$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json) Hash identifier: qduyeQtQaeuFIHhBpfVSsGi9T98Iae3FvCwlbkPg+vY= Subject key identifier: C8:E2:74:03:15:FF:4C:47:4D:19:8D:82:B5:85:FE:02:98:D2:42:38 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D8C2A9FDA0040C35644282E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.111.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9f:da:00:40:c3:56:44:28:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=bde99da0-0a87-40f8-83ea-1090149b04d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d0:20:6d:f8:ec:81:42:28:4e:e3:58:a8:22: 9d:cc:b9:d0:d2:16:0c:4e:12:09:49:6e:35:0d:ea: c6:26:d8:a8:9d:a8:ce:84:f7:4b:bc:1e:bd:36:8a: e0:67:f2:9f:c6:ad:05:32:7a:30:70:52:45:01:e7: 3f:9d:22:ea:e2:bd:8a:78:d5:ca:58:62:60:0d:9e: 10:b4:56:eb:ff:75:29:71:b5:f5:a7:a0:2f:16:7b: a1:35:fe:6a:23:70:69:07:b6:4f:60:c5:11:d3:b6: 2d:dd:6f:f1:5c:a3:4a:f4:00:60:4d:d4:1a:fc:58: 0e:26:4a:8d:e8:5c:dc:f4:ce:42:11:94:65:fc:07: a5:56:59:1a:37:ae:73:79:86:cf:50:26:f7:8b:d0: ee:01:62:89:6f:a8:1f:4f:84:0a:b4:bc:f7:60:04: 59:b3:b9:a8:46:80:a4:57:2b:6e:d3:16:01:be:65: 96:f1:9e:61:10:4b:6b:41:83:23:1c:85:52:03:dd: 93:ab:2c:ab:bc:d6:a6:93:c4:ce:8c:69:e3:07:29: b0:36:72:f7:37:e5:eb:a5:f7:eb:04:0f:f9:7e:49: 7f:bc:e4:4a:47:b4:37:2e:d2:fc:4a:3a:b6:54:cb: cc:a7:0e:c1:8b:7a:6d:1b:48:3d:73:3a:fb:9a:c8: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E2:74:03:15:FF:4C:47:4D:19:8D:82:B5:85:FE:02:98:D2:42:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ce:cd:15:96:88:54:a7:90:ca:59:5d:54:87:30:18:b0:da: a2:bc:99:25:53:f4:6a:63:13:ec:e5:ea:c1:5d:60:7f:39:d7: 89:13:8b:c2:1e:ea:48:74:93:ad:d9:86:9b:50:43:d5:97:70: 97:2d:d3:b9:01:b2:85:55:58:9e:16:42:04:a9:12:d5:98:3e: 62:6f:5a:cb:3d:84:b4:cd:ac:d0:e8:19:e0:43:e1:9c:47:73: e0:43:c2:fd:2e:4a:af:08:fb:de:b5:92:87:6e:dd:a4:10:4c: 58:a5:1e:8a:87:e8:25:c0:66:d7:f8:a1:3b:8f:0a:59:b3:cd: b0:bb:75:0e:c1:ea:66:4e:26:1a:e9:d1:94:48:72:c6:21:9e: 1e:f5:35:41:37:c4:09:0e:60:8f:f9:cf:25:2d:c9:7f:a8:64: 67:8c:18:ea:88:3b:1e:a8:95:85:e0:d2:59:77:0b:bd:99:c6: fb:9d:e8:16:1b:be:8c:64:c5:af:73:52:d8:b3:a7:5b:03:d3: a3:0a:3b:48:9e:91:29:1c:8e:ad:33:38:17:83:0f:8b:05:6f: 92:5a:af:16:64:21:f7:1b:e4:0f:52:9f:58:fd:98:d0:e6:5c: 0c:d1:09:f0:8f:70:92:cb:1a:8f:30:29:b2:61:34:e9:5f:ee: b9:dc:c3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKp/aAEDDVkQoLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk YmRlOTlkYTAtMGE4Ny00MGY4LTgzZWEtMTA5MDE0OWIwNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdAgbfjsgUIoTuNYqCKdzLnQ0hYMThIJSW41 DerGJtionajOhPdLvB69NorgZ/Kfxq0FMnowcFJFAec/nSLq4r2KeNXKWGJgDZ4Q tFbr/3UpcbX1p6AvFnuhNf5qI3BpB7ZPYMUR07Yt3W/xXKNK9ABgTdQa/FgOJkqN 6Fzc9M5CEZRl/AelVlkaN65zeYbPUCb3i9DuAWKJb6gfT4QKtLz3YARZs7moRoCk Vytu0xYBvmWW8Z5hEEtrQYMjHIVSA92TqyyrvNamk8TOjGnjBymwNnL3N+Xrpffr BA/5fkl/vORKR7Q3LtL8Sjq2VMvMpw7Bi3ptG0g9czr7mshhRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjidAMV/0xHTRmNgrWF/gKY0kI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzNhMGZmMzItYmFiZS0z YmRmLTg0NDEtYmIxZTgxYjBhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3OzRWWiFSnkMpZXVSHMBiw2qK8mSVT9GpjE+zl6sFdYH8514kTi8Ie 6kh0k63ZhptQQ9WXcJct07kBsoVVWJ4WQgSpEtWYPmJvWss9hLTNrNDoGeBD4ZxH c+BDwv0uSq8I+961kodu3aQQTFilHoqH6CXAZtf4oTuPClmzzbC7dQ7B6mZOJhrp 0ZRIcsYhnh71NUE3xAkOYI/5zyUtyX+oZGeMGOqIOx6olYXg0ll3C72Zxvud6BYb voxkxa9zUtizp1sD06MKO0iekSkcjq0zOBeDD4sFb5JarxZkIfcb5A9Sn1j9mNDm XAzRCfCPcJLLGo8wKbJhNOlf7rncwzI= -----END CERTIFICATE-----Generated at Sat Apr 18 23:46:02 2026 by rpki-client