$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa File: f393d880-9d6e-3953-a98b-12516ebc54b1.roa (raw, json) Hash identifier: 8PazoLwtyWCscZkQezcIkL2jYpqKwEleoS8jya5U94A= Subject key identifier: F5:3C:33:A0:AB:91:78:35:AC:87:E9:A9:DF:87:FA:08:F8:D4:03:7D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB121D2F39DAD2A4AC6ECA880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 212238 IP address blocks: 172.94.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:d2:f3:9d:ad:2a:4a:c6:ec:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=c402a910-5cb6-41fc-8d1b-6ba344241abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:84:13:81:9a:24:0c:2b:c0:a3:cc:28:ee: b4:5e:01:e2:e4:35:76:96:10:a6:18:05:81:47:96: ee:35:70:5e:0b:07:be:48:f8:57:02:73:c4:2a:ca: 47:53:4e:b1:bd:2e:a9:26:21:0a:bf:78:eb:c1:10: 61:b5:bf:99:d9:5c:b9:e9:11:14:05:6a:d4:ae:2e: 08:51:ab:b4:ab:cb:5e:da:70:5a:de:b4:c8:83:8c: 5f:4e:df:f0:b3:d7:4c:cf:fb:db:08:05:20:cd:6d: 0d:0d:47:6b:0b:2a:27:10:8e:f0:91:9f:e7:d4:20: 1b:67:38:7d:1f:3c:65:a0:0f:f9:3c:52:be:61:a0: 42:26:4d:4e:ec:6b:ad:c6:a8:0f:f6:82:14:1b:0d: ec:16:88:88:88:cb:05:f4:6c:2c:6d:8c:42:cb:f1: 1e:f2:1a:11:2c:f6:13:1c:bd:80:25:b7:be:a2:a6: 9f:26:d5:22:0b:73:4b:ec:bf:51:f7:1d:db:a4:aa: 85:f9:d5:44:23:90:03:7b:26:b8:5e:11:23:26:08: 2c:27:db:4c:51:d6:80:9c:83:36:e8:cb:a7:82:88: 42:87:c9:ab:d1:f7:01:8a:bc:af:68:4e:10:91:51: d5:b9:3e:43:e4:00:f7:d9:46:0a:bb:be:e6:35:a9: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3C:33:A0:AB:91:78:35:AC:87:E9:A9:DF:87:FA:08:F8:D4:03:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d8:13:dc:bd:73:20:c3:4a:6d:e6:27:f0:32:d8:fd:14:82: 35:b0:ca:5e:ec:60:75:d8:47:82:2a:2b:b0:54:a0:93:7c:45: 0f:cf:86:ec:f9:06:37:32:3d:62:4a:92:59:a4:68:aa:8d:76: f2:9d:bb:d9:59:a8:5c:cb:19:cc:f3:a7:21:22:2e:77:86:4c: 4b:15:22:3d:72:fa:26:96:fa:a7:1b:5f:17:6c:03:a3:a8:a1: 51:37:08:28:61:42:6d:74:5e:3b:3f:71:b7:dc:42:0a:b5:b3: 71:ed:49:18:e0:8c:c8:d0:a9:74:8d:35:4c:eb:73:77:7a:25: 68:a5:90:2f:88:bd:33:64:3a:df:cb:c0:76:cb:36:5f:28:4b: bc:82:5c:19:5e:df:1c:c3:6d:a2:d7:34:bb:c8:79:db:b3:5d: 1a:6d:f6:da:bd:fd:87:02:e9:29:c1:fa:56:8d:dc:7a:55:c0: 16:f8:a0:73:79:f3:10:71:b3:b1:d8:bf:a1:72:77:68:c6:4a: df:29:f2:71:bc:03:7f:f1:49:2f:79:20:80:74:42:a8:2b:52: 45:7c:de:82:50:4f:99:d4:ee:68:55:0d:26:41:ab:c5:88:b7: e8:0c:45:e2:d7:75:b7:18:37:e4:db:9a:40:b2:d7:9d:29:ec: 66:a8:ea:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIdLzna0qSsbsqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzQwMmE5MTAtNWNiNi00MWZjLThkMWItNmJhMzQ0MjQxYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb6EE4GaJAwrwKPMKO60XgHi5DV2lhCmGAWB R5buNXBeCwe+SPhXAnPEKspHU06xvS6pJiEKv3jrwRBhtb+Z2Vy56REUBWrUri4I Uau0q8te2nBa3rTIg4xfTt/ws9dMz/vbCAUgzW0NDUdrCyonEI7wkZ/n1CAbZzh9 HzxloA/5PFK+YaBCJk1O7GutxqgP9oIUGw3sFoiIiMsF9GwsbYxCy/Ee8hoRLPYT HL2AJbe+oqafJtUiC3NL7L9R9x3bpKqF+dVEI5ADeya4XhEjJggsJ9tMUdaAnIM2 6MungohCh8mr0fcBiryvaE4QkVHVuT5D5AD32UYKu77mNanItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPU8M6CrkXg1rIfpqd+H+gj41AN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjM5M2Q4ODAtOWQ2ZS0z OTUzLWE5OGItMTI1MTZlYmM1NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3YE9y9cyDDSm3mJ/Ay2P0UgjWwyl7sYHXYR4IqK7BUoJN8RQ/Phuz5 BjcyPWJKklmkaKqNdvKdu9lZqFzLGczzpyEiLneGTEsVIj1y+iaW+qcbXxdsA6Oo oVE3CChhQm10Xjs/cbfcQgq1s3HtSRjgjMjQqXSNNUzrc3d6JWilkC+IvTNkOt/L wHbLNl8oS7yCXBle3xzDbaLXNLvIeduzXRpt9tq9/YcC6SnB+laN3HpVwBb4oHN5 8xBxs7HYv6Fyd2jGSt8p8nG8A3/xSS95IIB0QqgrUkV83oJQT5nU7mhVDSZBq8WI t+gMReLXdbcYN+TbmkCy150p7Gao6ic= -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:50 2026 by rpki-client