$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa File: 0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa (raw, json) Hash identifier: 15e3GerjQjYBhuHNSIZ6J/uQYlFY7stKleX6ePJBNkI= Subject key identifier: 3B:54:48:DB:0B:87:3D:AD:E4:F7:19:E6:A4:70:15:56:8A:81:3D:73 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DD78B2308D5F2C68AB83169E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa Signing time: Fri 15 May 2026 13:00:30 +0000 ROA not before: Fri 15 May 2026 13:00:30 +0000 ROA not after: Thu 13 Aug 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.111.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d7:8b:23:08:d5:f2:c6:8a:b8:31:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 15 13:00:30 2026 GMT Not After : Aug 13 13:00:30 2026 GMT Subject: CN=e60c9c0b-66dc-4d8a-b313-aa7c945ffdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:39:fd:c4:b2:d8:4c:56:33:e3:62:6a:e7: 45:7a:a3:3c:0f:44:5d:d6:3f:87:fc:a4:61:3c:84: ff:28:58:89:56:d7:d4:37:34:86:50:fc:6a:95:8f: 41:51:f8:67:bc:a2:0c:6a:eb:66:14:e1:5b:d9:ff: 1d:fb:32:3f:c3:f3:42:39:d3:02:cb:22:12:65:d9: 86:21:2c:78:47:55:3a:47:da:70:97:8a:ce:44:dd: d8:42:10:3c:d6:13:6c:e4:ae:fa:d1:0c:14:d1:ef: 1d:c8:36:82:5a:f1:7b:e6:d2:71:7d:26:3e:62:f6: c5:b0:25:c4:f9:30:87:6e:43:44:a7:bf:1a:f6:02: 22:89:67:30:4c:8f:ce:46:c1:1e:b5:e4:8b:68:bf: a8:7b:ce:03:41:a2:23:36:52:8f:25:a8:74:39:52: 10:a1:30:5c:6e:ea:34:d5:1c:09:8b:5b:d3:fd:11: 64:26:1d:fc:a7:26:f5:e3:95:95:e5:b3:04:0f:ee: cd:a4:fc:51:ff:e5:c3:ed:99:35:ad:65:7e:94:f5: 96:ae:dc:a6:55:0d:f6:c7:a3:9c:26:b2:fe:dc:7a: 07:6a:22:1e:5b:61:d5:7a:5d:09:c2:d8:52:1a:8c: c8:3b:72:3a:59:91:93:70:7b:f8:9e:b2:16:34:24: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:54:48:DB:0B:87:3D:AD:E4:F7:19:E6:A4:70:15:56:8A:81:3D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1c:94:7f:77:88:33:2b:f6:61:bd:9c:30:d6:a7:14:cc:b2: bf:62:b8:81:20:77:8e:58:60:db:59:a7:5f:c0:78:34:b6:a0: df:6a:aa:8a:c4:89:d9:a7:fc:76:65:26:2b:01:2c:05:03:b5: 70:a2:9d:c3:54:c9:12:d7:21:81:24:38:09:dd:03:62:f3:5e: ed:99:85:fc:71:20:7a:4b:ca:5a:c1:e0:82:31:f8:9a:e8:ba: b1:19:54:9a:84:c9:01:71:09:8b:2e:00:89:70:e5:3b:f4:68: 56:09:f5:40:4b:2e:81:75:36:0a:ad:e0:4a:3d:35:52:e5:0a: a2:2c:2f:4e:09:6b:9b:70:42:36:d6:93:d0:f1:5c:36:73:1a: 8f:83:8b:14:4a:17:47:fb:9e:49:88:e1:34:9f:ad:01:c1:5b: 5b:ea:00:33:8f:d1:f2:23:da:e8:a7:a9:aa:fb:2f:5d:8c:e0: 9c:c3:0d:86:f8:75:48:1f:1d:9b:ac:21:f1:ce:f5:89:f1:f7: c6:c1:8c:0a:5b:2c:a7:8c:17:73:72:91:2d:b1:3e:06:8b:b8: 1a:5f:f6:76:0d:39:4e:08:9d:b7:31:4e:f9:ce:e5:c5:5f:a2: 78:e4:80:42:bc:4e:4d:59:82:c9:fd:c4:d0:9d:ce:ac:5c:51: 41:52:5a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3XiyMI1fLGirgxaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZTYwYzljMGItNjZkYy00ZDhhLWIzMTMtYWE3Yzk0NWZmZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizY5/cSy2ExWM+NiaudFeqM8D0Rd1j+H/KRh PIT/KFiJVtfUNzSGUPxqlY9BUfhnvKIMautmFOFb2f8d+zI/w/NCOdMCyyISZdmG ISx4R1U6R9pwl4rORN3YQhA81hNs5K760QwU0e8dyDaCWvF75tJxfSY+YvbFsCXE +TCHbkNEp78a9gIiiWcwTI/ORsEeteSLaL+oe84DQaIjNlKPJah0OVIQoTBcbuo0 1RwJi1vT/RFkJh38pyb145WV5bMED+7NpPxR/+XD7Zk1rWV+lPWWrtymVQ32x6Oc JrL+3HoHaiIeW2HVel0JwthSGozIO3I6WZGTcHv4nrIWNCTBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtUSNsLhz2t5PcZ5qRwFVaKgT1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGQ0MGEzNzktZTBmZC0z NmY0LWIwYzAtODdmNGJiZjMyZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUclH93iDMr9mG9nDDWpxTMsr9iuIEgd45YYNtZp1/AeDS2oN9qqorE idmn/HZlJisBLAUDtXCincNUyRLXIYEkOAndA2LzXu2ZhfxxIHpLylrB4IIx+Jro urEZVJqEyQFxCYsuAIlw5Tv0aFYJ9UBLLoF1Ngqt4Eo9NVLlCqIsL04Ja5twQjbW k9DxXDZzGo+DixRKF0f7nkmI4TSfrQHBW1vqADOP0fIj2uinqar7L12M4JzDDYb4 dUgfHZusIfHO9Ynx98bBjApbLKeMF3NykS2xPgaLuBpf9nYNOU4InbcxTvnO5cVf onjkgEK8Tk1Zgsn9xNCdzqxcUUFSWpc= -----END CERTIFICATE-----Generated at Thu Jun 4 09:02:56 2026 by rpki-client