$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa File: 4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa (raw, json) Hash identifier: VkI5q3ujNMkIYdmLZ4UUD2u9RgRoxSmXfG267CrUSc4= Subject key identifier: 5F:45:3E:3D:D4:01:09:3F:FC:D7:7E:29:05:D8:22:9B:D5:FD:3C:AC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E6F3EC18B933D24DA7E3C4340 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 9009 IP address blocks: 172.111.211.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:c1:8b:93:3d:24:da:7e:3c:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=da024c3a-6e6b-49fc-93f9-9a69f65b5de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:e5:8d:26:22:ac:32:dd:d6:cc:01:ff:35: 77:f5:e1:fd:17:f7:11:3d:3f:73:8a:d5:1a:c7:62: 53:31:c6:d3:95:85:da:b6:61:c9:d0:e6:18:79:5e: f1:db:7f:db:10:a4:55:7b:38:b1:8a:60:49:b1:a8: 96:83:fa:1b:43:50:52:50:12:25:20:68:f7:11:42: 23:1e:e2:74:e5:b6:05:ad:ed:df:67:fd:46:bf:03: 0e:20:91:f7:33:b9:e5:1a:64:22:bb:95:9f:78:f2: 26:05:3b:2e:25:ad:5d:e7:15:ab:b7:07:98:59:4e: 68:e6:71:09:3d:f0:c4:09:7a:d8:35:c1:67:2f:d7: ce:1a:44:24:98:85:ca:1d:f3:11:00:7f:50:52:ec: 4f:da:31:ac:6c:6d:fd:bc:7e:12:45:66:5f:2d:a4: 43:16:d5:af:f5:6b:4a:9c:b4:68:14:e2:9d:5d:04: ec:78:9b:e5:66:e1:42:36:e4:04:67:fb:71:83:31: eb:b1:02:4c:2c:5a:4c:da:96:ee:ac:3e:13:9c:7c: 43:90:81:b0:72:0c:e2:30:a2:95:9c:5c:13:81:48: ae:0e:bf:8a:98:c1:4d:be:8b:bd:52:66:12:94:fc: c3:a1:5c:5a:dc:36:86:9c:fa:c4:fb:8a:36:08:54: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:45:3E:3D:D4:01:09:3F:FC:D7:7E:29:05:D8:22:9B:D5:FD:3C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7c:5e:7a:19:24:d2:e6:65:a1:8b:02:b9:4a:e0:d5:f8:83: 41:ef:0b:f3:07:e2:00:90:b1:39:0a:5d:4b:33:4c:0a:43:73: fb:34:3d:25:db:21:b5:fa:e9:63:a4:42:d5:76:36:80:ef:07: 39:80:c8:52:da:d8:0c:9a:99:24:3e:a2:3a:53:c5:8d:f6:fb: 9a:67:bb:0d:c2:38:cb:a5:35:41:b0:34:47:38:e9:1d:b9:56: 0c:65:7b:d2:61:2d:04:f8:cc:f9:05:e0:33:90:c3:0c:b1:16: 2d:1b:2c:74:28:df:ce:33:e3:40:b4:a3:34:b5:11:85:65:72: e7:c2:59:9a:0c:fd:e5:9a:25:3f:b9:68:81:f5:cd:65:cb:c8: 9b:f4:bc:ce:fd:4c:d5:03:95:29:56:db:2e:1a:c6:a8:26:72: c0:1b:79:04:cb:61:bf:3c:c4:90:a7:3e:26:86:77:2f:90:62: a4:0c:d5:8e:fb:69:4e:75:10:f7:41:85:dd:ea:3b:c8:a7:f5: a1:89:a9:b5:5c:45:95:4f:1d:2f:5b:6b:40:f8:b7:41:b3:ec: 66:84:ca:a7:a8:4d:b9:3a:eb:b0:a5:f4:e5:9c:95:08:63:a8: c2:05:35:7a:8c:d6:a8:ed:83:da:81:58:bf:ec:16:e2:52:bd: 17:3e:b0:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5vPsGLkz0k2n48Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZGEwMjRjM2EtNmU2Yi00OWZjLTkzZjktOWE2OWY2NWI1ZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+LljSYirDLd1swB/zV39eH9F/cRPT9zitUa x2JTMcbTlYXatmHJ0OYYeV7x23/bEKRVeziximBJsaiWg/obQ1BSUBIlIGj3EUIj HuJ05bYFre3fZ/1GvwMOIJH3M7nlGmQiu5WfePImBTsuJa1d5xWrtweYWU5o5nEJ PfDECXrYNcFnL9fOGkQkmIXKHfMRAH9QUuxP2jGsbG39vH4SRWZfLaRDFtWv9WtK nLRoFOKdXQTseJvlZuFCNuQEZ/txgzHrsQJMLFpM2pburD4TnHxDkIGwcgziMKKV nFwTgUiuDr+KmMFNvou9UmYSlPzDoVxa3DaGnPrE+4o2CFT8zQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF9FPj3UAQk//Nd+KQXYIpvV/TysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGJiMzdhNmMtODYwZC0z YjBlLTg0YzYtNTE4NDdkMmNjMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG/TADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAfF56GSTS5mWhiwK5SuDV+INB7wvzB+IAkLE5Cl1LM0wKQ3P7ND0l 2yG1+uljpELVdjaA7wc5gMhS2tgMmpkkPqI6U8WN9vuaZ7sNwjjLpTVBsDRHOOkd uVYMZXvSYS0E+Mz5BeAzkMMMsRYtGyx0KN/OM+NAtKM0tRGFZXLnwlmaDP3lmiU/ uWiB9c1ly8ib9LzO/UzVA5UpVtsuGsaoJnLAG3kEy2G/PMSQpz4mhncvkGKkDNWO +2lOdRD3QYXd6jvIp/Whiam1XEWVTx0vW2tA+LdBs+xmhMqnqE25OuuwpfTlnJUI Y6jCBTV6jNao7YPagVi/7BbiUr0XPrDx -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:41 2026 by rpki-client