$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1dd84504-38ca-3031-b7c4-abd2818c1643.roa File: 1dd84504-38ca-3031-b7c4-abd2818c1643.roa (raw, json) Hash identifier: gDcTNOtoen+05Rdaw15kKziYwiJd6epD6y2fx0gRlVU= Subject key identifier: DA:8E:65:3E:27:38:AF:E5:6D:2F:1A:1E:53:25:04:75:C0:03:34:C5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E467F186D77F8103DDBA21780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1dd84504-38ca-3031-b7c4-abd2818c1643.roa Signing time: Wed 24 Jun 2026 06:51:11 +0000 ROA not before: Wed 24 Jun 2026 06:51:11 +0000 ROA not after: Tue 22 Sep 2026 06:51:11 +0000 asID: 834 IP address blocks: 172.111.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:7f:18:6d:77:f8:10:3d:db:a2:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 24 06:51:11 2026 GMT Not After : Sep 22 06:51:11 2026 GMT Subject: CN=5998391b-22a4-4924-aa1c-62b6ccad77ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:25:22:a8:2c:5b:ab:f6:e3:77:8c:5b:c0: 40:5c:88:6f:0d:eb:d1:50:fe:52:55:1f:3e:ff:f6: 04:b9:d7:a3:9c:1e:f1:1c:b2:d7:2d:64:fc:e9:92: 26:2e:ee:f2:37:56:14:3c:a2:b7:47:40:2d:e6:e9: 6c:18:dd:b8:bb:f6:99:e5:bb:df:25:9d:11:a2:d5: 44:ad:a3:58:c6:5d:5e:92:a0:83:da:dc:07:f2:92: 40:40:b8:f1:4a:59:ab:61:33:36:60:33:a0:f5:a3: 2a:f9:06:e1:2d:12:38:c5:74:03:cf:46:83:f9:5e: 64:32:d0:b7:0d:16:d3:86:30:24:91:a0:5c:0c:7e: 31:2f:b3:69:92:e9:8b:b8:ac:57:8b:a9:2c:bc:f2: 43:29:8c:c3:c5:ad:b3:81:b7:6e:ab:28:dc:65:62: e4:4d:fa:96:0c:48:ba:8e:00:63:93:13:99:a1:31: 5c:b7:17:6a:65:49:cb:e2:11:6b:7b:87:d3:73:2f: 47:22:19:c2:69:03:1e:05:98:f1:eb:9b:5e:84:cc: f7:b9:6a:99:a2:e8:b0:52:e6:26:4c:87:90:c1:b6: 7e:cb:5c:ec:d8:08:cc:31:a3:6a:ea:17:e1:96:29: 7b:c9:25:91:66:26:22:b1:7c:b7:a3:b7:88:54:2f: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:65:3E:27:38:AF:E5:6D:2F:1A:1E:53:25:04:75:C0:03:34:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1dd84504-38ca-3031-b7c4-abd2818c1643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e4:e6:b0:e9:91:1a:e8:05:6b:b2:59:bc:43:54:6a:9e:d9: 7d:df:d3:df:20:82:26:81:42:8d:54:7f:3b:81:c6:47:fa:45: ce:10:45:ea:0d:70:78:19:34:3d:4a:33:28:a0:1b:11:49:de: e8:95:a3:0e:0b:be:4d:81:44:56:d6:e6:21:9f:92:37:ee:33: 85:16:ca:0f:b8:36:a7:a8:bd:10:aa:3c:90:a8:fb:78:22:4f: 82:33:d0:de:7f:32:09:df:bd:61:e7:7e:a2:22:78:9f:41:08: da:ac:4f:4a:ef:f3:16:5c:b0:c7:97:bd:dc:5d:e7:26:24:c1: cf:e6:40:f9:c1:8d:70:99:ff:f0:f0:50:2b:92:3b:e0:57:e6: 94:00:65:ef:ad:44:da:e0:97:6c:d7:89:92:bd:ec:12:2a:e8: e7:09:ad:21:2f:37:43:de:de:54:cb:ba:d3:ef:c2:55:92:dc: 85:5f:42:71:48:8c:4c:15:14:8f:22:f8:b6:40:b7:f2:23:c5: 3b:05:02:d0:c2:91:31:a6:27:2a:ec:15:fb:6f:57:db:57:79: 62:fe:fa:7c:bb:30:2f:a9:a4:35:c5:b8:23:df:32:c1:ed:8c: ad:d0:9f:e8:3c:cb:83:50:fb:7e:eb:b6:86:77:e7:a2:f7:a3: ff:5b:b0:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Gfxhtd/gQPduiF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYyNDA2NTExMVoXDTI2MDkyMjA2NTExMVowLzEtMCsGA1UEAxMk NTk5ODM5MWItMjJhNC00OTI0LWFhMWMtNjJiNmNjYWQ3N2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG8lIqgsW6v243eMW8BAXIhvDevRUP5SVR8+ //YEudejnB7xHLLXLWT86ZImLu7yN1YUPKK3R0At5ulsGN24u/aZ5bvfJZ0RotVE raNYxl1ekqCD2twH8pJAQLjxSlmrYTM2YDOg9aMq+QbhLRI4xXQDz0aD+V5kMtC3 DRbThjAkkaBcDH4xL7NpkumLuKxXi6ksvPJDKYzDxa2zgbduqyjcZWLkTfqWDEi6 jgBjkxOZoTFctxdqZUnL4hFre4fTcy9HIhnCaQMeBZjx65tehMz3uWqZouiwUuYm TIeQwbZ+y1zs2AjMMaNq6hfhlil7ySWRZiYisXy3o7eIVC+R9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqOZT4nOK/lbS8aHlMlBHXAAzTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWRkODQ1MDQtMzhjYS0z MDMxLWI3YzQtYWJkMjgxOGMxNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfk5rDpkRroBWuyWbxDVGqe2X3f098ggiaBQo1UfzuBxkf6Rc4QReoN cHgZND1KMyigGxFJ3uiVow4Lvk2BRFbW5iGfkjfuM4UWyg+4NqeovRCqPJCo+3gi T4Iz0N5/MgnfvWHnfqIieJ9BCNqsT0rv8xZcsMeXvdxd5yYkwc/mQPnBjXCZ//Dw UCuSO+BX5pQAZe+tRNrgl2zXiZK97BIq6OcJrSEvN0Pe3lTLutPvwlWS3IVfQnFI jEwVFI8i+LZAt/IjxTsFAtDCkTGmJyrsFftvV9tXeWL++ny7MC+ppDXFuCPfMsHt jK3Qn+g8y4NQ+37rtoZ356L3o/9bsCw= -----END CERTIFICATE-----Generated at Mon Jun 29 10:00:18 2026 by rpki-client