$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d43f093e-aa1f-38fb-985b-08b23c2d1995.roa File: d43f093e-aa1f-38fb-985b-08b23c2d1995.roa (raw, json) Hash identifier: AkPS1Z0MQB+lLC6xeszs6B7/tenQag3Afv5s5dvbh0U= Subject key identifier: B6:80:C2:A9:5D:5F:70:6C:76:46:8F:3F:61:C5:33:58:DC:E6:DF:D6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA0903CFC3CDCCDBF5C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d43f093e-aa1f-38fb-985b-08b23c2d1995.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a0:90:3c:fc:3c:dc:cd:bf:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=481a4046-cc8f-4f51-a9b5-e92a469f57b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:78:ce:e2:99:33:12:41:c9:5d:61:9a:0f: 9f:c0:cb:77:a9:31:27:fd:09:cb:ac:9f:e7:ae:48: bc:78:d2:66:99:55:b3:23:59:b8:34:2d:0f:e9:c7: 7f:47:7f:18:20:22:03:fc:0f:82:8f:0b:50:94:cd: ab:e3:4c:66:cd:dd:a0:d6:bc:c4:26:d5:d6:2e:17: c6:a6:da:58:9f:73:28:5d:e7:72:8c:cf:01:ca:e9: 04:f6:9b:b6:54:de:62:70:ac:95:b2:19:cf:ed:8c: 25:fb:cc:cb:e5:1d:42:a1:11:76:f5:0c:dd:05:09: 85:07:b6:c4:23:2f:eb:7e:45:0c:66:e6:e7:6b:29: ea:ef:e5:b2:a9:c8:35:c9:dd:98:84:fe:58:24:52: a4:18:2b:5a:fd:b6:29:80:49:a4:39:b2:67:fa:00: ab:bf:9e:4c:3d:13:4c:28:40:09:c0:f8:dc:8a:0d: e2:08:4c:ff:5a:61:a6:cd:c8:50:05:21:ea:2c:37: 59:1d:89:62:c8:71:3f:29:2d:0a:43:47:e6:7b:bc: 4b:85:b2:17:2c:02:23:84:fb:a6:34:a6:77:05:94: 0e:92:c6:c4:c2:66:f8:57:ef:a0:e2:18:3b:80:4a: 83:74:77:e1:73:cb:99:76:e6:02:61:1c:32:e3:4e: 9e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:80:C2:A9:5D:5F:70:6C:76:46:8F:3F:61:C5:33:58:DC:E6:DF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d43f093e-aa1f-38fb-985b-08b23c2d1995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c6:2b:0a:6f:e0:df:7e:57:06:d6:58:5c:61:69:24:e5:a9: 61:8b:95:1e:c8:e8:3e:b4:24:57:d1:28:79:c1:a0:4f:ba:dd: df:91:66:35:86:72:0d:31:68:b0:54:12:fd:c8:85:8a:c3:d1: 16:d5:f8:2b:d4:2b:72:cd:81:46:75:43:9d:52:a5:cb:84:a0: 65:45:da:fc:71:49:67:4f:0c:7c:53:c2:7c:cf:42:a6:85:55: 64:a9:96:e7:1c:31:9d:48:38:ed:db:a8:5d:a5:17:ee:3b:69: 21:86:06:86:68:b7:b6:52:16:82:47:d9:c3:b5:7b:70:5f:1e: b7:59:1c:44:12:19:cb:37:8a:7c:95:6b:df:43:10:78:16:07: fd:d2:65:e3:73:f5:bd:1f:79:76:c8:f2:90:87:1e:b0:6e:18: 05:49:5d:cc:9a:c5:f4:b3:ed:0a:ad:2b:e0:b8:5d:a0:6e:a8: c4:c0:3f:d0:cf:40:d6:11:ea:d3:25:b7:69:c7:2a:44:f3:54: 32:09:56:0a:f1:e9:d2:56:24:ec:40:01:d2:f5:78:e2:a7:34: 7f:ca:1a:68:75:19:49:ca:7c:3e:f7:6e:27:44:72:fa:3c:55: 10:14:ef:20:ac:a1:de:3d:1b:f5:d1:6d:d3:3c:f9:1a:fb:d6: 4d:45:1d:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6CQPPw83M2/XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk NDgxYTQwNDYtY2M4Zi00ZjUxLWE5YjUtZTkyYTQ2OWY1N2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorp4zuKZMxJByV1hmg+fwMt3qTEn/QnLrJ/n rki8eNJmmVWzI1m4NC0P6cd/R38YICID/A+CjwtQlM2r40xmzd2g1rzEJtXWLhfG ptpYn3MoXedyjM8ByukE9pu2VN5icKyVshnP7Ywl+8zL5R1CoRF29QzdBQmFB7bE Iy/rfkUMZubnaynq7+Wyqcg1yd2YhP5YJFKkGCta/bYpgEmkObJn+gCrv55MPRNM KEAJwPjcig3iCEz/WmGmzchQBSHqLDdZHYliyHE/KS0KQ0fme7xLhbIXLAIjhPum NKZ3BZQOksbEwmb4V++g4hg7gEqDdHfhc8uZduYCYRwy406euQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaAwqldX3BsdkaPP2HFM1jc5t/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDQzZjA5M2UtYWExZi0z OGZiLTk4NWItMDhiMjNjMmQxOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITGKwpv4N9+VwbWWFxhaSTlqWGLlR7I6D60JFfRKHnBoE+63d+RZjWG cg0xaLBUEv3IhYrD0RbV+CvUK3LNgUZ1Q51SpcuEoGVF2vxxSWdPDHxTwnzPQqaF VWSpluccMZ1IOO3bqF2lF+47aSGGBoZot7ZSFoJH2cO1e3BfHrdZHEQSGcs3inyV a99DEHgWB/3SZeNz9b0feXbI8pCHHrBuGAVJXcyaxfSz7QqtK+C4XaBuqMTAP9DP QNYR6tMlt2nHKkTzVDIJVgrx6dJWJOxAAdL1eOKnNH/KGmh1GUnKfD73bidEcvo8 VRAU7yCsod49G/XRbdM8+Rr71k1FHRY= -----END CERTIFICATE-----Generated at Sun Apr 19 08:56:17 2026 by rpki-client