$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41e45331-6385-3e67-9561-288cf7549230.roa File: 41e45331-6385-3e67-9561-288cf7549230.roa (raw, json) Hash identifier: TkywlIJgwirQlB9vX6l5YIOXKjlLCn210aa2Ryvc/Jg= Subject key identifier: F0:43:46:3B:EC:C1:EB:C5:D0:A9:F0:26:5E:41:AF:A1:ED:65:3D:1C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DD090701BB0FCE66FABD89580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41e45331-6385-3e67-9561-288cf7549230.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 137409 IP address blocks: 172.94.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:70:1b:b0:fc:e6:6f:ab:d8:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=35ca9f9e-21b6-47d0-8ea1-c098fc96235a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:50:01:4d:fb:bf:d5:36:31:c4:a4:45:82: 6f:24:44:f4:e4:7e:62:ca:d1:7e:9e:bb:f5:95:0d: 11:33:fa:ea:b5:3a:34:7c:ff:60:45:a3:bc:62:4d: 77:9b:44:83:23:38:1b:72:96:9a:36:c5:6f:83:82: a1:f5:fe:a0:03:33:6f:ad:57:78:17:62:44:27:5c: 08:e3:66:94:b5:3e:7f:ef:be:37:61:60:06:19:77: 9a:b6:c9:7a:e1:c4:bf:64:91:16:5c:c1:7f:b8:44: 04:6c:ad:61:4b:4e:82:90:c0:83:9b:5f:ec:1c:cb: d4:05:40:c6:75:4e:13:b1:bb:e5:3c:9f:6e:2d:9c: cb:0d:fd:22:4b:39:02:ec:32:7d:70:0c:97:6b:89: de:0d:fa:d1:1c:4e:79:f6:c3:76:97:c5:63:49:31: 1d:40:80:39:f7:63:d6:0f:29:c5:dd:7c:4c:0d:a1: 69:f5:55:32:ed:d0:dd:ba:21:2b:d6:9b:9a:3c:33: 20:a3:0e:4c:ff:d6:d8:53:2c:c9:98:08:7e:d6:04: 59:1b:c1:96:0f:3b:1a:19:0d:1d:73:98:56:ed:fc: b3:9c:b0:07:e9:9f:3c:05:99:02:5f:52:f2:c1:a8: 5a:18:3d:a4:3c:0b:0a:e3:8a:88:0c:47:97:fc:67: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:43:46:3B:EC:C1:EB:C5:D0:A9:F0:26:5E:41:AF:A1:ED:65:3D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41e45331-6385-3e67-9561-288cf7549230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3c:97:21:43:e9:fa:82:e8:3b:be:62:ae:13:55:5e:89:e2: 56:dd:b2:8d:af:22:8d:17:7d:fd:79:f1:75:2b:1b:62:02:71: 5d:6d:71:d1:66:62:39:84:10:67:fe:a2:f3:07:bd:0b:be:13: eb:b5:70:c6:30:bb:cb:82:c7:82:89:f0:98:47:bd:95:1f:7d: e5:aa:35:f9:98:db:a1:8f:f5:f9:6f:73:95:6f:c4:af:26:5a: 41:e5:2a:e4:fb:19:ab:4e:fc:3e:ab:34:04:f2:cb:2e:3b:98: e5:37:53:3f:cf:61:8b:f5:83:48:f8:93:ed:23:22:0d:f3:ae: 1d:70:63:11:87:17:62:16:ec:8d:33:ae:8c:c1:3f:30:ae:d2: f9:07:91:8e:49:c6:b0:41:45:af:2f:27:88:58:a6:ff:5c:9b: da:e7:ee:b1:a0:6d:35:96:bc:d0:4d:3d:67:5a:69:fb:42:04: 83:20:5e:7f:2d:d9:39:ac:db:85:bf:9a:1d:2e:39:69:d3:84: d5:26:a8:09:dd:1d:02:30:85:05:69:1e:88:bf:e1:7a:94:bb: 45:79:0b:7e:2a:db:d5:22:7d:c1:e7:f1:dc:d7:33:f1:ff:d1: 6c:5d:7c:4a:f0:f8:89:28:b7:0d:bc:ba:84:7f:13:66:a3:c3: 05:1a:ba:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkHAbsPzmb6vYlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk MzVjYTlmOWUtMjFiNi00N2QwLThlYTEtYzA5OGZjOTYyMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYBQAU37v9U2McSkRYJvJET05H5iytF+nrv1 lQ0RM/rqtTo0fP9gRaO8Yk13m0SDIzgbcpaaNsVvg4Kh9f6gAzNvrVd4F2JEJ1wI 42aUtT5/7743YWAGGXeatsl64cS/ZJEWXMF/uEQEbK1hS06CkMCDm1/sHMvUBUDG dU4TsbvlPJ9uLZzLDf0iSzkC7DJ9cAyXa4neDfrRHE559sN2l8VjSTEdQIA592PW DynF3XxMDaFp9VUy7dDduiEr1puaPDMgow5M/9bYUyzJmAh+1gRZG8GWDzsaGQ0d c5hW7fyznLAH6Z88BZkCX1LywahaGD2kPAsK44qIDEeX/Gdu/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBDRjvswevF0KnwJl5Br6HtZT0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDFlNDUzMzEtNjM4NS0z ZTY3LTk1NjEtMjg4Y2Y3NTQ5MjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs8lyFD6fqC6Du+Yq4TVV6J4lbdso2vIo0Xff158XUrG2ICcV1tcdFm YjmEEGf+ovMHvQu+E+u1cMYwu8uCx4KJ8JhHvZUffeWqNfmY26GP9flvc5VvxK8m WkHlKuT7GatO/D6rNATyyy47mOU3Uz/PYYv1g0j4k+0jIg3zrh1wYxGHF2IW7I0z rozBPzCu0vkHkY5JxrBBRa8vJ4hYpv9cm9rn7rGgbTWWvNBNPWdaaftCBIMgXn8t 2Tms24W/mh0uOWnThNUmqAndHQIwhQVpHoi/4XqUu0V5C34q29UifcHn8dzXM/H/ 0WxdfErw+Ikotw28uoR/E2ajwwUauok= -----END CERTIFICATE-----Generated at Wed May 13 09:13:18 2026 by rpki-client