$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa File: b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa (raw, json) Hash identifier: /PW3JH2CIoqVVYGFzEJ4DWQmzRYHyZuv+h3OYDY+HzI= Subject key identifier: 61:FA:19:E8:DB:59:8E:B5:DA:B6:C5:BE:46:9E:E6:7C:11:0B:A7:28 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CEFF22470C81A6F9D24742E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 137409 IP address blocks: 172.94.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:24:70:c8:1a:6f:9d:24:74:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=40e652bc-95a1-411f-b56d-4bb66a9f8326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:15:f4:fc:0d:6b:ed:39:60:5f:c2:19:49:36: dc:9c:68:b1:95:ad:53:17:89:ca:10:ee:89:79:67: 15:45:78:6e:ea:d6:93:d0:33:99:3c:d3:18:fc:fd: 11:30:fc:e3:c4:5a:3b:55:35:d8:d3:c2:f9:8f:46: c7:ce:98:ff:57:de:af:25:30:52:f7:a6:c2:a6:0f: ae:b5:ca:2d:3e:fb:42:fc:99:9c:20:a7:4b:4e:04: 76:5f:44:08:56:b4:e9:e3:e9:2c:99:d1:f8:80:5d: b1:ca:16:0e:cc:54:61:5a:14:e7:a7:21:74:fa:e4: 99:53:06:ae:08:c7:0a:9c:12:b6:d4:b5:97:cd:e0: cc:be:14:8b:04:42:7d:70:e5:09:61:76:de:cb:57: e7:de:20:2d:b6:c2:3a:1f:c6:f8:44:f7:e0:f9:b2: 06:90:fc:a8:72:18:0d:3a:97:55:4c:0f:16:de:da: 18:6e:10:3f:86:3b:78:e9:a5:42:54:67:07:7c:23: a8:6e:89:84:7e:d0:78:7a:12:6b:06:ec:2d:f0:35: 11:e7:b6:95:3f:e1:dd:05:3c:b7:84:92:58:3b:51: 50:1a:ae:b6:93:61:d6:ef:19:a3:61:49:e3:08:89: c1:98:6d:37:86:cf:20:cd:8d:9f:8c:19:b1:7c:c8: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FA:19:E8:DB:59:8E:B5:DA:B6:C5:BE:46:9E:E6:7C:11:0B:A7:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:86:0a:7c:57:8e:f9:93:6a:cc:ea:59:4d:6f:49:ba:44:ac: 97:47:46:e4:8f:b1:d6:44:22:ba:85:19:53:a8:2b:d5:8d:0b: 00:61:51:c2:b0:b0:07:68:f1:b8:8c:6c:01:d3:a8:fe:38:e9: 89:56:56:72:bb:8a:d9:de:e1:c4:1f:74:b5:a3:11:39:99:a0: 9c:95:f7:25:2d:c7:56:7f:a4:22:91:77:86:a1:ee:03:3e:24: a6:ec:3b:57:c1:b3:03:5f:47:52:91:4c:34:de:52:ae:19:cb: 0b:79:78:df:30:12:2c:39:fc:a3:53:59:61:fa:bc:cd:8b:d7: 9c:26:77:89:17:ba:b4:03:3e:01:04:9c:74:9f:38:f1:60:17: a2:00:b8:94:3f:38:4d:65:a0:0c:5d:72:bf:83:e2:ee:7e:18: 5d:09:ac:7b:62:5b:a5:bd:4e:41:f5:84:e3:98:c1:9b:f2:e2: a3:1b:ee:3a:07:0e:28:35:6e:85:d9:c3:47:5d:15:b4:c7:bd: 35:c7:fc:ff:10:d0:a6:ff:0e:f3:2c:aa:c5:a3:e7:8e:d9:38: 50:49:aa:08:34:47:14:30:28:3c:0f:ae:de:aa:f5:72:24:6f: 28:d6:37:20:56:e0:35:7c:2c:59:ab:86:8d:c0:c2:3d:29:2f: 0d:5a:60:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8iRwyBpvnSR0LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk NDBlNjUyYmMtOTVhMS00MTFmLWI1NmQtNGJiNjZhOWY4MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxX0/A1r7TlgX8IZSTbcnGixla1TF4nKEO6J eWcVRXhu6taT0DOZPNMY/P0RMPzjxFo7VTXY08L5j0bHzpj/V96vJTBS96bCpg+u tcotPvtC/JmcIKdLTgR2X0QIVrTp4+ksmdH4gF2xyhYOzFRhWhTnpyF0+uSZUwau CMcKnBK21LWXzeDMvhSLBEJ9cOUJYXbey1fn3iAttsI6H8b4RPfg+bIGkPyochgN OpdVTA8W3toYbhA/hjt46aVCVGcHfCOobomEftB4ehJrBuwt8DUR57aVP+HdBTy3 hJJYO1FQGq62k2HW7xmjYUnjCInBmG03hs8gzY2fjBmxfMj1ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH6GejbWY612rbFvkae5nwRC6coMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjY3NmVlZDktZTliMy0z Njk5LWEwM2QtYmVjNTE5NmFjMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+GCnxXjvmTaszqWU1vSbpErJdHRuSPsdZEIrqFGVOoK9WNCwBhUcKw sAdo8biMbAHTqP446YlWVnK7itne4cQfdLWjETmZoJyV9yUtx1Z/pCKRd4ah7gM+ JKbsO1fBswNfR1KRTDTeUq4Zywt5eN8wEiw5/KNTWWH6vM2L15wmd4kXurQDPgEE nHSfOPFgF6IAuJQ/OE1loAxdcr+D4u5+GF0JrHtiW6W9TkH1hOOYwZvy4qMb7joH Dig1boXZw0ddFbTHvTXH/P8Q0Kb/DvMsqsWj547ZOFBJqgg0RxQwKDwPrt6q9XIk byjWNyBW4DV8LFmrho3Awj0pLw1aYBA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:24 2026 by rpki-client