$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa File: 903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa (raw, json) Hash identifier: yRYZU58V6he4KjUPwX400B3NpV7xAyAE7tpC1px1mMw= Subject key identifier: B2:F2:A8:A9:05:C7:51:BD:64:EC:FB:C5:48:02:B3:A1:08:F1:A5:E9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA6B02285710C59F7F53EEA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 396356 IP address blocks: 172.94.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:22:85:71:0c:59:f7:f5:3e:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=1b99fbc3-7884-43a4-8093-a923185fcc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:89:3e:9b:6a:bc:6f:d1:b1:4a:a6:b6:a1: ed:f1:6e:8e:3b:a2:11:59:eb:31:36:9d:12:83:92: ec:4c:47:71:5c:56:f7:e2:82:b2:dd:d7:09:35:38: 3d:e0:6d:8c:42:2d:e4:fd:b1:a7:40:3b:f4:89:77: c7:d7:4a:d4:2e:2d:e3:a5:15:7d:76:d6:13:a1:b8: fa:54:dc:0d:90:a6:1c:a0:6e:b2:e3:d7:cb:49:64: 13:c7:ca:da:51:11:bb:38:b3:8c:27:c3:2e:ba:aa: 72:d0:0e:0b:22:6e:66:48:c8:ce:3a:18:0b:9e:55: 00:e8:62:e2:6a:0e:e0:97:aa:b4:19:0f:66:25:e3: d3:d5:56:ae:f6:40:f8:89:47:08:fa:11:06:5f:d6: e8:b5:79:93:c7:bd:4f:53:e6:81:4e:f6:8a:c4:10: b7:99:e5:f6:3e:3e:98:4c:dd:b9:b6:16:cd:e5:3f: 18:50:e7:d3:7e:91:f9:72:4a:67:0f:36:d3:21:c9: 6c:02:53:01:21:b7:c0:84:dc:b7:a8:70:3b:79:90: da:e4:a7:4d:1d:7b:0e:e7:3a:f2:5c:07:8f:30:c5: 13:e6:c4:ee:4e:4e:44:9d:64:73:84:86:c3:b5:c4: bb:72:17:ba:1b:cc:f8:57:82:14:a1:3f:7d:b8:10: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F2:A8:A9:05:C7:51:BD:64:EC:FB:C5:48:02:B3:A1:08:F1:A5:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9e:ab:a8:3d:52:ca:a0:54:a1:c9:2f:e2:50:36:a9:2e:1c: 0e:ae:bf:e9:d1:01:80:c3:6d:31:97:1c:b5:b4:c4:fb:2d:e0: 44:5d:b3:c1:ea:a6:0b:68:9f:e8:0b:35:07:91:2b:45:96:a0: 08:01:94:72:7d:ff:38:59:c4:35:76:08:85:5e:3c:7d:8d:7d: 1a:2c:de:28:d8:5d:d5:7d:13:96:81:20:c1:92:58:26:9c:9d: f9:5e:a1:34:ad:ff:56:58:69:1c:71:19:6c:aa:94:f9:9d:79: 63:e6:06:f3:71:d6:21:2f:77:61:da:ff:eb:54:6e:c3:d0:09: 59:67:78:da:45:cd:f6:5b:50:67:4e:39:1b:f2:89:b1:a7:04: 02:d4:f5:52:c9:4b:68:83:ac:e9:f6:02:f6:d9:32:6d:bf:10: 76:5b:e7:cd:2f:0c:0b:2a:7e:62:59:02:2a:68:8a:91:e6:0b: ed:c9:01:ce:47:70:84:4b:d4:43:f5:d8:b4:b3:0b:eb:d8:17: e8:96:99:02:ec:ef:56:2b:90:d0:d7:51:2e:8b:f8:72:7d:7a: 7b:70:40:b0:33:cf:ca:55:75:90:af:f9:60:02:4e:f8:c1:3c: 4a:31:01:c3:f2:67:82:6f:22:71:50:d2:30:ca:c0:fa:e0:aa: 2a:b6:66:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCKFcQxZ9/U+6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MWI5OWZiYzMtNzg4NC00M2E0LTgwOTMtYTkyMzE4NWZjYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcGJPptqvG/RsUqmtqHt8W6OO6IRWesxNp0S g5LsTEdxXFb34oKy3dcJNTg94G2MQi3k/bGnQDv0iXfH10rULi3jpRV9dtYTobj6 VNwNkKYcoG6y49fLSWQTx8raURG7OLOMJ8Muuqpy0A4LIm5mSMjOOhgLnlUA6GLi ag7gl6q0GQ9mJePT1Vau9kD4iUcI+hEGX9botXmTx71PU+aBTvaKxBC3meX2Pj6Y TN25thbN5T8YUOfTfpH5ckpnDzbTIclsAlMBIbfAhNy3qHA7eZDa5KdNHXsO5zry XAePMMUT5sTuTk5EnWRzhIbDtcS7che6G8z4V4IUoT99uBBRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLyqKkFx1G9ZOz7xUgCs6EI8aXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAzZjMxNTAtOGMyMi0z MzhjLWI2OGUtNmFlN2NmMzNiN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmeq6g9UsqgVKHJL+JQNqkuHA6uv+nRAYDDbTGXHLW0xPst4ERds8Hq pgton+gLNQeRK0WWoAgBlHJ9/zhZxDV2CIVePH2NfRos3ijYXdV9E5aBIMGSWCac nfleoTSt/1ZYaRxxGWyqlPmdeWPmBvNx1iEvd2Ha/+tUbsPQCVlneNpFzfZbUGdO ORvyibGnBALU9VLJS2iDrOn2AvbZMm2/EHZb580vDAsqfmJZAipoipHmC+3JAc5H cIRL1EP12LSzC+vYF+iWmQLs71YrkNDXUS6L+HJ9entwQLAzz8pVdZCv+WACTvjB PEoxAcPyZ4JvInFQ0jDKwPrgqiq2ZvA= -----END CERTIFICATE-----Generated at Wed May 13 06:39:05 2026 by rpki-client