$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa File: 4c52d1c0-771e-385b-af85-88ec944d16c2.roa (raw, json) Hash identifier: eNgz58USFk7hlQ9cc8b8G5IZkP7g8LyEOHoQmZR5EcY= Subject key identifier: FA:21:E8:A2:A9:DD:0C:31:D5:75:C8:29:25:58:CF:97:55:62:1A:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EC20C5B6FC0AC7BAE40F6AC0A Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 9009 IP address blocks: 172.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:5b:6f:c0:ac:7b:ae:40:f6:ac:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=69eafdfa-5855-4b89-a1ca-2475d81258ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:e6:4f:6d:d8:0d:6f:91:4c:8c:35:ec:04: 15:8e:3d:25:82:6c:02:d3:35:39:0a:d9:56:17:82: c3:2f:17:c5:47:04:f9:1e:73:f0:35:a2:02:a0:2b: 3f:b4:6f:6a:06:1c:e5:8c:72:ad:6a:88:57:b4:70: fd:92:77:72:96:fa:8a:bf:13:6a:10:9b:a1:80:3d: 11:99:67:79:23:b6:76:c4:7b:73:f2:77:68:21:0f: 48:fa:b4:e1:5e:5d:ad:2d:37:89:4e:69:96:3e:fd: 8d:cb:49:a7:4e:a0:c5:00:09:06:8f:88:07:6e:ca: c1:ce:bd:18:f1:9b:b0:74:e7:b5:b5:27:dd:6d:5b: 8a:70:b7:5a:89:41:4c:62:b6:0b:74:3f:a4:bf:f4: fd:68:a5:0d:9f:cd:cd:62:7e:06:b2:25:c2:48:c5: d0:ae:59:0d:b9:e2:51:46:02:1d:8b:2d:b7:db:e0: 02:5e:56:1d:96:6c:39:03:7d:1c:9d:0e:e6:dd:bf: bb:51:67:77:6a:9d:84:f3:cf:57:1d:5c:e7:3d:dd: f9:4c:42:40:d2:cf:f4:4b:27:14:be:39:73:73:1c: ea:e6:73:a3:be:61:53:9f:fb:92:9a:91:39:60:93: 4d:55:7a:3c:43:22:5c:41:42:62:d5:23:90:ed:db: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:21:E8:A2:A9:DD:0C:31:D5:75:C8:29:25:58:CF:97:55:62:1A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:59:11:1d:bf:b8:e7:e7:f3:e2:d9:be:d0:d7:69:bf:3f:29: e3:39:b3:b8:5a:33:96:d4:09:89:5d:b0:c4:48:ee:e2:25:1e: a3:17:1b:5a:71:0a:10:d9:25:a8:42:c5:dc:92:2f:d4:59:54: 8a:5e:9c:61:bc:31:53:51:96:b7:b6:84:3a:18:54:97:84:53: 85:d7:66:ff:2b:ef:d5:63:20:4b:a4:10:56:a7:04:70:c7:6f: 0f:f3:7e:ef:3b:7d:f1:73:e1:32:be:cf:3d:e1:02:0c:b2:09: 29:34:1e:f9:67:5f:fa:57:5b:05:c8:c0:ff:8a:06:f6:2c:8a: 0d:90:2b:16:70:9b:aa:7b:ed:8a:5d:03:a5:44:cc:91:52:c9: 0e:7c:f9:92:d5:e7:40:16:5d:bf:10:f5:ee:94:93:1d:d2:b5: 44:ed:58:e7:fe:05:8a:99:c6:d7:d6:1d:37:8f:c6:62:df:81: 1d:ed:db:1c:e0:d6:a8:56:83:42:ad:33:53:19:b3:11:61:58: 67:bf:29:53:f6:56:a8:f3:a5:1f:df:e4:a0:ea:8a:39:ed:32: 32:2a:77:71:ef:ad:61:a2:3d:c0:8b:ad:70:91:39:b3:fa:10: 9a:a5:d5:64:03:52:07:0e:a6:1a:90:50:19:7a:31:0f:b0:e9: 8a:5d:59:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDFtvwKx7rkD2rAowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk NjllYWZkZmEtNTg1NS00Yjg5LWExY2EtMjQ3NWQ4MTI1OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOPmT23YDW+RTIw17AQVjj0lgmwC0zU5CtlW F4LDLxfFRwT5HnPwNaICoCs/tG9qBhzljHKtaohXtHD9kndylvqKvxNqEJuhgD0R mWd5I7Z2xHtz8ndoIQ9I+rThXl2tLTeJTmmWPv2Ny0mnTqDFAAkGj4gHbsrBzr0Y 8ZuwdOe1tSfdbVuKcLdaiUFMYrYLdD+kv/T9aKUNn83NYn4GsiXCSMXQrlkNueJR RgIdiy232+ACXlYdlmw5A30cnQ7m3b+7UWd3ap2E889XHVznPd35TEJA0s/0SycU vjlzcxzq5nOjvmFTn/uSmpE5YJNNVXo8QyJcQUJi1SOQ7dswDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoh6KKp3Qwx1XXIKSVYz5dVYhrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGM1MmQxYzAtNzcxZS0z ODViLWFmODUtODhlYzk0NGQxNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRZER2/uOfn8+LZvtDXab8/KeM5s7haM5bUCYldsMRI7uIlHqMXG1px ChDZJahCxdySL9RZVIpenGG8MVNRlre2hDoYVJeEU4XXZv8r79VjIEukEFanBHDH bw/zfu87ffFz4TK+zz3hAgyyCSk0HvlnX/pXWwXIwP+KBvYsig2QKxZwm6p77Ypd A6VEzJFSyQ58+ZLV50AWXb8Q9e6Ukx3StUTtWOf+BYqZxtfWHTePxmLfgR3t2xzg 1qhWg0KtM1MZsxFhWGe/KVP2VqjzpR/f5KDqijntMjIqd3HvrWGiPcCLrXCRObP6 EJql1WQDUgcOphqQUBl6MQ+w6YpdWQQ= -----END CERTIFICATE-----Generated at Fri Sep 4 21:15:15 2026 by rpki-client