$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa File: bd3d3554-3b8e-3804-9f34-e572ee29034a.roa (raw, json) Hash identifier: zEYREbyetZfZ47GmWbNjgg5lpfmT2ac8uWr+Kvb1xuY= Subject key identifier: B3:41:5E:A3:95:A7:C7:22:66:75:10:0B:A4:AA:66:C5:55:90:9F:6B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA815891B1F039A5DEA784A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.94.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:89:1b:1f:03:9a:5d:ea:78:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=3e78e34c-5809-44fc-a0c8-63bf913b8887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:eb:d8:8f:30:2b:3d:01:2e:14:f1:5a:ea: c6:c3:cc:48:ca:1d:3a:b0:5a:86:a9:ce:e9:91:28: a8:21:78:d8:14:5e:0e:93:3d:dc:59:1a:e5:a9:11: aa:65:d0:d4:ee:96:55:0a:5c:ca:30:e2:57:d4:5a: 1c:ba:df:db:f3:d5:82:bd:1d:52:ba:47:e2:b8:0b: e7:d0:ed:6c:ed:82:28:2b:ab:da:67:f0:a9:7b:88: 56:c0:5b:e8:e8:f7:5e:94:f4:76:85:73:4b:bd:fa: 71:61:4a:72:bb:4b:de:2f:b0:00:c2:04:31:f5:82: 33:d2:95:b0:47:2b:bb:10:47:db:6b:6b:5e:b1:92: cd:5b:06:a6:c5:bc:6e:c2:36:28:ff:21:d5:76:ba: 9e:8d:09:0f:fd:7b:0a:c7:6e:19:65:09:f2:7a:36: 39:28:5f:89:00:7b:b0:99:f4:f0:c6:b6:f4:ed:10: 6f:83:d6:f2:b6:38:b6:99:a8:49:3c:a1:68:7b:03: 69:25:1f:98:3a:b4:22:0a:40:b1:d4:fb:eb:eb:d4: 6f:17:75:ec:7b:2d:4d:ec:61:5f:e0:7b:59:23:2d: 5c:8d:5e:e8:ac:a2:4a:ad:e2:49:09:32:f4:a2:83: 2f:db:11:a7:df:e2:59:ab:09:0c:35:bc:15:a2:2f: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:41:5E:A3:95:A7:C7:22:66:75:10:0B:A4:AA:66:C5:55:90:9F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4d:a0:19:45:88:e7:f9:ef:40:aa:92:35:95:c6:2a:aa:31: 50:5d:44:71:91:0f:c2:fd:f9:05:e6:33:3b:d6:88:da:1a:1d: 59:01:7d:e1:fd:14:e3:d4:ee:57:74:8e:f0:cf:83:51:d4:60: 7c:01:38:93:ce:4a:55:9d:26:9c:d3:18:2f:5c:61:45:1c:10: 78:2f:85:6e:e6:ea:6d:50:a7:e6:49:67:7d:34:2d:80:a7:71: 1f:05:54:1d:6a:cb:98:e7:ab:c8:17:29:a9:fc:f0:10:a5:01: 0b:c1:2b:d1:74:a3:f9:4c:24:d3:fb:db:24:74:d6:6a:c1:39: d7:df:38:81:d7:53:57:e6:d0:5d:32:11:43:d8:37:c9:36:ee: e8:1a:c3:b7:27:2d:c7:28:89:3a:42:13:76:2f:3c:c6:b1:6e: cb:00:ef:a1:80:38:69:1d:53:77:b7:4d:7d:e9:54:61:56:ba: cb:37:5c:9a:bd:b9:dc:dc:2b:91:67:27:fd:a6:18:d2:56:cc: 15:70:ba:59:2b:af:ff:91:4d:a0:8c:67:35:40:5b:4b:ec:fb: 70:43:57:34:e4:c6:46:75:2f:a1:fa:78:f2:55:c1:e1:f3:c4: c9:bd:fd:1c:60:62:94:48:2f:a7:7c:82:1f:93:a0:32:7e:91: 1f:45:13:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYkbHwOaXep4SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk M2U3OGUzNGMtNTgwOS00NGZjLWEwYzgtNjNiZjkxM2I4ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvULr2I8wKz0BLhTxWurGw8xIyh06sFqGqc7p kSioIXjYFF4Okz3cWRrlqRGqZdDU7pZVClzKMOJX1Focut/b89WCvR1SukfiuAvn 0O1s7YIoK6vaZ/Cpe4hWwFvo6PdelPR2hXNLvfpxYUpyu0veL7AAwgQx9YIz0pWw Ryu7EEfba2tesZLNWwamxbxuwjYo/yHVdrqejQkP/XsKx24ZZQnyejY5KF+JAHuw mfTwxrb07RBvg9bytji2mahJPKFoewNpJR+YOrQiCkCx1Pvr69RvF3Xsey1N7GFf 4HtZIy1cjV7orKJKreJJCTL0ooMv2xGn3+JZqwkMNbwVoi9l5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNBXqOVp8ciZnUQC6SqZsVVkJ9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmQzZDM1NTQtM2I4ZS0z ODA0LTlmMzQtZTU3MmVlMjkwMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABNoBlFiOf570CqkjWVxiqqMVBdRHGRD8L9+QXmMzvWiNoaHVkBfeH9 FOPU7ld0jvDPg1HUYHwBOJPOSlWdJpzTGC9cYUUcEHgvhW7m6m1Qp+ZJZ300LYCn cR8FVB1qy5jnq8gXKan88BClAQvBK9F0o/lMJNP72yR01mrBOdffOIHXU1fm0F0y EUPYN8k27ugaw7cnLccoiTpCE3YvPMaxbssA76GAOGkdU3e3TX3pVGFWuss3XJq9 udzcK5FnJ/2mGNJWzBVwulkrr/+RTaCMZzVAW0vs+3BDVzTkxkZ1L6H6ePJVweHz xMm9/RxgYpRIL6d8gh+ToDJ+kR9FEzc= -----END CERTIFICATE-----Generated at Wed May 13 04:33:03 2026 by rpki-client