$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ac0ea180-e342-34b5-a077-5bf41926c5f3.roa File: ac0ea180-e342-34b5-a077-5bf41926c5f3.roa (raw, json) Hash identifier: Hvb3rkUeaRI/piLa8KuCXaNcy5iTuQrQOy+iVykH/yc= Subject key identifier: 74:41:1C:E0:38:01:67:33:6F:D3:D4:01:90:20:0B:3B:D8:AE:CF:C9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA1B128CDA559B54DA7C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ac0ea180-e342-34b5-a077-5bf41926c5f3.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a1:b1:28:cd:a5:59:b5:4d:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=6de2c33a-81a5-40d3-b893-a7ffc2770c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:2e:5e:73:46:65:c3:df:60:7d:d5:3d:1e: 39:5e:bb:2c:71:e4:41:5b:d3:5a:8d:ee:3a:7a:d5: b4:e6:c8:cc:a7:b1:f8:3a:5a:e6:9a:e8:d3:66:be: a1:94:0b:75:7d:1a:15:5d:57:af:45:7f:88:53:ac: 54:1b:1f:48:0c:4b:0e:72:58:e0:01:65:74:71:0f: 9e:c0:3a:ac:f9:ca:42:2c:45:46:0e:44:b3:0b:fe: fe:74:8e:bd:d2:c0:0b:83:60:22:f4:63:8d:2b:2c: 99:fb:1c:1a:9d:c6:f8:ba:39:8b:c4:cb:02:a0:b5: 55:73:66:2f:19:7c:69:04:2d:c4:74:46:39:56:62: 49:ee:29:42:7a:7d:97:08:48:9f:ca:d2:dd:10:a6: 45:89:0f:f1:ba:28:a1:00:90:bc:0e:a0:3e:79:4a: 5e:42:bd:15:6c:de:2a:d5:d4:fe:50:a1:85:cc:ec: 4d:e9:65:28:7e:29:2c:6d:8e:89:dc:08:f2:ce:0a: 38:f7:01:a4:47:bb:b8:11:ac:87:17:37:b2:7c:af: ff:6a:cc:f4:b4:80:d9:48:25:47:e9:19:f6:e1:a9: ae:1c:2c:52:e6:dd:c5:4e:92:b8:d5:ca:5b:4d:d5: 9c:d0:e9:45:fe:62:65:54:a2:8e:e7:65:42:df:e3: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:1C:E0:38:01:67:33:6F:D3:D4:01:90:20:0B:3B:D8:AE:CF:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ac0ea180-e342-34b5-a077-5bf41926c5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e9:27:d5:ae:95:1a:c6:f0:e5:55:db:ca:9e:6b:17:33:30: fb:af:9b:ca:59:c8:d3:a9:a1:34:7a:fc:3d:1f:29:94:bd:5d: ff:08:6d:97:0b:fa:dc:39:0c:70:46:9e:39:86:2c:6e:c4:6e: a5:72:72:6f:9d:ea:0a:7c:ea:eb:f6:a7:4d:41:65:f9:d6:67: e6:81:2d:ee:fa:04:eb:93:ba:07:f8:ad:16:1d:12:9a:e7:64: 56:48:1a:78:d1:fb:73:1c:e5:dd:51:05:c8:8b:36:9b:e7:e9: e6:77:7b:32:7c:90:6c:ba:1b:e7:0c:9d:f0:e6:2b:0a:a1:e3: 99:17:fd:55:a8:83:e1:00:3c:7a:62:c5:5a:c1:56:ce:77:2c: 9a:7a:71:75:29:bc:9c:2a:24:74:0c:04:0a:cf:f9:a7:8a:d7: 7d:5d:6e:41:cb:1d:51:4c:8b:12:97:01:1c:8f:75:8b:e3:0d: 52:52:2f:dc:dc:01:ed:b5:ef:83:16:5f:60:90:32:44:c0:34: 37:41:d7:ea:d7:cb:6d:62:b8:09:88:fe:a9:98:37:b9:6a:04: 4f:2a:3c:de:64:e5:29:d7:15:b4:f2:84:29:92:5b:5d:68:15: d4:b3:9e:99:f7:67:0f:3f:7b:50:c3:a9:23:b8:a0:e5:02:b8: 31:23:23:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6GxKM2lWbVNp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk NmRlMmMzM2EtODFhNS00MGQzLWI4OTMtYTdmZmMyNzcwYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOcuXnNGZcPfYH3VPR45XrssceRBW9Naje46 etW05sjMp7H4OlrmmujTZr6hlAt1fRoVXVevRX+IU6xUGx9IDEsOcljgAWV0cQ+e wDqs+cpCLEVGDkSzC/7+dI690sALg2Ai9GONKyyZ+xwancb4ujmLxMsCoLVVc2Yv GXxpBC3EdEY5VmJJ7ilCen2XCEifytLdEKZFiQ/xuiihAJC8DqA+eUpeQr0VbN4q 1dT+UKGFzOxN6WUofiksbY6J3Ajyzgo49wGkR7u4EayHFzeyfK//asz0tIDZSCVH 6Rn24amuHCxS5t3FTpK41cpbTdWc0OlF/mJlVKKO52VC3+PRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRBHOA4AWczb9PUAZAgCzvYrs/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWMwZWExODAtZTM0Mi0z NGI1LWEwNzctNWJmNDE5MjZjNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnpJ9WulRrG8OVV28qeaxczMPuvm8pZyNOpoTR6/D0fKZS9Xf8IbZcL +tw5DHBGnjmGLG7EbqVycm+d6gp86uv2p01BZfnWZ+aBLe76BOuTugf4rRYdEprn ZFZIGnjR+3Mc5d1RBciLNpvn6eZ3ezJ8kGy6G+cMnfDmKwqh45kX/VWog+EAPHpi xVrBVs53LJp6cXUpvJwqJHQMBArP+aeK131dbkHLHVFMixKXARyPdYvjDVJSL9zc Ae2174MWX2CQMkTANDdB1+rXy21iuAmI/qmYN7lqBE8qPN5k5SnXFbTyhCmSW11o FdSznpn3Zw8/e1DDqSO4oOUCuDEjI4k= -----END CERTIFICATE-----Generated at Sun Apr 19 10:16:01 2026 by rpki-client