$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa File: ecc2d811-2654-3b7a-a080-044317643aa7.roa (raw, json) Hash identifier: hFlsUFZa7vezTeZBRNstAHZP+t41DffQ5P+Ah90G7HI= Subject key identifier: AB:5C:E6:A7:F5:FC:A2:28:55:3F:1A:F2:7B:2E:8A:CB:1C:E1:D3:E6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA0ABDD59F289EFAF23C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a0:ab:dd:59:f2:89:ef:af:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=d9978df7-5bbf-489a-bb30-3798f522e8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:94:31:14:32:56:52:35:90:39:1c:fe:90: 5f:81:da:3a:2b:a0:2a:3a:ba:2f:97:92:4f:87:3b: 3a:4c:d7:ca:f7:09:4a:4e:1b:80:12:7c:9d:f1:d2: b7:0a:19:a3:77:7e:bc:6c:79:07:ca:16:30:96:10: 38:ca:bf:9e:25:3d:07:7f:07:95:e3:b6:3a:b8:58: 30:4d:f2:0e:67:1d:16:5c:74:48:63:13:54:d5:a4: b0:72:e4:d6:a1:06:e3:8b:fd:f0:19:0f:71:0e:b5: 79:b1:c8:46:c7:71:0d:f2:8c:b1:9b:b6:f9:3f:ab: 28:4b:9b:7d:7d:03:bf:72:f0:d3:46:fd:d0:72:92: 26:0d:c5:3d:ad:e3:8f:7c:39:30:a6:b2:16:75:ab: 04:de:f2:21:12:3d:52:fc:46:ca:45:55:9c:2c:86: 23:0f:e9:1d:4a:95:96:90:39:b4:52:ec:6a:a1:67: f9:5a:47:46:f8:5c:ac:d8:5e:9f:c6:66:dd:e2:21: 8d:d6:ed:d5:04:22:c8:71:ee:3a:9d:ad:1f:34:12: cb:ba:79:58:07:37:2f:88:37:f1:db:d8:22:0b:ae: 31:b7:f3:45:e6:f0:71:c2:18:55:fa:04:8c:f6:ef: 8f:8f:84:5a:d4:67:76:1c:9e:19:bd:c7:2d:9a:5b: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:E6:A7:F5:FC:A2:28:55:3F:1A:F2:7B:2E:8A:CB:1C:E1:D3:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecc2d811-2654-3b7a-a080-044317643aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ba:3a:57:e5:fa:3e:32:36:25:8b:0b:8a:5b:47:41:35:e3: 18:c8:9b:5d:c3:b3:c5:4d:ae:e9:16:a2:d5:ef:c5:a2:2e:dd: 4e:0f:d6:9a:a8:ac:9d:21:2a:c6:4f:68:0a:cb:e0:6b:85:2c: df:e6:42:79:c0:f1:e1:ea:81:50:7c:b9:b3:7a:3c:fb:0c:e4: c2:4c:e1:4b:1d:bd:37:56:a5:a1:c4:34:0a:f8:62:04:51:a9: 0f:bd:ad:46:16:41:d0:fd:eb:5f:4b:74:89:7f:4d:c2:fa:09: a4:8f:6a:e0:57:ed:2a:db:98:2a:ff:a5:62:7a:13:8f:30:c0: 05:13:e7:5e:d2:91:bd:4b:44:9c:be:91:91:93:01:e9:b8:54: de:af:7a:ca:64:fa:23:b7:c5:47:f5:8d:23:87:11:3b:6f:fb: 8a:de:17:69:e5:13:d7:1c:48:4d:22:a7:ac:a8:75:28:8c:18: 99:6f:27:ce:52:e1:3f:9a:d4:08:1e:9b:ff:c3:58:68:92:cd: cf:5e:94:35:58:ae:c7:8b:b8:3b:a2:18:3b:93:a7:50:e7:f7: ef:f0:fb:6f:37:85:9a:a4:35:f3:e7:76:5d:cf:c8:8b:49:15: 20:0d:a7:7f:ff:64:ab:7a:ea:ab:9e:f9:11:77:75:39:8f:f1: 93:e4:82:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6Cr3Vnyie+vI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZDk5NzhkZjctNWJiZi00ODlhLWJiMzAtMzc5OGY1MjJlOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIuUMRQyVlI1kDkc/pBfgdo6K6AqOrovl5JP hzs6TNfK9wlKThuAEnyd8dK3Chmjd368bHkHyhYwlhA4yr+eJT0HfweV47Y6uFgw TfIOZx0WXHRIYxNU1aSwcuTWoQbji/3wGQ9xDrV5schGx3EN8oyxm7b5P6soS5t9 fQO/cvDTRv3QcpImDcU9reOPfDkwprIWdasE3vIhEj1S/EbKRVWcLIYjD+kdSpWW kDm0UuxqoWf5WkdG+Fys2F6fxmbd4iGN1u3VBCLIce46na0fNBLLunlYBzcviDfx 29giC64xt/NF5vBxwhhV+gSM9u+Pj4Ra1Gd2HJ4Zvcctmlvo4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtc5qf1/KIoVT8a8nsuissc4dPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWNjMmQ4MTEtMjY1NC0z YjdhLWEwODAtMDQ0MzE3NjQzYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe6Olfl+j4yNiWLC4pbR0E14xjIm13Ds8VNrukWotXvxaIu3U4P1pqo rJ0hKsZPaArL4GuFLN/mQnnA8eHqgVB8ubN6PPsM5MJM4UsdvTdWpaHENAr4YgRR qQ+9rUYWQdD9619LdIl/TcL6CaSPauBX7SrbmCr/pWJ6E48wwAUT517Skb1LRJy+ kZGTAem4VN6vespk+iO3xUf1jSOHETtv+4reF2nlE9ccSE0ip6yodSiMGJlvJ85S 4T+a1Agem//DWGiSzc9elDVYrseLuDuiGDuTp1Dn9+/w+283hZqkNfPndl3PyItJ FSANp3//ZKt66que+RF3dTmP8ZPkgjU= -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:52 2026 by rpki-client