$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa File: 28baacda-6a68-3c8f-b393-d75be1456004.roa (raw, json) Hash identifier: 1vNGakAvXmdtp5WIix9Ro6t+VQjARjP6LQSa7sn8SUg= Subject key identifier: 88:C4:B8:A9:B7:8F:7E:CB:4B:3E:EF:67:3F:49:4D:0C:AC:63:35:47 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E7204D134D8B936CE634CFC40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 212238 IP address blocks: 172.111.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d1:34:d8:b9:36:ce:63:4c:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=225de85e-9fa4-443d-a167-2743ef771ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:ff:e5:22:a8:27:f9:9c:26:f5:7d:8e:3d: 84:64:0d:34:7b:dd:ac:35:7b:cd:b0:91:9a:1e:15: 14:f5:ff:7e:6b:d1:46:06:9c:77:a2:b1:68:b3:e8: 90:47:8b:ea:c7:a7:66:cf:3b:59:c7:1b:28:12:c6: 06:5e:26:d6:a2:0a:e3:ba:21:38:68:f3:99:a5:ec: dd:04:a5:88:24:37:21:97:cc:d0:64:75:90:60:a1: 51:5d:fc:60:14:31:ef:13:65:59:94:0d:e8:6f:e6: 24:db:2e:5f:fb:91:e2:9e:94:30:35:32:c0:9e:5a: aa:a3:07:c3:66:56:ce:5e:0b:c0:29:01:75:12:0b: de:d3:52:de:80:df:f9:70:99:73:40:ec:48:2a:57: 38:9d:bb:f5:33:47:67:60:b4:58:3e:87:75:1d:04: 98:62:7c:6e:5e:67:94:bc:f9:d7:dc:9c:8e:02:86: 96:35:da:14:fe:78:8e:3c:01:9d:93:8b:5e:01:4d: 0b:2d:6a:78:e7:9f:d9:08:ed:b0:c1:29:14:a6:b7: 74:8a:63:60:ce:36:35:03:7c:f9:9b:f6:eb:0c:4d: 72:bf:16:40:77:93:fd:07:92:dc:74:59:70:11:23: 0d:75:19:0b:24:5a:1f:a8:9b:4e:ca:85:e1:08:93: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C4:B8:A9:B7:8F:7E:CB:4B:3E:EF:67:3F:49:4D:0C:AC:63:35:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8e:41:ce:30:e1:e0:df:a7:2c:54:22:17:df:db:47:13:0a: d3:f9:2c:fe:b2:fd:9c:15:79:5a:ac:9a:63:7a:a9:6d:ed:c7: b4:7f:6c:62:46:10:95:44:d2:19:21:20:bc:69:40:7c:6c:1c: a4:3a:e4:e2:8c:f7:cc:fa:c7:00:5f:eb:c4:80:74:fc:7b:33: 99:db:36:e7:fc:a5:ab:e0:d2:d7:3a:fc:65:0d:7f:05:74:10: 52:b1:80:3b:5e:38:92:96:d2:14:8a:49:9b:ae:69:96:74:b8: cf:94:3f:57:a7:84:c8:d0:90:4d:95:04:18:3f:10:f7:e3:dd: 25:02:aa:bf:29:2b:b0:5b:ce:db:4c:ab:da:b2:bd:40:e5:59: 33:ab:37:b9:dc:be:0f:71:de:c4:15:ef:e3:74:db:04:58:ab: d7:cb:fd:34:cd:9c:c1:e2:0e:b4:a3:c6:03:88:f2:bc:cb:0a: 39:16:d0:36:73:1f:97:63:14:0b:33:1d:20:4b:b9:44:73:b9: 41:c3:a8:96:14:e1:81:14:ef:c7:d6:41:ea:5f:4b:f2:ce:21: 8c:c1:b4:97:4f:ff:1d:46:1e:40:f7:ba:35:02:c6:88:9a:cf: 50:50:b5:5b:0f:fc:76:63:03:c8:37:98:f2:6c:f1:cc:66:ee: bd:d0:2a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNE02Lk2zmNM/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk MjI1ZGU4NWUtOWZhNC00NDNkLWExNjctMjc0M2VmNzcxZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgf/5SKoJ/mcJvV9jj2EZA00e92sNXvNsJGa HhUU9f9+a9FGBpx3orFos+iQR4vqx6dmzztZxxsoEsYGXibWogrjuiE4aPOZpezd BKWIJDchl8zQZHWQYKFRXfxgFDHvE2VZlA3ob+Yk2y5f+5HinpQwNTLAnlqqowfD ZlbOXgvAKQF1Egve01LegN/5cJlzQOxIKlc4nbv1M0dnYLRYPod1HQSYYnxuXmeU vPnX3JyOAoaWNdoU/niOPAGdk4teAU0LLWp455/ZCO2wwSkUprd0imNgzjY1A3z5 m/brDE1yvxZAd5P9B5LcdFlwESMNdRkLJFofqJtOyoXhCJN1VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjEuKm3j37LSz7vZz9JTQysYzVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjhiYWFjZGEtNmE2OC0z YzhmLWIzOTMtZDc1YmUxNDU2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiOQc4w4eDfpyxUIhff20cTCtP5LP6y/ZwVeVqsmmN6qW3tx7R/bGJG EJVE0hkhILxpQHxsHKQ65OKM98z6xwBf68SAdPx7M5nbNuf8pavg0tc6/GUNfwV0 EFKxgDteOJKW0hSKSZuuaZZ0uM+UP1enhMjQkE2VBBg/EPfj3SUCqr8pK7BbzttM q9qyvUDlWTOrN7ncvg9x3sQV7+N02wRYq9fL/TTNnMHiDrSjxgOI8rzLCjkW0DZz H5djFAszHSBLuURzuUHDqJYU4YEU78fWQepfS/LOIYzBtJdP/x1GHkD3ujUCxoia z1BQtVsP/HZjA8g3mPJs8cxm7r3QKmU= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:11 2026 by rpki-client