$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f2dfb3cb-387a-3297-92c0-325ceee1c317.roa File: f2dfb3cb-387a-3297-92c0-325ceee1c317.roa (raw, json) Hash identifier: kM+VHox+fFmOXkR6sU9O/yX+lsdUB8kDdLrQ/fm6OwA= Subject key identifier: BA:C7:B3:37:93:FD:73:76:2F:A8:C9:EF:6C:40:7C:9E:7C:26:B3:84 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAF07224A50AFB34F7A67E340 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f2dfb3cb-387a-3297-92c0-325ceee1c317.roa Signing time: Thu 29 Jan 2026 07:55:28 +0000 ROA not before: Thu 29 Jan 2026 07:55:28 +0000 ROA not after: Wed 29 Apr 2026 06:55:28 +0000 asID: 213790 IP address blocks: 172.94.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:07:22:4a:50:af:b3:4f:7a:67:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 29 07:55:28 2026 GMT Not After : Apr 29 06:55:28 2026 GMT Subject: CN=6c82e4a5-c7e4-43da-889c-e4914dd51a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:22:91:14:ed:2a:f3:41:4c:9b:f7:06:54: 37:9f:a2:43:20:eb:13:81:89:84:63:61:4c:5b:07: 67:c2:e7:b5:4e:5f:53:59:54:30:c9:54:cc:96:7c: 1e:d7:a2:a2:f7:c5:d5:92:5b:a4:86:18:ee:f3:f0: f1:8b:73:60:2e:03:43:19:21:ad:77:90:fe:40:b6: 20:9c:d3:00:db:27:ca:92:6e:3c:49:7d:49:eb:58: bf:7b:46:9e:33:64:23:8b:09:54:4f:07:de:00:a6: 64:67:20:0e:19:35:94:0c:62:f9:da:db:fb:99:96: 50:51:aa:c5:0b:c8:ed:6f:b6:47:f0:1c:2e:68:7a: e6:61:84:91:55:09:75:c8:0e:0d:79:4e:f1:54:04: f7:c4:b8:c7:d3:6c:81:75:63:63:49:55:8d:72:91: 05:d8:9f:4e:41:4a:78:36:c7:70:7f:be:f7:2c:db: 30:1b:62:ed:42:11:54:cf:24:6f:2d:98:76:d8:35: f9:3d:ff:c8:85:f6:2b:e4:d7:9a:2d:c9:ed:e1:32: 94:6c:e3:24:79:dd:36:4a:31:9a:9e:ea:47:1a:11: 4a:bd:01:00:9b:f9:5b:c0:19:db:de:49:f1:46:1f: 87:d5:2a:10:95:9d:72:0e:b5:95:b8:d2:6e:60:4c: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C7:B3:37:93:FD:73:76:2F:A8:C9:EF:6C:40:7C:9E:7C:26:B3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f2dfb3cb-387a-3297-92c0-325ceee1c317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:29:54:36:f9:6c:c4:05:bd:9c:2b:c8:73:fa:a7:8c:1d:81: 85:9d:0f:ab:10:d4:39:90:70:27:04:2e:f8:d5:d0:ea:e5:c6: c8:d2:08:b3:36:db:ac:4a:d0:d7:87:e2:af:30:33:92:96:fa: 4c:d3:57:ac:d9:4a:dd:c6:96:2b:21:f5:17:3f:bd:16:2f:f6: 2b:fe:5a:2a:91:c5:c8:cf:96:01:5d:a9:85:ca:19:01:1e:be: 43:51:ec:66:6c:c1:f6:61:1f:ee:d9:96:b5:9e:fb:28:2d:cd: e7:28:63:6e:b7:69:6e:b6:d3:57:27:63:bb:4e:ff:76:94:ed: 01:d0:7a:44:a8:26:24:2f:d5:7f:56:db:c1:ba:2e:e7:b1:72: dc:f8:4c:9a:ce:0c:e7:31:57:08:29:4a:ef:e1:de:3a:6f:1f: c0:15:7e:e0:7c:89:64:fa:c4:46:08:35:ea:67:f8:05:88:21: 62:20:ed:0a:ce:ab:1a:1e:fa:29:95:54:64:92:f0:56:41:a1: 8d:03:ec:43:dc:36:68:4e:d8:dc:07:65:03:72:80:47:39:29: 14:28:80:60:3d:6b:dc:ea:84:d7:c3:e3:30:bf:8b:6d:c5:71: b5:65:79:fc:a2:17:3b:49:f7:93:91:b5:1b:e3:49:38:68:49: ea:71:90:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvByJKUK+zT3pn40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyOTA3NTUyOFoXDTI2MDQyOTA2NTUyOFowLzEtMCsGA1UEAxMk NmM4MmU0YTUtYzdlNC00M2RhLTg4OWMtZTQ5MTRkZDUxYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjoikRTtKvNBTJv3BlQ3n6JDIOsTgYmEY2FM Wwdnwue1Tl9TWVQwyVTMlnwe16Ki98XVklukhhju8/Dxi3NgLgNDGSGtd5D+QLYg nNMA2yfKkm48SX1J61i/e0aeM2QjiwlUTwfeAKZkZyAOGTWUDGL52tv7mZZQUarF C8jtb7ZH8BwuaHrmYYSRVQl1yA4NeU7xVAT3xLjH02yBdWNjSVWNcpEF2J9OQUp4 Nsdwf773LNswG2LtQhFUzyRvLZh22DX5Pf/IhfYr5NeaLcnt4TKUbOMked02SjGa nupHGhFKvQEAm/lbwBnb3knxRh+H1SoQlZ1yDrWVuNJuYEzgZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrHszeT/XN2L6jJ72xAfJ58JrOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjJkZmIzY2ItMzg3YS0z Mjk3LTkyYzAtMzI1Y2VlZTFjMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYpVDb5bMQFvZwryHP6p4wdgYWdD6sQ1DmQcCcELvjV0OrlxsjSCLM2 26xK0NeH4q8wM5KW+kzTV6zZSt3Glish9Rc/vRYv9iv+WiqRxcjPlgFdqYXKGQEe vkNR7GZswfZhH+7ZlrWe+ygtzecoY263aW6201cnY7tO/3aU7QHQekSoJiQv1X9W 28G6Luexctz4TJrODOcxVwgpSu/h3jpvH8AVfuB8iWT6xEYINepn+AWIIWIg7QrO qxoe+imVVGSS8FZBoY0D7EPcNmhO2NwHZQNygEc5KRQogGA9a9zqhNfD4zC/i23F cbVlefyiFztJ95ORtRvjSThoSepxkCc= -----END CERTIFICATE-----Generated at Mon Mar 2 10:34:43 2026 by rpki-client