$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa File: 5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa (raw, json) Hash identifier: X/4k1YcwtbWB8rsX4B2mg1/PNc1l3OsZbiZdqiLQJwE= Subject key identifier: 9F:5F:89:6D:09:0A:A8:D6:77:7B:20:B6:65:67:46:AC:0A:6E:AF:F7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA81584694B5E8956D2C3C700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 212238 IP address blocks: 172.94.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:84:69:4b:5e:89:56:d2:c3:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=0d66f4b0-ad4d-4d04-ae88-eb8ee4a5b8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:eb:63:c9:b7:56:87:9c:e2:20:72:57:4c: fd:8b:ff:d9:00:5b:28:f5:31:86:9a:d2:56:ea:86: b3:0f:f8:48:de:84:9b:96:49:fc:34:55:a1:59:d5: cf:6c:97:06:e8:1d:b9:8f:08:e6:3c:30:b2:90:44: af:96:40:f0:0b:f0:9b:8c:e2:e8:30:50:e4:cc:33: 29:cf:f9:63:e1:b7:0d:cf:93:f4:19:f5:08:8b:bb: 6d:ba:90:ed:a4:0e:bf:96:87:dc:18:f0:88:c8:91: 2b:96:59:09:9b:34:68:d1:59:80:7f:19:dc:60:5b: 99:2e:76:c5:49:a9:b5:a4:56:62:6b:9f:23:45:3d: 15:69:f6:9d:a6:3b:50:be:ad:66:69:fc:e6:3d:e2: af:ab:75:f6:d7:b3:1f:90:e7:06:b1:6b:de:c5:cf: 2a:ed:74:09:6c:1c:c1:c0:a9:06:7d:4c:67:94:69: c2:35:08:39:03:e9:64:6c:65:38:a0:56:37:ff:88: df:1f:96:d7:43:8c:59:b0:de:d8:35:c1:93:6c:62: ee:ed:66:fc:f1:de:43:17:1e:a7:13:46:7e:c9:84: b7:7e:0f:9c:00:93:b3:35:1f:f3:9b:b4:17:42:91: f9:93:18:fd:91:3e:a3:78:f0:b2:96:b2:13:70:43: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5F:89:6D:09:0A:A8:D6:77:7B:20:B6:65:67:46:AC:0A:6E:AF:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b8:e2:64:6b:70:71:cc:d9:e0:26:3b:84:24:08:a3:a9:87: 49:0c:10:a6:2a:55:60:41:38:7c:e9:d9:f7:94:83:00:32:43: cc:00:d5:f0:24:a2:f8:26:d8:f7:50:ff:53:3b:26:47:3e:fd: dd:41:27:28:8f:8a:b2:0c:ec:bc:bd:a3:09:59:60:2b:c9:f1: 64:21:69:d4:51:29:9d:cb:c7:17:d7:d7:45:c2:de:18:ff:79: 23:48:39:10:ff:e2:c5:b7:b8:40:6b:a4:25:7f:bf:43:30:f5: 59:d2:21:84:78:95:48:78:d1:6f:58:52:7a:bb:27:84:b8:04: 22:a0:1d:6c:21:d7:10:24:71:f8:dc:1b:de:32:be:db:0f:1b: 6c:a1:9a:42:ce:5b:fa:00:aa:88:51:26:eb:a9:ed:31:6e:4d: 97:d8:1f:57:45:84:80:f0:7c:df:2b:06:32:da:06:ef:51:60: 85:67:e8:69:64:18:44:06:c4:ab:6f:24:c5:25:10:59:5c:d1: 93:6b:db:8e:6a:8d:4a:64:e6:20:23:d3:c0:7d:d6:47:91:b7: 24:1c:33:7e:73:0e:b0:1b:24:b1:45:20:bb:ee:a4:85:8b:d6: a7:51:dc:63:c8:b1:91:93:d8:52:6d:e7:e7:3b:1c:c5:e7:ab: 98:80:a1:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYRpS16JVtLDxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MGQ2NmY0YjAtYWQ0ZC00ZDA0LWFlODgtZWI4ZWU0YTViOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHXrY8m3Voec4iByV0z9i//ZAFso9TGGmtJW 6oazD/hI3oSblkn8NFWhWdXPbJcG6B25jwjmPDCykESvlkDwC/CbjOLoMFDkzDMp z/lj4bcNz5P0GfUIi7ttupDtpA6/lofcGPCIyJErllkJmzRo0VmAfxncYFuZLnbF Sam1pFZia58jRT0VafadpjtQvq1mafzmPeKvq3X217MfkOcGsWvexc8q7XQJbBzB wKkGfUxnlGnCNQg5A+lkbGU4oFY3/4jfH5bXQ4xZsN7YNcGTbGLu7Wb88d5DFx6n E0Z+yYS3fg+cAJOzNR/zm7QXQpH5kxj9kT6jePCylrITcEMFFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9fiW0JCqjWd3sgtmVnRqwKbq/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWNhNTcxYjEtNDkwNy0z MjRjLTgxMDQtYmVkNmNjMGZkZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+44mRrcHHM2eAmO4QkCKOph0kMEKYqVWBBOHzp2feUgwAyQ8wA1fAk ovgm2PdQ/1M7Jkc+/d1BJyiPirIM7Ly9owlZYCvJ8WQhadRRKZ3LxxfX10XC3hj/ eSNIORD/4sW3uEBrpCV/v0Mw9VnSIYR4lUh40W9YUnq7J4S4BCKgHWwh1xAkcfjc G94yvtsPG2yhmkLOW/oAqohRJuup7TFuTZfYH1dFhIDwfN8rBjLaBu9RYIVn6Glk GEQGxKtvJMUlEFlc0ZNr245qjUpk5iAj08B91keRtyQcM35zDrAbJLFFILvupIWL 1qdR3GPIsZGT2FJt5+c7HMXnq5iAoVI= -----END CERTIFICATE-----Generated at Wed May 13 06:43:06 2026 by rpki-client