$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa File: 32a23c32-30aa-3814-87e4-f5250a5cd155.roa (raw, json) Hash identifier: jfPRIwkANKAn59etg90Cm4o7QH94xS+G2Z0rIFoD9WA= Subject key identifier: FD:6D:8C:2C:CA:11:36:6A:C1:A7:A5:A7:D9:4E:6C:3E:B5:6C:71:44 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DBD058C72F089C6D18F7E5F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 9009 IP address blocks: 172.94.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:8c:72:f0:89:c6:d1:8f:7e:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=f5d0d849-7e9c-406d-b7f4-3e4fccada1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:e9:f2:e4:15:f9:ef:74:90:b1:5f:c8:11: b0:5e:8a:aa:76:c1:02:67:d8:28:96:3a:5d:2b:cf: 36:de:ae:cd:9a:a6:80:44:dc:26:4e:cf:cf:9c:9d: 46:50:41:10:75:a6:1e:2b:13:03:cf:bb:1a:82:51: 0b:e7:82:28:93:48:6b:87:44:32:7b:fe:4b:30:99: d4:d1:de:c7:77:03:4b:a2:dc:c3:3b:d1:d5:68:df: 0a:23:e0:70:1c:a6:e7:eb:94:91:d0:0f:a9:1e:81: e4:68:c5:8d:e3:34:8b:cf:57:c8:07:de:46:eb:61: 56:f8:b9:47:f8:df:45:aa:58:fd:73:cb:e9:93:23: 47:55:01:3f:c9:f9:fe:b6:b3:54:c8:51:76:13:25: 3a:37:61:e9:99:89:9a:89:80:36:e0:cb:fe:4d:e0: f1:81:3d:f6:b0:1d:18:34:9c:c5:9d:b0:58:83:ee: 3d:91:03:fd:40:3d:37:59:98:17:ea:95:69:62:0d: e9:3c:09:22:a2:2e:20:df:9d:2e:87:60:3d:8d:16: ca:d7:bf:4a:c2:87:9d:4a:df:75:6b:e7:be:12:f4: 76:9d:17:98:34:4b:53:e2:0b:1c:13:4f:02:02:6e: 8a:dd:c0:aa:43:8c:78:7f:5d:a8:e4:a6:31:b6:ef: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6D:8C:2C:CA:11:36:6A:C1:A7:A5:A7:D9:4E:6C:3E:B5:6C:71:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fc:13:8d:60:77:10:83:06:5e:16:39:b2:36:a5:af:1e:ed: a6:2e:04:80:c4:0e:bd:ef:c8:fc:e5:52:a1:d8:99:b7:28:92: 6a:73:65:a3:88:be:36:c8:cf:de:26:6e:1a:45:6b:25:f1:de: 27:72:36:5e:f6:70:00:55:53:ba:d1:3f:3d:a0:42:17:98:12: bd:78:51:e1:40:a3:b0:71:a5:b3:63:58:20:b2:37:61:7b:ba: 98:81:98:89:8a:db:a1:7b:f3:58:b4:19:25:44:39:d3:48:00: 70:1b:83:e5:a4:57:37:82:70:1a:87:0f:e8:22:46:d1:b6:bc: 9a:82:b3:73:3b:e0:97:0e:bf:cf:47:0e:51:f3:2f:b9:3f:70: 8d:ae:07:7b:a2:70:37:70:57:3e:b6:29:c0:2d:20:0b:5b:e6: d2:46:45:b6:a5:f2:64:79:33:ad:28:85:47:8e:e9:5b:fc:94: ad:ba:49:c9:c3:3b:df:65:40:32:87:46:cd:fa:1f:ee:7a:f8: 6c:71:48:89:6d:4d:07:af:d1:90:c3:cf:17:fd:64:3e:8b:14: 9e:fc:b0:ac:86:f4:7c:e7:43:ce:d8:98:51:ce:93:43:b3:9f: 45:93:c1:fa:2f:c4:b0:06:7b:04:a8:6f:cf:23:d9:4c:ea:d3: e5:74:1f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BYxy8InG0Y9+X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjVkMGQ4NDktN2U5Yy00MDZkLWI3ZjQtM2U0ZmNjYWRhMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb7p8uQV+e90kLFfyBGwXoqqdsECZ9goljpd K8823q7NmqaARNwmTs/PnJ1GUEEQdaYeKxMDz7saglEL54Iok0hrh0Qye/5LMJnU 0d7HdwNLotzDO9HVaN8KI+BwHKbn65SR0A+pHoHkaMWN4zSLz1fIB95G62FW+LlH +N9Fqlj9c8vpkyNHVQE/yfn+trNUyFF2EyU6N2HpmYmaiYA24Mv+TeDxgT32sB0Y NJzFnbBYg+49kQP9QD03WZgX6pVpYg3pPAkioi4g350uh2A9jRbK179KwoedSt91 a+e+EvR2nReYNEtT4gscE08CAm6K3cCqQ4x4f12o5KYxtu9ghwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1tjCzKETZqwaelp9lObD61bHFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzJhMjNjMzItMzBhYS0z ODE0LTg3ZTQtZjUyNTBhNWNkMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL8E41gdxCDBl4WObI2pa8e7aYuBIDEDr3vyPzlUqHYmbcokmpzZaOI vjbIz94mbhpFayXx3idyNl72cABVU7rRPz2gQheYEr14UeFAo7BxpbNjWCCyN2F7 upiBmImK26F781i0GSVEOdNIAHAbg+WkVzeCcBqHD+giRtG2vJqCs3M74JcOv89H DlHzL7k/cI2uB3uicDdwVz62KcAtIAtb5tJGRbal8mR5M60ohUeO6Vv8lK26ScnD O99lQDKHRs36H+56+GxxSIltTQev0ZDDzxf9ZD6LFJ78sKyG9HznQ87YmFHOk0Oz n0WTwfovxLAGewSob88j2Uzq0+V0H0w= -----END CERTIFICATE-----Generated at Wed May 13 10:28:39 2026 by rpki-client