$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa File: 02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa (raw, json) Hash identifier: mz2TovNh1wJ+hch9efQZDhBT8ZilUjBjAytXPpGsB+s= Subject key identifier: CA:68:5F:BE:83:1B:36:3D:C8:0B:4F:C5:98:11:BE:85:58:59:3A:39 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E0A6FF8B3825C9B186DC1DC40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 16509 IP address blocks: 172.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f8:b3:82:5c:9b:18:6d:c1:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=63d7797c-9d36-4879-989a-df64efdfce8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:25:19:11:9b:73:7c:4b:d0:38:3e:6b:a3: 51:0c:dd:d3:75:80:41:66:2f:e7:e3:db:58:c9:08: 69:8c:62:a2:f0:23:d6:8c:13:ac:23:5b:89:87:b7: 73:63:6a:cc:a3:f5:2c:7e:9a:ce:c1:08:d6:75:18: 42:e6:68:8e:04:ff:96:08:d4:3c:68:c0:cd:b7:6d: ce:29:60:ff:76:14:53:7c:72:67:f3:99:31:80:26: 6d:1b:14:4e:ec:21:24:96:05:a4:28:e0:1b:7f:cc: 2c:0e:34:b8:5e:94:49:ae:0f:1b:4b:ad:b1:f9:48: b5:85:ee:33:eb:d5:01:e6:a5:52:e5:79:89:14:d3: a7:e6:83:4c:1d:ce:1c:6d:a7:d8:be:25:35:fa:9a: b0:b6:06:f7:be:13:e5:12:45:f9:2f:19:93:31:34: ad:58:b7:4f:7e:08:02:a0:35:9d:59:62:b0:37:4c: d8:b9:f7:36:6d:ec:e6:fd:e5:d6:c0:24:de:9a:e8: 56:07:7b:56:ba:f3:8d:bc:88:c3:27:c2:c3:9b:47: 3b:a4:26:d4:90:92:bc:d4:d7:37:f5:bd:d0:e7:83: d8:85:e7:fd:53:91:10:bd:99:19:39:8a:35:d0:e2: d8:83:27:db:87:f9:14:eb:a5:5d:1a:13:0a:2a:75: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:5F:BE:83:1B:36:3D:C8:0B:4F:C5:98:11:BE:85:58:59:3A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e0:53:52:a3:ad:74:62:20:92:8d:09:dd:b8:4e:00:3d:11: 31:36:bf:c3:75:4a:5d:e0:ff:dc:79:21:44:1a:e2:19:e4:e7: 4d:a5:ff:7c:c1:ae:b4:52:80:14:58:72:93:39:79:c3:13:9e: 0b:e3:4c:e3:1c:a4:33:50:fa:ab:0f:c9:16:9a:72:95:2a:f9: c0:a2:3e:fc:9c:72:00:cc:3a:fe:8b:0b:3e:2e:77:64:8a:e2: d1:ae:08:b1:c1:aa:4d:0a:af:ae:87:a8:63:ae:ed:25:23:dc: 56:8f:90:a2:bb:25:14:ff:6a:93:f5:7a:9e:74:95:95:ea:87: 63:d9:6f:e7:c2:8a:9c:75:d3:8f:39:4a:ed:67:77:4e:ea:de: 91:8a:8d:96:7d:9b:93:42:6a:65:f1:00:30:ae:60:d3:f5:93: d9:35:4a:cb:d7:a1:33:78:f3:92:59:df:b5:3a:6d:bc:36:d4: 73:77:8f:f2:ac:5f:2a:7a:0c:9e:92:b5:2a:db:e8:8c:6e:92: 29:44:2f:2f:a8:0c:67:ef:ab:7c:99:b9:10:ec:a2:6e:1f:99: da:a3:aa:4c:de:e0:f5:4d:e4:da:cb:e5:f4:58:27:41:7f:15: 1d:43:3a:36:48:b1:f4:30:42:53:40:1c:46:d0:65:13:a5:c7: 0e:9e:f0:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/izglybGG3B3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk NjNkNzc5N2MtOWQzNi00ODc5LTk4OWEtZGY2NGVmZGZjZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhglGRGbc3xL0Dg+a6NRDN3TdYBBZi/n49tY yQhpjGKi8CPWjBOsI1uJh7dzY2rMo/UsfprOwQjWdRhC5miOBP+WCNQ8aMDNt23O KWD/dhRTfHJn85kxgCZtGxRO7CEklgWkKOAbf8wsDjS4XpRJrg8bS62x+Ui1he4z 69UB5qVS5XmJFNOn5oNMHc4cbafYviU1+pqwtgb3vhPlEkX5LxmTMTStWLdPfggC oDWdWWKwN0zYufc2bezm/eXWwCTemuhWB3tWuvONvIjDJ8LDm0c7pCbUkJK81Nc3 9b3Q54PYhef9U5EQvZkZOYo10OLYgyfbh/kU66VdGhMKKnUpswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpoX76DGzY9yAtPxZgRvoVYWTo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDJjOTEzN2EtM2ZhYS0z ZGNkLWI1ZGYtNGYxNTczZGQ1YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3gU1KjrXRiIJKNCd24TgA9ETE2v8N1Sl3g/9x5IUQa4hnk502l/3zB rrRSgBRYcpM5ecMTngvjTOMcpDNQ+qsPyRaacpUq+cCiPvyccgDMOv6LCz4ud2SK 4tGuCLHBqk0Kr66HqGOu7SUj3FaPkKK7JRT/apP1ep50lZXqh2PZb+fCipx10485 Su1nd07q3pGKjZZ9m5NCamXxADCuYNP1k9k1SsvXoTN485JZ37U6bbw21HN3j/Ks Xyp6DJ6StSrb6IxukilELy+oDGfvq3yZuRDsom4fmdqjqkze4PVN5NrL5fRYJ0F/ FR1DOjZIsfQwQlNAHEbQZROlxw6e8Kw= -----END CERTIFICATE-----Generated at Thu Jun 4 09:03:13 2026 by rpki-client