$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa File: 1693deb8-1531-33fd-925a-247e8cd7c80d.roa (raw, json) Hash identifier: QUEa5zB7GTsQBziRmeD/CTa0rb8XlJ2BpdcfVcYpvGI= Subject key identifier: 7E:E2:8F:CA:E9:CA:F2:61:A6:40:B1:64:61:1D:8C:37:56:74:1D:08 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E7204D14B994F563D4CA28238 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 212238 IP address blocks: 172.111.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d1:4b:99:4f:56:3d:4c:a2:82:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=20ea13ee-27a4-47c0-af1d-ec3e309d618f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:38:21:6f:aa:1a:4e:78:38:16:4c:3c:eb: 79:15:7f:67:3f:65:48:06:a5:76:07:6c:67:4f:ed: ee:46:45:26:39:78:b6:ed:bb:a6:54:15:58:7c:e3: 9d:ea:4f:f5:f5:4b:d3:9b:a2:42:38:38:15:d0:75: 79:0e:63:98:92:6a:0d:b7:d9:78:1f:b3:00:30:e3: fb:77:90:96:b8:a2:fd:53:7c:b6:c8:a7:87:79:b4: ba:8d:68:29:5e:80:ba:f2:57:93:67:bc:dd:db:67: 14:a1:ea:3a:ff:d7:1f:48:18:38:a5:00:00:e2:d7: cc:7f:c0:e9:0f:55:cd:15:f0:da:5c:fd:85:fd:0b: 00:89:8f:2e:94:f6:64:7d:c3:1b:e1:89:0f:43:0d: 6e:f3:31:c9:ea:d3:a7:73:64:30:e8:ae:e0:99:1a: 22:ee:87:90:97:1e:6b:57:ba:31:28:0c:37:37:7a: 29:0d:79:07:ae:cc:0d:9a:c9:eb:67:f9:8e:e1:c8: 1d:92:d1:46:89:93:a5:16:43:f9:93:f7:b4:64:fd: ca:ed:b6:7e:65:80:ca:f4:25:1f:2d:65:96:de:86: 86:86:18:21:39:59:1a:c8:51:11:5c:da:5e:2b:41: be:41:9e:75:7d:45:e7:da:77:b4:fb:7f:d3:c6:5e: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E2:8F:CA:E9:CA:F2:61:A6:40:B1:64:61:1D:8C:37:56:74:1D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:77:a6:4a:59:44:c7:8c:71:3c:6e:2c:c7:7d:f2:16:8b:9b: 9c:d7:7c:24:d8:b7:da:00:90:1c:44:79:87:44:bd:11:62:e8: f2:86:66:21:eb:44:83:39:41:33:b7:96:54:25:29:b9:7e:24: 1f:66:26:e2:4e:ac:9d:65:c6:4f:c4:db:0d:a3:db:d5:53:cc: 0b:8c:51:a7:a3:66:15:20:09:aa:ba:88:1f:fd:6b:9b:e4:32: dc:e4:3a:43:4a:0e:9d:cc:4b:af:3a:c2:cc:b6:06:7d:75:bf: b3:a8:f6:49:04:89:3c:8d:30:aa:66:1d:15:85:08:af:9a:1b: 3d:89:83:fa:8e:3e:c4:3f:23:6e:e6:1c:8f:ed:cc:33:e7:ec: 74:b2:4c:95:f8:46:9c:c0:d4:a5:26:da:53:d7:bc:66:29:1c: 26:00:53:6d:84:c5:16:33:79:d0:0e:04:94:da:3e:bc:8f:40: 57:01:fc:52:56:bf:5f:1a:de:88:02:73:83:1f:24:09:99:3e: a2:76:a4:b1:d9:10:02:f1:c7:91:ff:95:b9:bc:8a:fe:82:89: 3a:64:e1:13:66:b1:fd:b0:15:c9:90:20:75:cf:8f:a1:5e:14: 95:56:ed:18:02:fa:93:4d:42:85:c5:ef:a1:3d:33:c6:35:56: 0d:9d:42:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNFLmU9WPUyigjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk MjBlYTEzZWUtMjdhNC00N2MwLWFmMWQtZWMzZTMwOWQ2MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFQ4IW+qGk54OBZMPOt5FX9nP2VIBqV2B2xn T+3uRkUmOXi27bumVBVYfOOd6k/19UvTm6JCODgV0HV5DmOYkmoNt9l4H7MAMOP7 d5CWuKL9U3y2yKeHebS6jWgpXoC68leTZ7zd22cUoeo6/9cfSBg4pQAA4tfMf8Dp D1XNFfDaXP2F/QsAiY8ulPZkfcMb4YkPQw1u8zHJ6tOnc2Qw6K7gmRoi7oeQlx5r V7oxKAw3N3opDXkHrswNmsnrZ/mO4cgdktFGiZOlFkP5k/e0ZP3K7bZ+ZYDK9CUf LWWW3oaGhhghOVkayFERXNpeK0G+QZ51fUXn2ne0+3/Txl79BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7ij8rpyvJhpkCxZGEdjDdWdB0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTY5M2RlYjgtMTUzMS0z M2ZkLTkyNWEtMjQ3ZThjZDdjODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp3pkpZRMeMcTxuLMd98haLm5zXfCTYt9oAkBxEeYdEvRFi6PKGZiHr RIM5QTO3llQlKbl+JB9mJuJOrJ1lxk/E2w2j29VTzAuMUaejZhUgCaq6iB/9a5vk MtzkOkNKDp3MS686wsy2Bn11v7Oo9kkEiTyNMKpmHRWFCK+aGz2Jg/qOPsQ/I27m HI/tzDPn7HSyTJX4RpzA1KUm2lPXvGYpHCYAU22ExRYzedAOBJTaPryPQFcB/FJW v18a3ogCc4MfJAmZPqJ2pLHZEALxx5H/lbm8iv6CiTpk4RNmsf2wFcmQIHXPj6Fe FJVW7RgC+pNNQoXF76E9M8Y1Vg2dQuM= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:42 2026 by rpki-client