
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa
File: c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa (raw, json)
Hash identifier: aiw+SKNTL1k3eKeOlTlfJD+SLHMRBc3FC/ixNcfw4Q0=
Subject key identifier: 45:F8:FA:01:54:CD:4E:81:C6:CE:45:B6:16:8E:CF:C3:2D:75:73:15
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584D87FA8D77F3D1A86EB868DD00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa
Signing time: Fri 17 Apr 2026 01:00:27 +0000
ROA not before: Fri 17 Apr 2026 01:00:27 +0000
ROA not after: Thu 16 Jul 2026 01:00:27 +0000
asID: 55154
IP address blocks: 172.94.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:87:fa:8d:77:f3:d1:a8:6e:b8:68:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Jul 16 01:00:27 2026 GMT
Subject: CN=94996b9e-cedb-4fe3-a753-53fe89a5e52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:4a:54:4b:87:db:53:f6:8c:5b:db:4e:4a:
f4:31:4d:c0:00:db:2e:19:c8:b5:47:72:bf:68:65:
5a:0c:8d:d5:48:41:96:b8:72:b7:b5:8d:dd:76:26:
3d:12:cc:a0:be:be:7d:74:51:23:d8:72:18:14:15:
bd:f5:c6:5f:47:b5:0e:59:85:36:a1:8c:45:6a:a9:
ad:42:b5:e2:54:d5:21:a8:98:91:2b:9b:ae:a6:ab:
1e:3c:99:b5:2e:8a:22:ef:cf:fb:d9:3d:e8:6a:e8:
a0:1f:11:00:31:54:08:50:a1:a7:ac:67:a2:d7:e2:
2a:88:6c:ce:63:f0:eb:42:6f:18:b1:90:1a:58:ee:
80:c6:d1:e5:e5:84:4d:00:57:02:c4:b9:ef:24:6e:
bc:d4:2c:5e:f1:89:ad:69:b7:3e:da:5c:b9:75:ea:
d4:7a:46:db:37:41:a2:8f:f2:8e:9a:0f:47:41:9a:
50:5b:bf:1e:2b:f6:c1:5c:a1:d1:3e:77:2a:47:9d:
cf:be:e2:17:f1:92:0a:eb:ba:4f:87:e9:88:dc:14:
ac:51:a3:3e:c0:5f:25:fc:42:f8:6b:a4:a4:d2:59:
df:ef:05:4f:11:73:f0:1f:ff:b5:67:e1:ad:36:c8:
51:97:e3:d3:f6:f1:4d:1c:b2:77:c5:7a:c1:12:d0:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:FA:01:54:CD:4E:81:C6:CE:45:B6:16:8E:CF:C3:2D:75:73:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c631b2bf-5d32-3f37-9364-b5b72f95d3d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:30:0f:5a:4f:61:c7:37:c2:a8:c4:fe:41:d0:49:7f:fa:1e:
83:7b:22:e3:80:c0:e2:12:67:73:e9:03:c4:6c:d6:be:fd:1a:
cd:40:2c:e7:a9:75:f9:9f:65:bd:2a:b1:a5:48:c9:61:e6:68:
11:79:47:f2:68:d8:47:6a:bd:88:6a:49:25:18:04:c3:7f:90:
38:7f:9b:d3:06:97:11:ff:43:d1:32:d1:c2:4f:73:44:00:ac:
b9:95:44:a1:b9:d0:5b:60:a8:3c:a4:39:3e:88:c2:bb:17:a0:
8c:97:aa:0c:3f:d2:dc:4b:1b:02:e2:f9:c5:d1:41:c4:39:4a:
eb:71:05:e8:86:24:a3:01:bd:32:a8:1d:cb:e5:42:3c:65:6c:
04:01:ec:22:a5:35:72:b1:f8:bf:f1:b6:7b:6a:00:56:9f:5b:
fb:8a:47:0e:33:fc:a0:ba:49:fd:26:4d:07:d7:aa:11:50:99:
45:12:28:06:f0:69:1d:84:1d:1c:14:00:01:72:b2:37:a1:c6:
55:0e:6f:b5:09:c8:0d:cb:11:f4:ed:ed:69:88:58:33:35:de:
fa:84:6a:db:3d:3a:82:03:bc:fd:33:25:1c:27:b3:10:7d:b8:
ee:87:b2:df:e1:8a:95:98:2d:2f:54:db:d6:b3:f3:a8:1c:26:
6d:56:28:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+o1389Gobrho3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk
OTQ5OTZiOWUtY2VkYi00ZmUzLWE3NTMtNTNmZTg5YTVlNTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5hKVEuH21P2jFvbTkr0MU3AANsuGci1R3K/
aGVaDI3VSEGWuHK3tY3ddiY9Esygvr59dFEj2HIYFBW99cZfR7UOWYU2oYxFaqmt
QrXiVNUhqJiRK5uupqsePJm1Looi78/72T3oauigHxEAMVQIUKGnrGei1+IqiGzO
Y/DrQm8YsZAaWO6AxtHl5YRNAFcCxLnvJG681Cxe8Ymtabc+2ly5derUekbbN0Gi
j/KOmg9HQZpQW78eK/bBXKHRPncqR53PvuIX8ZIK67pPh+mI3BSsUaM+wF8l/EL4
a6Sk0lnf7wVPEXPwH/+1Z+GtNshRl+PT9vFNHLJ3xXrBEtCetwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEX4+gFUzU6Bxs5FthaOz8MtdXMVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzYzMWIyYmYtNWQzMi0z
ZjM3LTkzNjQtYjViNzJmOTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEowD1pPYcc3wqjE/kHQSX/6HoN7IuOAwOISZ3PpA8Rs1r79Gs1ALOep
dfmfZb0qsaVIyWHmaBF5R/Jo2EdqvYhqSSUYBMN/kDh/m9MGlxH/Q9Ey0cJPc0QA
rLmVRKG50FtgqDykOT6IwrsXoIyXqgw/0txLGwLi+cXRQcQ5SutxBeiGJKMBvTKo
HcvlQjxlbAQB7CKlNXKx+L/xtntqAFafW/uKRw4z/KC6Sf0mTQfXqhFQmUUSKAbw
aR2EHRwUAAFysjehxlUOb7UJyA3LEfTt7WmIWDM13vqEats9OoIDvP0zJRwnsxB9
uO6Hst/hipWYLS9U29az86gcJm1WKBs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:38 2026 by rpki-client