$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa File: d2eba7e0-6a87-3e70-9830-21cdb930b252.roa (raw, json) Hash identifier: 4XwkcSIEwNrkUxNP5/u1igzWD3RBh+3QSGYDdBaIRUc= Subject key identifier: DB:07:04:98:CC:02:E6:95:A7:10:56:76:CD:B2:A3:08:9A:05:4C:04 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D47C4E53E312EB0A0641DFA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 172.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e5:3e:31:2e:b0:a0:64:1d:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=2920f00d-0692-4992-928d-dd27724642fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dd:d4:78:3d:36:f9:a1:c2:95:2e:61:78:d1: 70:0a:54:21:f1:7c:73:67:b3:e1:48:db:9d:53:2c: f1:08:27:4f:72:c2:ce:58:3f:eb:20:8a:1b:cb:eb: 60:f9:9f:7e:ce:d6:60:3a:86:c6:4f:2a:83:cb:b4: d2:c7:84:d2:0d:d2:12:92:bf:0d:d4:b6:68:33:3b: 71:a9:69:e9:71:4d:a9:6e:a2:27:bc:9f:82:c3:1e: 1f:15:d0:f0:10:b6:4b:eb:fd:d4:2b:ac:17:7c:03: 59:49:11:49:09:84:a5:41:3d:61:3c:74:34:f0:71: 68:e5:9c:7c:ac:7a:c3:80:0e:d6:63:bc:70:2d:d3: f8:93:b4:b2:de:b6:87:40:26:54:d2:46:9b:cf:50: 95:7a:7a:b6:e7:18:2d:cf:c2:f9:31:bf:c8:49:f3: d2:a0:c4:e1:8c:ba:36:13:f5:7b:de:64:22:4d:28: 65:ee:81:6d:f2:87:0e:3a:f0:ef:71:70:ea:6e:f4: ae:d0:ab:43:44:23:b7:ae:03:c5:e2:49:4a:09:ae: 7e:0d:98:79:91:9d:0e:bf:51:3a:dd:80:16:bf:1c: 98:1d:4f:71:7d:fa:9b:e7:df:c9:3d:29:c3:87:a2: 5a:3d:b8:cc:42:3b:5d:c2:15:d8:18:5a:11:43:83: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:07:04:98:CC:02:E6:95:A7:10:56:76:CD:B2:A3:08:9A:05:4C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:12:80:5d:58:dc:c3:8f:02:07:c1:b5:4b:10:f9:5b:cf:bc: e2:2e:58:17:95:d0:47:75:ba:2e:69:d9:74:e8:d0:c9:47:66: 5c:26:05:32:47:36:36:f8:d1:93:96:00:f4:44:a3:8a:9b:44: fd:cb:42:08:4c:6e:ec:f4:c7:90:7f:17:ef:31:97:17:76:d3: 31:ce:00:05:b4:ec:fd:4c:92:c8:d7:44:2a:ff:5d:47:92:4e: 53:84:f4:41:76:a2:b7:88:d7:2a:69:92:43:56:b0:98:06:10: 21:85:89:4c:22:70:57:15:7b:6b:17:e3:9f:44:40:a9:05:13: c6:bb:61:fa:c5:c2:2e:d2:f3:0a:6d:d2:08:06:17:34:97:4d: ca:59:f9:0d:de:95:73:15:f2:eb:e1:99:c4:e7:23:93:74:a0: 09:45:a9:cf:5a:e4:2b:ed:bd:64:41:75:f5:64:18:3c:72:ff: ad:95:de:3c:45:67:ce:8d:b2:58:68:b9:3e:58:f5:11:88:51: 62:6a:50:26:48:6d:54:cb:bb:3d:f3:1c:dd:c9:0a:19:ca:d7: 5c:8f:d3:10:33:68:70:50:e1:d8:d7:6e:b8:d4:8b:4f:1b:2c: eb:12:b3:26:8d:9c:d3:5f:97:6b:1c:e3:ff:a8:5f:d4:75:14: 97:82:bf:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOU+MS6woGQd+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MjkyMGYwMGQtMDY5Mi00OTkyLTkyOGQtZGQyNzcyNDY0MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN3UeD02+aHClS5heNFwClQh8XxzZ7PhSNud UyzxCCdPcsLOWD/rIIoby+tg+Z9+ztZgOobGTyqDy7TSx4TSDdISkr8N1LZoMztx qWnpcU2pbqInvJ+Cwx4fFdDwELZL6/3UK6wXfANZSRFJCYSlQT1hPHQ08HFo5Zx8 rHrDgA7WY7xwLdP4k7Sy3raHQCZU0kabz1CVenq25xgtz8L5Mb/ISfPSoMThjLo2 E/V73mQiTShl7oFt8ocOOvDvcXDqbvSu0KtDRCO3rgPF4klKCa5+DZh5kZ0Ov1E6 3YAWvxyYHU9xffqb59/JPSnDh6JaPbjMQjtdwhXYGFoRQ4OCSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsHBJjMAuaVpxBWds2yowiaBUwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDJlYmE3ZTAtNmE4Ny0z ZTcwLTk4MzAtMjFjZGI5MzBiMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFISgF1Y3MOPAgfBtUsQ+VvPvOIuWBeV0Ed1ui5p2XTo0MlHZlwmBTJH Njb40ZOWAPREo4qbRP3LQghMbuz0x5B/F+8xlxd20zHOAAW07P1MksjXRCr/XUeS TlOE9EF2oreI1yppkkNWsJgGECGFiUwicFcVe2sX459EQKkFE8a7YfrFwi7S8wpt 0ggGFzSXTcpZ+Q3elXMV8uvhmcTnI5N0oAlFqc9a5CvtvWRBdfVkGDxy/62V3jxF Z86NslhouT5Y9RGIUWJqUCZIbVTLuz3zHN3JChnK11yP0xAzaHBQ4djXbrjUi08b LOsSsyaNnNNfl2sc4/+oX9R1FJeCvwc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:23 2026 by rpki-client