$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef408615-a6bd-3a48-8abd-5dd13883e0f8.roa File: ef408615-a6bd-3a48-8abd-5dd13883e0f8.roa (raw, json) Hash identifier: eVjekA40ZnrANiko1hamZpihVBx/VAgx1yLBBWupfys= Subject key identifier: DF:5C:E9:79:08:7E:5F:CE:A2:F8:21:5B:F4:2C:4D:65:78:02:B6:21 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBFA0CC61DB1A52D2DF4B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef408615-a6bd-3a48-8abd-5dd13883e0f8.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.94.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a0:cc:61:db:1a:52:d2:df:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=1a298b0c-af1f-495b-91bf-458b6a4eab95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:b3:1e:97:44:78:27:78:e9:d3:12:dd:5d: a0:54:b6:da:23:d8:b4:62:99:6b:56:62:a7:3b:48: b3:16:17:03:cb:a9:b6:69:11:5d:a9:cb:5d:77:0d: a0:57:76:78:ad:d7:31:9e:fb:a2:f8:cd:bd:54:d7: 0f:ee:88:80:b5:69:a9:11:c7:da:57:47:94:74:47: ea:14:b0:38:c4:d7:dc:e2:00:7e:13:b3:ed:5e:bc: 79:33:45:1c:a8:36:a0:a6:2d:72:71:39:09:a7:07: 75:f1:d8:56:99:18:5f:1f:f1:ba:8f:7b:79:3f:24: 1f:d1:b0:13:25:7c:f9:fb:71:e6:7d:5b:55:e1:5b: 56:4a:d5:81:b4:7d:39:6f:48:3f:11:b7:07:53:11: 7a:8c:4b:2e:81:63:e9:b7:fc:9b:12:29:b7:0f:8e: a3:73:2a:ca:02:b7:e5:f9:48:b9:97:4a:40:da:ef: b4:24:cd:08:2d:5c:ec:c4:4a:7b:5c:de:32:6a:c1: 0b:ae:81:f3:00:32:7f:d7:e1:f1:5f:bd:53:82:4e: 13:eb:6f:5e:5c:62:da:52:a7:0d:db:b9:ea:53:6d: 93:16:8c:6a:1f:32:15:09:b8:06:03:54:a8:01:87: 73:ff:3e:62:df:5f:99:e5:4a:cf:71:42:21:d0:cb: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5C:E9:79:08:7E:5F:CE:A2:F8:21:5B:F4:2C:4D:65:78:02:B6:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef408615-a6bd-3a48-8abd-5dd13883e0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4a:47:ac:8b:af:f8:86:24:5c:37:26:42:ed:60:92:39:16: 55:7b:84:94:2b:9b:10:6a:64:20:a1:b8:af:30:ec:f4:04:55: e2:7d:a7:74:87:18:f0:a9:fa:25:2b:6c:ad:dd:f9:4a:7a:8a: bd:b1:3e:1a:d3:00:d4:89:34:3e:ba:2b:cd:d7:6a:33:20:ea: b5:17:d2:04:9c:ab:ad:cd:58:be:91:47:81:5c:a8:28:a4:f0: c6:35:9d:f6:ad:7b:30:b6:49:fc:e7:d0:51:ad:ef:2a:04:0f: 7c:fe:e9:05:eb:44:ad:51:b3:61:84:d4:79:c6:86:4e:de:44: e5:30:e2:1b:2e:e9:cb:aa:79:a5:98:f1:98:ba:91:c3:4d:f2: df:2e:e3:73:23:4f:29:2e:24:cb:7b:d1:03:ad:e0:5b:16:57: 6a:44:ae:87:1e:7c:95:4f:17:58:03:f3:ae:8f:1d:72:d8:1e: fa:41:62:de:c8:ac:e3:22:fa:37:68:f2:f4:74:9f:d2:1c:61: d6:16:70:f6:d7:a0:5f:f8:56:72:60:e2:b3:da:2a:5e:18:df: f1:87:62:ed:62:a7:d6:ce:66:b4:f5:7f:49:01:e7:0b:27:5f: 11:85:a0:73:83:9f:f5:83:f4:8b:0a:5a:66:26:01:47:dc:74: 59:23:bc:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6DMYdsaUtLfS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk MWEyOThiMGMtYWYxZi00OTViLTkxYmYtNDU4YjZhNGVhYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvSzHpdEeCd46dMS3V2gVLbaI9i0YplrVmKn O0izFhcDy6m2aRFdqctddw2gV3Z4rdcxnvui+M29VNcP7oiAtWmpEcfaV0eUdEfq FLA4xNfc4gB+E7PtXrx5M0UcqDagpi1ycTkJpwd18dhWmRhfH/G6j3t5PyQf0bAT JXz5+3HmfVtV4VtWStWBtH05b0g/EbcHUxF6jEsugWPpt/ybEim3D46jcyrKArfl +Ui5l0pA2u+0JM0ILVzsxEp7XN4yasELroHzADJ/1+HxX71Tgk4T629eXGLaUqcN 27nqU22TFoxqHzIVCbgGA1SoAYdz/z5i31+Z5UrPcUIh0MvEYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9c6XkIfl/OovghW/QsTWV4ArYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWY0MDg2MTUtYTZiZC0z YTQ4LThhYmQtNWRkMTM4ODNlMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1KR6yLr/iGJFw3JkLtYJI5FlV7hJQrmxBqZCChuK8w7PQEVeJ9p3SH GPCp+iUrbK3d+Up6ir2xPhrTANSJND66K83XajMg6rUX0gScq63NWL6RR4FcqCik 8MY1nfatezC2Sfzn0FGt7yoED3z+6QXrRK1Rs2GE1HnGhk7eROUw4hsu6cuqeaWY 8Zi6kcNN8t8u43MjTykuJMt70QOt4FsWV2pErocefJVPF1gD866PHXLYHvpBYt7I rOMi+jdo8vR0n9IcYdYWcPbXoF/4VnJg4rPaKl4Y3/GHYu1ip9bOZrT1f0kB5wsn XxGFoHODn/WD9IsKWmYmAUfcdFkjvH8= -----END CERTIFICATE-----Generated at Fri Apr 17 10:24:58 2026 by rpki-client