$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa File: c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa (raw, json) Hash identifier: J7LwhmK8tz4NjMdp8jDn7l6xBftJmrrhQZ+kmxyWiaU= Subject key identifier: 07:35:53:26:30:02:4C:09:84:F2:88:16:0E:4A:B0:D4:4E:1D:A0:DF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CA75C5B56C25F29621181D400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 55154 IP address blocks: 172.94.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:5b:56:c2:5f:29:62:11:81:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=87be08a4-c90c-4385-a13b-da69a5ef269f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:cf:47:33:92:80:53:49:db:df:ac:69:d0: ae:74:80:36:d7:c0:71:d3:5b:e0:74:8e:59:8f:68: 0f:85:d7:3a:54:53:2e:53:2c:fd:93:76:c4:59:06: 28:9e:fb:4e:04:94:d5:70:26:5b:df:66:0f:59:ca: 2f:6c:bc:20:1d:57:4b:12:60:cd:62:bf:0f:0a:2a: 2c:4a:fc:a3:dc:8b:1e:a9:05:a0:31:cb:83:4c:31: 16:c9:5b:a5:ee:76:8a:57:1d:b2:61:63:cc:90:92: 42:0c:47:c8:cd:21:26:3f:6b:47:8d:8d:72:d8:dc: dc:d8:f5:d3:64:bb:0c:3c:02:70:a3:6b:1c:a9:f1: 6d:7c:49:bc:cd:a4:b1:52:d3:0e:55:24:57:c6:9a: 66:59:45:40:05:4b:f2:be:e6:2b:03:b9:3e:08:2f: 92:b6:c1:69:2f:9c:5d:d9:29:38:b2:89:1b:21:eb: b1:49:76:98:7c:21:d4:18:15:57:e0:68:d1:fb:32: c7:53:ca:6a:03:2a:f7:0e:64:8a:2c:9c:d7:cd:d1: b3:da:2c:43:ff:3e:29:96:c3:a6:30:36:a6:71:ff: 0a:48:79:15:c2:5c:ee:d5:6f:04:ad:23:a0:20:67: 46:f0:46:de:d2:b2:89:77:28:0a:61:6f:68:11:93: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:35:53:26:30:02:4C:09:84:F2:88:16:0E:4A:B0:D4:4E:1D:A0:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:bf:98:4d:d7:6a:8c:5a:d5:cd:2a:11:34:44:03:ea:b4:1e: 56:cf:23:20:9a:d9:c2:51:df:90:3e:1a:72:40:60:71:7a:04: b4:0b:75:38:eb:1b:5c:e0:6d:63:69:e4:fc:38:e1:aa:60:51: ff:6f:f9:2e:59:40:03:0e:b6:53:52:4d:eb:5d:19:e4:e3:d5: 1a:f9:d5:6e:ab:96:78:86:9d:7d:9b:16:42:3d:2e:29:1f:54: 6e:c3:e9:38:3c:fa:db:27:61:08:8b:f8:69:93:f5:4e:f7:7a: e1:60:48:47:da:05:65:cf:2b:64:cf:da:9b:90:18:d4:40:36: aa:95:49:0e:4a:a3:1e:cd:9f:f3:85:b2:a6:d6:17:61:06:5e: 32:7e:94:dc:9b:fb:46:74:40:d5:a5:21:46:20:50:d9:6e:ed: 34:0f:37:51:d8:7b:79:59:3b:d9:05:1e:41:34:f9:f7:4e:0b: ea:01:12:c6:b4:9c:35:e1:f6:cc:af:41:24:d1:1e:e2:ba:6b: ee:26:01:ba:98:e1:07:a0:eb:5b:1b:1d:5f:fc:fb:91:0f:13: 00:fe:6e:25:66:03:d7:d9:6c:8b:6f:e4:bb:ee:36:42:45:a5: 95:5d:0d:91:ac:f8:ac:66:29:23:fa:39:19:6a:26:7b:ae:2e: 4b:5f:63:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXFtWwl8pYhGB1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk ODdiZTA4YTQtYzkwYy00Mzg1LWExM2ItZGE2OWE1ZWYyNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqnPRzOSgFNJ29+sadCudIA218Bx01vgdI5Z j2gPhdc6VFMuUyz9k3bEWQYonvtOBJTVcCZb32YPWcovbLwgHVdLEmDNYr8PCios Svyj3IseqQWgMcuDTDEWyVul7naKVx2yYWPMkJJCDEfIzSEmP2tHjY1y2Nzc2PXT ZLsMPAJwo2scqfFtfEm8zaSxUtMOVSRXxppmWUVABUvyvuYrA7k+CC+StsFpL5xd 2Sk4sokbIeuxSXaYfCHUGBVX4GjR+zLHU8pqAyr3DmSKLJzXzdGz2ixD/z4plsOm MDamcf8KSHkVwlzu1W8ErSOgIGdG8Ebe0rKJdygKYW9oEZOruQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc1UyYwAkwJhPKIFg5KsNROHaDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzYzMWIyYmYtNWQzMi0z ZjM3LTkzNjQtYjViNzJmOTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2/mE3Xaoxa1c0qETREA+q0HlbPIyCa2cJR35A+GnJAYHF6BLQLdTjr G1zgbWNp5Pw44apgUf9v+S5ZQAMOtlNSTetdGeTj1Rr51W6rlniGnX2bFkI9Likf VG7D6Tg8+tsnYQiL+GmT9U73euFgSEfaBWXPK2TP2puQGNRANqqVSQ5Kox7Nn/OF sqbWF2EGXjJ+lNyb+0Z0QNWlIUYgUNlu7TQPN1HYe3lZO9kFHkE0+fdOC+oBEsa0 nDXh9syvQSTRHuK6a+4mAbqY4Qeg61sbHV/8+5EPEwD+biVmA9fZbItv5LvuNkJF pZVdDZGs+KxmKSP6ORlqJnuuLktfY/M= -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:35 2026 by rpki-client