$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa File: 85beb1b8-b364-349e-8940-19989e438bc7.roa (raw, json) Hash identifier: Jz6UBN5oIvdOW2dvhdjolDTq+JeXJLKcuQtGcR+ej4Q= Subject key identifier: 82:4D:AA:FE:59:D1:3D:19:A1:CC:76:A2:19:08:98:83:47:02:46:DE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA815890D97D411182717F700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.94.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:89:0d:97:d4:11:18:27:17:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=ab0c650c-7bd3-4094-b858-fadcc95cf334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:ec:28:05:ef:0d:dc:0a:d7:0c:6e:39:dd: 7e:81:d1:4c:fd:61:c2:69:a9:69:46:88:30:d1:8a: f9:aa:f3:8e:a3:92:3c:b9:80:e6:e9:14:cf:2f:14: a0:16:ae:b3:46:d3:a8:16:da:3a:71:98:6a:91:4c: d6:9c:a0:49:13:44:b5:f8:70:2b:c9:56:f7:3a:5c: da:7d:87:7a:84:4f:36:3a:fa:51:2e:76:81:3c:90: 08:9d:fe:e9:f0:1a:a7:56:0d:89:b7:e8:d8:4e:39: 36:e3:87:98:d7:14:57:b4:84:eb:c6:d2:27:b2:05: ed:26:c2:d7:9e:0a:d6:6f:ea:54:a8:59:9f:44:ce: 79:d4:17:48:5f:96:d5:ed:dc:db:7a:01:99:97:af: 9a:69:fd:08:7d:d5:26:73:5c:8e:c9:c7:b4:53:2f: d4:22:73:e4:8b:d9:98:9b:bb:82:55:a5:96:8b:cb: 4f:e5:1e:3e:4e:5d:8e:39:c1:33:dc:9c:d7:c5:ad: 64:fb:8e:59:71:89:d1:bf:3c:65:c0:ee:e9:1d:a2: 64:c2:55:e7:e6:26:10:4f:dd:86:f1:06:ba:9a:f0: 2b:82:4e:2b:67:d4:ef:a0:ac:30:dc:c5:f1:73:88: 30:0f:4e:7f:72:7b:07:4c:27:43:97:7e:f7:79:a2: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4D:AA:FE:59:D1:3D:19:A1:CC:76:A2:19:08:98:83:47:02:46:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e1:9b:bc:48:3b:af:2b:c2:c3:1b:6a:c1:6c:65:9f:eb:30: a2:cb:ba:7d:1c:d6:cf:8f:a9:ee:68:76:1f:c0:c7:05:3d:7e: fc:58:ab:9e:b1:5c:49:f3:e4:88:36:7e:2f:4b:ce:66:60:4c: 63:ab:d4:5f:c5:18:7f:54:4d:a4:0e:5c:1e:b3:be:1c:48:d1: 92:bb:72:21:4b:08:95:24:6d:c0:94:18:9b:24:4a:0c:fd:b1: c1:90:a2:fb:06:19:fe:c7:1d:8c:54:c2:c4:a1:f3:90:0b:7e: 46:37:78:3f:2b:51:95:27:31:27:c5:23:ed:ad:a9:1a:ed:d8: e7:6f:08:fb:ac:a3:6d:50:08:34:95:89:50:8d:d1:51:67:b4: 01:b9:51:61:83:b1:0e:09:5d:d5:bc:7c:e2:34:17:35:ea:a2: 18:07:50:65:b3:ef:9b:5d:63:3d:e5:9a:6f:65:9c:58:65:7a: 98:4c:94:e4:9f:25:24:66:d1:9c:1c:2b:00:79:ce:e8:2e:6e: f3:ea:8d:22:fb:a8:25:1a:9f:26:28:49:93:77:7c:78:5b:37: 05:24:ab:ff:35:3f:77:fc:15:cd:ae:0c:d0:c5:22:c3:b9:e1: db:bc:c3:2a:72:2d:67:60:1d:ed:ff:41:ef:9f:9c:e1:b5:52: 54:c1:23:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYkNl9QRGCcX9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk YWIwYzY1MGMtN2JkMy00MDk0LWI4NTgtZmFkY2M5NWNmMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+nsKAXvDdwK1wxuOd1+gdFM/WHCaalpRogw 0Yr5qvOOo5I8uYDm6RTPLxSgFq6zRtOoFto6cZhqkUzWnKBJE0S1+HAryVb3Olza fYd6hE82OvpRLnaBPJAInf7p8BqnVg2Jt+jYTjk244eY1xRXtITrxtInsgXtJsLX ngrWb+pUqFmfRM551BdIX5bV7dzbegGZl6+aaf0IfdUmc1yOyce0Uy/UInPki9mY m7uCVaWWi8tP5R4+Tl2OOcEz3JzXxa1k+45ZcYnRvzxlwO7pHaJkwlXn5iYQT92G 8Qa6mvArgk4rZ9TvoKww3MXxc4gwD05/cnsHTCdDl373eaLstQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJNqv5Z0T0Zocx2ohkImINHAkbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODViZWIxYjgtYjM2NC0z NDllLTg5NDAtMTk5ODllNDM4YmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbhm7xIO68rwsMbasFsZZ/rMKLLun0c1s+Pqe5odh/AxwU9fvxYq56x XEnz5Ig2fi9LzmZgTGOr1F/FGH9UTaQOXB6zvhxI0ZK7ciFLCJUkbcCUGJskSgz9 scGQovsGGf7HHYxUwsSh85ALfkY3eD8rUZUnMSfFI+2tqRrt2OdvCPuso21QCDSV iVCN0VFntAG5UWGDsQ4JXdW8fOI0FzXqohgHUGWz75tdYz3lmm9lnFhlephMlOSf JSRm0ZwcKwB5zugubvPqjSL7qCUanyYoSZN3fHhbNwUkq/81P3f8Fc2uDNDFIsO5 4du8wypyLWdgHe3/Qe+fnOG1UlTBI8g= -----END CERTIFICATE-----Generated at Wed May 13 08:52:41 2026 by rpki-client