$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa File: fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa (raw, json) Hash identifier: VfrewcNX7QzKN7NK4wWMwoScpy0qiAeIxmZnplPrNPc= Subject key identifier: 2D:B0:BF:00:DB:F6:44:17:75:95:51:F0:E9:C3:41:41:50:E3:FE:A0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D6AAA876CC9C3CA62EA0FC200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 3223 IP address blocks: 172.94.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:87:6c:c9:c3:ca:62:ea:0f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=f8b5527e-4253-4fe4-bf88-8ef325e1ccc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:6e:f7:a6:e4:41:3b:f8:27:22:b0:22:5a: 6d:09:de:86:5f:52:49:7d:5a:6c:03:4f:e3:0b:e1: c0:c1:a4:c3:24:18:17:68:2a:fa:a6:d1:88:a8:59: dd:d2:16:59:48:58:40:39:f7:5d:3e:cc:4b:ae:3b: d5:f6:97:a0:31:d5:3c:74:25:36:7d:6e:dd:3f:1c: c3:e4:f3:17:15:1c:8c:e3:4d:6d:c0:7a:bd:c3:43: 24:4d:01:a7:74:5a:7a:b5:6f:20:20:38:7c:e4:1e: b6:8f:9a:ba:da:4c:9e:b3:c9:82:3b:c5:29:95:50: e2:68:39:1d:5b:2a:ad:ff:25:70:eb:1d:0d:97:47: 8c:45:14:9e:20:4d:50:86:6a:89:a4:e4:9d:97:5d: 71:04:23:d6:97:ea:6f:5a:b5:ad:40:d1:25:a8:05: 9d:61:4f:d7:e7:3b:8f:08:11:82:2e:73:82:3e:62: 6b:29:ef:e7:db:ad:26:c0:85:1b:49:b2:54:84:44: 9c:29:73:e3:a4:be:84:58:21:c7:70:6b:9c:f2:31: eb:c0:9b:e5:74:23:f4:5c:cd:ae:e0:e1:31:b1:6a: bc:d8:bd:92:a0:a0:fb:9f:df:73:f6:f0:a6:ab:ed: 5e:31:c3:ba:d5:c1:ea:fa:3f:d5:07:97:0e:2a:7a: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B0:BF:00:DB:F6:44:17:75:95:51:F0:E9:C3:41:41:50:E3:FE:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bd:c3:85:bc:ba:e8:88:57:7d:18:55:ed:2e:62:9f:47:92: aa:d2:fe:10:79:53:ed:a3:90:12:56:4f:04:ad:26:17:80:f4: 4b:22:78:d5:6c:46:e3:e0:dc:ad:c9:f6:32:30:92:c6:fe:dc: cf:2f:71:77:bf:4b:5f:b0:0b:90:80:ab:b2:d5:9f:84:83:81: 16:0d:74:95:d2:60:ef:24:e4:c9:69:b2:cd:7d:12:4c:2d:a3: 16:ff:28:9a:5e:70:69:ed:4b:ad:10:ac:c2:d0:5f:1f:e0:47: 72:4b:d6:b3:b1:00:90:b9:2f:a3:d2:cc:4d:c5:8b:bd:e5:a1: c5:cc:96:87:05:4f:90:f7:f1:20:b1:03:47:d2:71:e9:64:d9: f2:02:dc:b9:6a:1d:81:81:7f:fc:49:d4:e1:ba:44:09:ef:01: 04:12:c3:85:fd:6e:5c:e8:65:8d:5a:27:be:b1:79:85:d7:fc: e1:58:fd:03:4e:2f:9c:09:ff:dc:d6:95:b8:b2:1b:7a:c6:a6: 2b:9e:af:51:6e:0c:ce:10:08:2d:29:97:5d:9e:f0:30:4c:20: 1a:58:cc:c7:6b:37:fe:2b:8a:22:87:56:62:77:f0:4f:4f:32: 55:c5:c6:ec:ad:a3:be:27:30:ad:1e:80:0b:76:0b:a7:8c:f8: ce:ad:ad:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqodsycPKYuoPwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZjhiNTUyN2UtNDI1My00ZmU0LWJmODgtOGVmMzI1ZTFjY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpRu96bkQTv4JyKwIlptCd6GX1JJfVpsA0/j C+HAwaTDJBgXaCr6ptGIqFnd0hZZSFhAOfddPsxLrjvV9pegMdU8dCU2fW7dPxzD 5PMXFRyM401twHq9w0MkTQGndFp6tW8gIDh85B62j5q62kyes8mCO8UplVDiaDkd Wyqt/yVw6x0Nl0eMRRSeIE1QhmqJpOSdl11xBCPWl+pvWrWtQNElqAWdYU/X5zuP CBGCLnOCPmJrKe/n260mwIUbSbJUhEScKXPjpL6EWCHHcGuc8jHrwJvldCP0XM2u 4OExsWq82L2SoKD7n99z9vCmq+1eMcO61cHq+j/VB5cOKnqJKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2wvwDb9kQXdZVR8OnDQUFQ4/6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmRiZjUzYTktNzJmMi0z OTdmLWEyZjItOTJlYzFkMjM1MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu9w4W8uuiIV30YVe0uYp9HkqrS/hB5U+2jkBJWTwStJheA9EsieNVs RuPg3K3J9jIwksb+3M8vcXe/S1+wC5CAq7LVn4SDgRYNdJXSYO8k5Mlpss19Ekwt oxb/KJpecGntS60QrMLQXx/gR3JL1rOxAJC5L6PSzE3Fi73locXMlocFT5D38SCx A0fScelk2fIC3LlqHYGBf/xJ1OG6RAnvAQQSw4X9blzoZY1aJ76xeYXX/OFY/QNO L5wJ/9zWlbiyG3rGpiuer1FuDM4QCC0pl12e8DBMIBpYzMdrN/4riiKHVmJ38E9P MlXFxuyto74nMK0egAt2C6eM+M6trYo= -----END CERTIFICATE-----Generated at Fri Apr 17 07:08:39 2026 by rpki-client