$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa File: f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa (raw, json) Hash identifier: MzW7dP+ATYfcZFssUgFQF1Yx5yNLx/Gpl/X3z/jWiiM= Subject key identifier: 0F:CD:D1:BF:9B:7D:24:08:72:B1:82:A7:B1:EB:F4:78:6A:B1:4B:81 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DBFD07E0136B1CF09FCFA3500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 9009 IP address blocks: 172.94.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:7e:01:36:b1:cf:09:fc:fa:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=30163da5-7bf5-4d3d-a556-cad0b70f70de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ad:f7:f1:b1:e9:34:e7:14:d6:9d:b9:be:90: 5d:13:c0:99:9c:ef:b6:c6:49:22:66:1b:d1:24:ba: a8:ca:b0:cb:74:b1:15:fc:02:9d:b7:f2:85:78:3e: 2c:49:8d:0b:af:5d:75:0f:8f:97:40:ea:76:9f:26: 23:2c:42:2d:e2:e8:12:a1:85:c6:75:05:93:b9:65: f5:4b:f5:39:61:93:e1:05:72:ad:15:c5:c7:28:28: af:09:07:18:f1:69:0e:40:6c:ec:9a:ea:24:5d:1d: 52:12:a3:0a:8b:a6:3f:51:20:70:45:9c:c3:53:a1: 16:ae:a0:d0:26:69:b5:77:35:a3:e1:e3:7b:4e:4a: f7:f8:37:2a:07:83:ad:43:10:fc:ab:b3:14:0e:d6: a4:10:02:4c:68:04:48:30:19:80:5d:79:3c:53:86: b4:51:55:f3:5b:70:5d:88:4c:f2:71:28:88:0b:0f: 18:32:e9:ef:c0:37:b9:57:83:fd:a6:6c:aa:d3:cf: d1:83:f9:e5:01:d6:aa:b0:64:9a:5b:ff:f9:a7:9e: c9:92:19:55:e7:22:62:ea:51:a5:15:e3:e6:46:41: df:38:a6:6f:b9:38:52:b3:41:74:f8:9b:ac:93:49: b1:fe:5c:9a:d2:f5:d4:94:80:80:f2:2f:65:ef:c3: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CD:D1:BF:9B:7D:24:08:72:B1:82:A7:B1:EB:F4:78:6A:B1:4B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:85:36:7e:cd:04:eb:63:36:7b:40:e0:06:97:89:21:73:4e: b6:bd:e6:da:44:e6:92:75:92:be:36:52:0e:3a:8a:f0:b7:3f: 68:86:91:aa:1a:d2:19:a2:f7:51:52:0a:f6:78:a9:03:d1:a0: 86:e8:6a:82:72:df:76:21:07:90:e8:9f:73:bb:8d:4c:d2:07: c0:7e:54:71:6d:ec:28:42:b3:c4:4b:6e:65:a7:0e:7c:78:80: 1c:03:a1:b8:c6:e0:34:f6:f7:01:94:1f:d3:b4:61:cd:2a:7f: 0a:5d:bf:fe:63:0f:47:d4:18:a1:d5:c2:2d:b2:ad:9a:9f:a0: 75:ac:6d:c9:17:e2:0b:df:16:c5:54:b9:32:6a:80:e1:37:3d: bc:00:4f:f9:7a:97:da:36:c8:5d:06:dc:78:dc:5a:2d:12:5c: 15:8b:42:a3:af:ed:59:aa:ea:be:56:26:97:95:a9:30:7f:20: 2e:27:c3:c0:53:b9:e6:a6:4e:67:c2:12:17:43:e1:0d:24:ae: 44:01:3b:a9:f6:e4:f7:01:fa:22:32:47:1c:b5:2b:e4:a3:bc: 53:77:ff:bd:60:c1:76:16:cc:0e:06:dd:70:15:bc:44:c2:82: f9:1a:e8:ad:8a:ab:c2:f8:ca:76:fa:06:66:32:66:d4:59:09: 09:66:6d:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0H4BNrHPCfz6NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk MzAxNjNkYTUtN2JmNS00ZDNkLWE1NTYtY2FkMGI3MGY3MGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q338bHpNOcU1p25vpBdE8CZnO+2xkkiZhvR JLqoyrDLdLEV/AKdt/KFeD4sSY0Lr111D4+XQOp2nyYjLEIt4ugSoYXGdQWTuWX1 S/U5YZPhBXKtFcXHKCivCQcY8WkOQGzsmuokXR1SEqMKi6Y/USBwRZzDU6EWrqDQ Jmm1dzWj4eN7Tkr3+DcqB4OtQxD8q7MUDtakEAJMaARIMBmAXXk8U4a0UVXzW3Bd iEzycSiICw8YMunvwDe5V4P9pmyq08/Rg/nlAdaqsGSaW//5p57JkhlV5yJi6lGl FePmRkHfOKZvuThSs0F0+Jusk0mx/lya0vXUlICA8i9l78NTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/N0b+bfSQIcrGCp7Hr9HhqsUuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjYwOWJlMDQtZDE2YS0z ZWExLWIwMWItNGFlMmM2OTJhNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqFNn7NBOtjNntA4AaXiSFzTra95tpE5pJ1kr42Ug46ivC3P2iGkaoa 0hmi91FSCvZ4qQPRoIboaoJy33YhB5Don3O7jUzSB8B+VHFt7ChCs8RLbmWnDnx4 gBwDobjG4DT29wGUH9O0Yc0qfwpdv/5jD0fUGKHVwi2yrZqfoHWsbckX4gvfFsVU uTJqgOE3PbwAT/l6l9o2yF0G3HjcWi0SXBWLQqOv7Vmq6r5WJpeVqTB/IC4nw8BT ueamTmfCEhdD4Q0krkQBO6n25PcB+iIyRxy1K+SjvFN3/71gwXYWzA4G3XAVvETC gvka6K2Kq8L4ynb6BmYyZtRZCQlmbSo= -----END CERTIFICATE-----Generated at Wed May 13 04:45:39 2026 by rpki-client