkYzgtYWEyM2QyNjZiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwRZjZo7+52/8Jo2sS2NQEkgg+/NuPHlpIZRUgCje5YqgpziTU01psF Qq2qfterwVNdHB9ZxznI3RE4h7rfluJ0g6MsPjbsBtFGmOCNTT9xdlv/MAa02Gd0 mx30OUhtQTPbW+3yabgaAwl9pb50Dk81sz82fseP518sjifnlGWl+M9mWqkdTOsU 1eKsPkxHx+PLlxw3hg2BwcgtqjixYhs0I32UW+HsObnJst6mdJw/8ZhiFi3lFP9U dAMXsSVlOnXe+Nt+5yiF/oytO7Sr7lOg6e/PSRsC+EZGP0D9C2EpK5wBO9I//ofe efBqDl9qv6kN4dc0g9sw0i0xx5tdcJ4= -----END CERTIFICATE-----Generated at Fri Apr 17 06:55:21 2026 by rpki-client