$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa File: e67216c6-fb7f-3d32-ace4-8f1870a41110.roa (raw, json) Hash identifier: je6ZhGbyAPNzPchqrhJjMnD6xTNoG/I60rCN6Ha/Np8= Subject key identifier: 3E:7D:13:97:7F:A5:B3:AA:38:6C:53:D6:E9:4B:04:F2:26:FF:E3:49 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D47C4E5087A3998F47B2030B8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 45671 IP address blocks: 172.94.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e5:08:7a:39:98:f4:7b:20:30:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=417e649d-390f-4938-93fd-a663f6ce264a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:20:9a:66:95:8b:82:0b:84:e5:88:58:41:32: 87:76:95:ca:40:af:a6:e6:5e:38:cf:63:18:c1:bc: 8d:25:2e:e3:e4:31:72:64:13:ef:8a:15:cf:a4:b3: e5:67:92:53:3d:f0:90:cf:0d:a2:de:0e:ed:94:c0: 87:98:40:85:37:b0:e8:ad:c1:f5:60:c0:54:01:e1: c3:44:1b:eb:b3:79:80:f9:af:c0:bc:ba:ad:bd:54: c4:98:dd:71:ac:f7:e0:45:4e:31:ca:c8:8c:e7:c4: 4a:d7:35:2f:e6:ef:13:5d:13:99:c7:72:c9:7a:33: 53:23:80:ff:b5:b6:79:8e:65:29:92:f4:e2:2c:f2: 64:ba:90:99:bf:80:40:f7:26:33:ef:c0:d5:b4:29: d4:86:a7:f9:77:64:c8:56:d9:32:d4:16:f4:fb:81: fe:01:28:4d:02:88:52:f1:23:71:8f:cd:56:a9:4a: 6b:f5:6f:8d:9c:95:bf:6b:11:42:cc:20:09:23:8a: 80:8d:9b:dd:66:56:50:09:da:4b:ed:12:31:32:4b: d0:1e:e0:70:66:7a:a4:be:d5:49:33:e1:b4:54:ea: 31:99:a8:e9:3e:c7:2c:bb:a4:b5:da:23:7e:83:33: 55:da:ec:61:35:3d:ab:b8:57:b4:ad:12:32:cd:16: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7D:13:97:7F:A5:B3:AA:38:6C:53:D6:E9:4B:04:F2:26:FF:E3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ad:27:ae:9d:b8:53:da:f1:d5:9e:87:f0:b1:6c:41:da:50: 56:54:8f:4e:9c:14:38:96:57:c7:1f:d7:d0:be:00:bb:43:e8: e6:5b:89:df:0c:a7:94:51:de:9d:ea:90:c4:b3:dc:e7:e9:ca: 3c:64:7f:e9:57:cf:09:19:45:26:18:a3:18:b4:f5:4d:7e:53: 7f:85:c8:3c:f4:1a:69:59:09:5b:0e:72:52:e1:37:67:f4:03: ec:21:82:1f:71:3f:7d:93:4d:b7:77:03:91:3c:84:34:8b:7d: 1e:b3:51:71:c7:a6:87:67:83:a1:7a:7b:24:25:41:76:6d:31: a3:33:97:84:fa:fe:15:bf:c1:df:ca:17:44:96:10:56:14:46: 50:8c:de:1e:90:4d:0d:9a:f0:1e:9c:c8:86:f2:f3:17:26:3f: 8d:c8:eb:55:98:bf:72:fe:e2:6a:d9:0a:d8:52:55:b7:c7:e0: 81:80:a4:cc:3a:8e:59:be:78:4b:d9:cc:90:57:bb:56:c7:e5: 9a:9d:06:07:f5:c1:ca:5d:f8:17:80:22:21:fa:30:18:5a:12: d4:74:a1:76:97:00:cd:cb:e4:9b:bc:e9:70:62:20:b5:87:bc: 9a:3e:e1:cd:56:0e:89:c5:e4:29:7e:bf:44:fc:f2:f7:07:48: 3e:95:db:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOUIejmY9HsgMLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NDE3ZTY0OWQtMzkwZi00OTM4LTkzZmQtYTY2M2Y2Y2UyNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCCaZpWLgguE5YhYQTKHdpXKQK+m5l44z2MY wbyNJS7j5DFyZBPvihXPpLPlZ5JTPfCQzw2i3g7tlMCHmECFN7DorcH1YMBUAeHD RBvrs3mA+a/AvLqtvVTEmN1xrPfgRU4xysiM58RK1zUv5u8TXROZx3LJejNTI4D/ tbZ5jmUpkvTiLPJkupCZv4BA9yYz78DVtCnUhqf5d2TIVtky1Bb0+4H+AShNAohS 8SNxj81WqUpr9W+NnJW/axFCzCAJI4qAjZvdZlZQCdpL7RIxMkvQHuBwZnqkvtVJ M+G0VOoxmajpPscsu6S12iN+gzNV2uxhNT2ruFe0rRIyzRaBawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD59E5d/pbOqOGxT1ulLBPIm/+NJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTY3MjE2YzYtZmI3Zi0z ZDMyLWFjZTQtOGYxODcwYTQxMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKtJ66duFPa8dWeh/CxbEHaUFZUj06cFDiWV8cf19C+ALtD6OZbid8M p5RR3p3qkMSz3Ofpyjxkf+lXzwkZRSYYoxi09U1+U3+FyDz0GmlZCVsOclLhN2f0 A+whgh9xP32TTbd3A5E8hDSLfR6zUXHHpodng6F6eyQlQXZtMaMzl4T6/hW/wd/K F0SWEFYURlCM3h6QTQ2a8B6cyIby8xcmP43I61WYv3L+4mrZCthSVbfH4IGApMw6 jlm+eEvZzJBXu1bH5ZqdBgf1wcpd+BeAIiH6MBhaEtR0oXaXAM3L5Ju86XBiILWH vJo+4c1WDonF5Cl+v0T88vcHSD6V2wo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:33 2026 by rpki-client