$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa File: cd2df271-2b95-385d-832e-feca68b24c5f.roa (raw, json) Hash identifier: dPQxtmWA1I2j4tC1SQbDixoLP8SBwRVTYkrxOu/8WUU= Subject key identifier: A4:D7:58:7C:51:4F:48:6B:9E:FD:09:11:26:12:E4:1B:47:52:E3:BE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA28EE8177F32DC6D2E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a2:8e:e8:17:7f:32:dc:6d:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=234daa81-3c0f-454f-b2bb-cbbcaf97a017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:49:7c:e0:7f:a6:36:8b:68:f3:09:51:4a:41: c6:e6:b8:3d:38:70:76:23:47:10:eb:15:c8:fb:34: 3a:38:c5:aa:99:71:b9:7d:ac:6f:23:19:5a:1c:2e: 29:f9:bd:fd:1a:f7:87:c1:5b:e4:9b:0c:ff:bd:53: 3a:4a:df:01:38:99:dc:1c:88:31:bd:e3:37:44:f9: b2:e5:99:b0:c3:84:b2:3d:9d:2b:9d:78:02:30:5e: e3:ad:29:d0:34:71:0e:39:a8:b4:03:e3:95:93:df: 7a:e7:cf:da:e0:91:12:81:23:e4:8e:a5:5f:a4:11: 75:52:22:1e:ff:09:65:ab:cc:2e:c6:b0:0d:06:33: 57:c3:c7:1c:74:57:88:45:23:4d:16:34:d9:1f:95: 87:11:e2:0f:d3:9a:80:30:2a:66:be:15:5c:24:fb: 1f:ce:ca:cc:84:57:0f:79:bc:d8:ee:c8:f9:93:bc: d6:f8:87:4f:17:5e:34:1a:81:52:b2:df:22:63:94: f4:b5:ce:b7:61:72:7f:c4:f5:bb:2f:b0:2a:97:7b: 9a:c8:a3:77:e7:bf:3a:cf:ec:6f:77:9e:db:58:dd: 89:30:0f:5d:e6:36:55:c1:17:fa:b8:39:10:8c:35: 4c:62:67:cf:7c:98:e3:00:e3:30:bb:84:70:f4:e7: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D7:58:7C:51:4F:48:6B:9E:FD:09:11:26:12:E4:1B:47:52:E3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd2df271-2b95-385d-832e-feca68b24c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c5:40:a3:6a:f6:d4:aa:09:1e:67:da:3d:97:71:9f:e9:76: de:4f:7c:89:1e:2c:d8:57:e9:a2:e6:44:44:b7:6a:8c:2f:fb: 12:c8:42:eb:54:8a:03:80:ca:f5:a9:11:bf:e0:7f:34:76:d9: c0:bc:97:6b:9c:5c:0c:96:65:f4:23:0d:e0:20:50:05:df:71: 53:39:53:04:04:a0:ea:ac:eb:d6:88:3f:ef:5e:98:65:92:13: d9:57:82:27:b9:e4:e0:e5:8f:a4:f2:96:77:97:74:7d:f4:0d: 43:bd:d2:31:ed:53:f9:ed:06:48:8b:70:52:72:84:e0:b5:5c: d8:17:34:14:97:39:f9:38:4b:81:c6:ab:6d:49:f8:a7:0e:90: 6d:ce:31:e5:e4:ae:8e:95:3d:10:90:f5:e3:e1:f8:64:2e:03: 7f:51:60:40:f3:26:b5:e2:84:89:ea:89:b3:dc:b7:bd:98:32: 4d:ac:3f:87:6c:e6:7b:5b:c5:9e:9a:ea:07:a5:dc:bb:c5:87: c2:d9:ed:22:71:46:ec:c6:4f:79:58:fb:f0:f2:5f:0b:d9:8c: 32:9c:8a:88:c8:ea:1b:ec:74:53:c7:78:a3:f6:dc:14:5e:dd: 7e:c1:cf:47:76:27:37:ff:66:8f:c3:c2:94:71:fd:61:77:91: 9a:5a:19:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6KO6Bd/MtxtLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk MjM0ZGFhODEtM2MwZi00NTRmLWIyYmItY2JiY2FmOTdhMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEl84H+mNoto8wlRSkHG5rg9OHB2I0cQ6xXI +zQ6OMWqmXG5faxvIxlaHC4p+b39GveHwVvkmwz/vVM6St8BOJncHIgxveM3RPmy 5Zmww4SyPZ0rnXgCMF7jrSnQNHEOOai0A+OVk99658/a4JESgSPkjqVfpBF1UiIe /wllq8wuxrANBjNXw8ccdFeIRSNNFjTZH5WHEeIP05qAMCpmvhVcJPsfzsrMhFcP ebzY7sj5k7zW+IdPF140GoFSst8iY5T0tc63YXJ/xPW7L7Aql3uayKN35786z+xv d57bWN2JMA9d5jZVwRf6uDkQjDVMYmfPfJjjAOMwu4Rw9OdSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTXWHxRT0hrnv0JESYS5BtHUuO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2QyZGYyNzEtMmI5NS0z ODVkLTgzMmUtZmVjYTY4YjI0YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATFQKNq9tSqCR5n2j2XcZ/pdt5PfIkeLNhX6aLmRES3aowv+xLIQutU igOAyvWpEb/gfzR22cC8l2ucXAyWZfQjDeAgUAXfcVM5UwQEoOqs69aIP+9emGWS E9lXgie55ODlj6TylneXdH30DUO90jHtU/ntBkiLcFJyhOC1XNgXNBSXOfk4S4HG q21J+KcOkG3OMeXkro6VPRCQ9ePh+GQuA39RYEDzJrXihInqibPct72YMk2sP4ds 5ntbxZ6a6gel3LvFh8LZ7SJxRuzGT3lY+/DyXwvZjDKciojI6hvsdFPHeKP23BRe 3X7Bz0d2Jzf/Zo/DwpRx/WF3kZpaGYA= -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:09 2026 by rpki-client