$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa File: 3d44ec8a-b582-344c-8805-a64b89c845f0.roa (raw, json) Hash identifier: Wc4lGD2gTbnEqCo6PGys7pbjfibZrVcGM9qkpARNu5E= Subject key identifier: 34:85:A9:D9:60:8D:70:D7:2C:21:68:CD:9D:3A:EE:8B:4F:32:95:E2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E4559EA2A7352A7C79DBB1B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 9009 IP address blocks: 172.111.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ea:2a:73:52:a7:c7:9d:bb:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=212e703a-90d7-4498-9530-9ba70be70182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:a6:63:79:35:15:4e:79:dc:46:bb:43:50: 9c:12:05:72:57:05:cb:24:91:9d:4e:cc:84:0f:a3: 2d:ad:91:22:f7:56:de:14:b2:91:60:e0:e3:dc:01: bb:20:1f:d4:b2:51:2e:0f:41:6d:34:51:82:e1:13: 78:a5:74:03:db:fa:90:49:ae:f3:07:77:c2:24:40: 85:47:87:de:ad:e5:ea:e1:d0:ab:6e:43:c3:f5:50: 4d:fa:35:9b:76:bf:3c:95:4e:cf:cc:79:32:2f:a7: 77:cc:41:46:9b:05:f7:ab:fd:81:b9:17:77:48:3d: 51:2c:ff:e8:ec:6b:c1:66:08:ad:a4:80:9b:0c:74: 25:90:25:4e:03:bd:d0:04:af:f1:e3:53:af:41:60: 22:23:95:a1:1f:bd:c7:60:1a:41:32:cb:a4:cd:47: 13:65:8e:2a:85:ab:5c:19:3e:cf:df:b3:ab:e2:c7: fd:68:9c:32:6e:78:e3:16:50:03:16:44:f2:f1:88: a5:7d:bb:07:f8:29:f0:3d:4c:ac:82:c8:33:79:79: 47:d6:3b:d5:44:1a:66:6c:8c:d5:be:ad:ed:a5:76: 30:a2:b2:70:24:56:56:00:4f:86:af:f9:98:be:19: 13:5e:79:14:bc:bf:e9:31:69:88:c5:a2:96:89:bc: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:A9:D9:60:8D:70:D7:2C:21:68:CD:9D:3A:EE:8B:4F:32:95:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:25:81:34:46:47:75:e3:3d:7a:7d:d9:fb:33:d6:6d:bb:8a: 7c:2c:d1:8d:45:82:99:73:a5:e5:96:16:25:75:81:e3:da:f3: 83:b6:f8:1e:ae:e6:f8:e7:e7:44:bc:9b:37:55:75:14:12:3f: 68:22:8d:71:49:64:a3:e6:85:8f:45:9a:a3:b4:83:d3:cd:5a: 1d:83:1b:b2:b3:f5:f1:09:a3:b5:2a:61:bf:63:64:fb:f7:8d: d1:64:d6:28:80:c2:e2:66:83:0f:13:6f:66:23:ca:0c:3b:c9: 0a:7a:d6:5f:da:5b:ca:a7:6a:5d:a5:f2:48:63:37:aa:c8:d3: 86:64:30:64:8d:af:16:f9:d3:64:7b:a3:a4:61:39:5e:2f:85: 9b:ce:19:f5:c2:5b:ae:93:f1:57:b7:a5:34:29:69:8f:9f:db: 81:d8:5e:81:73:43:88:b3:f9:1d:89:1d:49:af:a5:6b:6c:6e: 16:fe:e9:0a:c6:c2:d9:e5:43:8b:68:9a:c6:1d:9b:84:36:ab: 33:f0:9e:a5:3f:3e:87:d9:4b:e6:99:54:ca:e9:d0:6b:ea:c8: dc:d9:b8:51:5c:ab:b5:0b:4b:ea:fd:ed:31:50:aa:d5:d3:6e: 12:95:80:e2:47:99:cf:4e:5a:e1:94:2f:6a:73:dc:0f:bc:89: 18:f9:48:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWeoqc1Knx527G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk MjEyZTcwM2EtOTBkNy00NDk4LTk1MzAtOWJhNzBiZTcwMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMqmY3k1FU553Ea7Q1CcEgVyVwXLJJGdTsyE D6MtrZEi91beFLKRYODj3AG7IB/UslEuD0FtNFGC4RN4pXQD2/qQSa7zB3fCJECF R4fereXq4dCrbkPD9VBN+jWbdr88lU7PzHkyL6d3zEFGmwX3q/2BuRd3SD1RLP/o 7GvBZgitpICbDHQlkCVOA73QBK/x41OvQWAiI5WhH73HYBpBMsukzUcTZY4qhatc GT7P37Or4sf9aJwybnjjFlADFkTy8YilfbsH+CnwPUysgsgzeXlH1jvVRBpmbIzV vq3tpXYworJwJFZWAE+Gr/mYvhkTXnkUvL/pMWmIxaKWibyn1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSFqdlgjXDXLCFozZ067otPMpXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2Q0NGVjOGEtYjU4Mi0z NDRjLTg4MDUtYTY0Yjg5Yzg0NWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwlgTRGR3XjPXp92fsz1m27inws0Y1FgplzpeWWFiV1gePa84O2+B6u 5vjn50S8mzdVdRQSP2gijXFJZKPmhY9FmqO0g9PNWh2DG7Kz9fEJo7UqYb9jZPv3 jdFk1iiAwuJmgw8Tb2Yjygw7yQp61l/aW8qnal2l8khjN6rI04ZkMGSNrxb502R7 o6RhOV4vhZvOGfXCW66T8Ve3pTQpaY+f24HYXoFzQ4iz+R2JHUmvpWtsbhb+6QrG wtnlQ4tomsYdm4Q2qzPwnqU/PofZS+aZVMrp0GvqyNzZuFFcq7ULS+r97TFQqtXT bhKVgOJHmc9OWuGUL2pz3A+8iRj5SDk= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:44 2026 by rpki-client