$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa File: 5938b922-fbd7-3252-8de4-f85dd5b529d0.roa (raw, json) Hash identifier: OC0jJ7SJjQGLFjw8gcmfm45xWbu2KLBOqACmRuCfe2g= Subject key identifier: CA:93:25:EA:17:0D:54:15:E5:D7:0E:3C:56:90:A1:13:BB:FE:68:D0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D8C2AA2214D464F0FD9C06880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a2:21:4d:46:4f:0f:d9:c0:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=273d9448-f4ce-4e8d-8df6-999bf1cd303b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:91:2a:28:f2:56:65:c5:d5:c8:22:97:a4: ca:8b:fa:0b:ab:ee:9b:18:5b:36:dc:95:89:21:f2: 55:ec:61:59:53:0a:59:7c:67:5d:3d:7b:83:3d:a5: d8:1d:69:91:99:cb:51:23:33:0b:66:d4:48:d3:39: bf:03:b6:2c:e7:c1:56:9c:10:d7:96:13:f4:08:18: 85:a3:60:6c:dc:26:03:ed:ee:bf:6a:56:73:b7:eb: 0d:1c:de:88:16:fe:ef:ea:9c:7a:27:b5:db:dd:21: 68:88:cf:a5:01:8c:7f:46:25:6f:70:98:75:ec:0f: 77:94:dd:6a:12:ce:5b:a2:b5:fb:35:0a:48:6f:40: d4:b1:24:e6:2a:15:98:54:b7:e3:cb:70:c1:68:a0: 42:27:24:f3:19:dd:ae:71:c4:82:45:59:24:32:01: 50:c5:e5:ba:d0:2b:ef:63:62:4d:2f:30:54:26:f0: b9:68:15:1a:cd:89:c6:5a:85:c2:a5:00:47:6a:44: 1a:84:91:98:94:b5:0f:56:ec:68:dc:64:a8:78:9a: 61:e3:a6:11:c0:70:28:70:ea:17:45:70:df:dd:3c: b4:e3:a2:c6:f5:90:0f:16:ab:97:92:30:ac:94:80: 8a:60:a3:e1:12:90:16:50:c2:e4:a1:71:4a:70:13: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:93:25:EA:17:0D:54:15:E5:D7:0E:3C:56:90:A1:13:BB:FE:68:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9b:ad:a6:1a:49:42:67:90:74:27:f5:b8:c0:41:a9:eb:79: 80:4d:02:29:b3:49:8f:69:79:6f:c1:d6:e0:ae:5d:a0:0f:3b: 75:19:93:0b:dc:da:e1:a0:fd:07:0c:fa:02:83:8d:90:a3:d3: 9b:d2:bb:b6:90:18:71:6d:22:86:0e:46:7e:5f:11:35:23:29: 17:ff:08:68:fd:bd:7f:38:19:21:e8:3a:ca:b8:cf:1c:33:ea: 24:6f:fe:db:61:81:f4:06:6e:93:bd:d6:ce:e8:38:29:a8:80: 1a:4f:48:fc:c9:b4:c7:92:92:fe:57:52:f4:4d:7f:2c:9a:2a: da:e1:30:fa:d3:ca:dd:5a:90:a6:a6:c8:9f:3b:3d:28:c0:5c: 09:d9:e1:ac:97:8e:fa:9d:51:bf:8c:fd:3f:1b:25:4e:70:18: b3:92:b0:2a:25:da:6e:36:f5:3c:9c:c9:8d:70:26:20:73:e4: 57:13:ef:a1:fa:e1:01:ea:be:31:6a:28:73:7a:2d:0c:85:bc: 8d:8f:c0:a4:13:54:f0:71:de:5c:57:68:41:43:e7:ca:36:33: 45:bc:48:16:b2:f8:01:1f:db:44:ea:10:31:48:a2:87:d9:05: b5:d0:9c:42:88:18:0d:54:bc:77:5f:a0:5f:3e:a1:44:4a:e1: 32:05:be:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqIhTUZPD9nAaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MjczZDk0NDgtZjRjZS00ZThkLThkZjYtOTk5YmYxY2QzMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMGRKijyVmXF1cgil6TKi/oLq+6bGFs23JWJ IfJV7GFZUwpZfGddPXuDPaXYHWmRmctRIzMLZtRI0zm/A7Ys58FWnBDXlhP0CBiF o2Bs3CYD7e6/alZzt+sNHN6IFv7v6px6J7Xb3SFoiM+lAYx/RiVvcJh17A93lN1q Es5borX7NQpIb0DUsSTmKhWYVLfjy3DBaKBCJyTzGd2uccSCRVkkMgFQxeW60Cvv Y2JNLzBUJvC5aBUazYnGWoXCpQBHakQahJGYlLUPVuxo3GSoeJph46YRwHAocOoX RXDf3Ty046LG9ZAPFquXkjCslICKYKPhEpAWUMLkoXFKcBMdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqTJeoXDVQV5dcOPFaQoRO7/mjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTkzOGI5MjItZmJkNy0z MjUyLThkZTQtZjg1ZGQ1YjUyOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEObraYaSUJnkHQn9bjAQanreYBNAimzSY9peW/B1uCuXaAPO3UZkwvc 2uGg/QcM+gKDjZCj05vSu7aQGHFtIoYORn5fETUjKRf/CGj9vX84GSHoOsq4zxwz 6iRv/tthgfQGbpO91s7oOCmogBpPSPzJtMeSkv5XUvRNfyyaKtrhMPrTyt1akKam yJ87PSjAXAnZ4ayXjvqdUb+M/T8bJU5wGLOSsCol2m429TycyY1wJiBz5FcT76H6 4QHqvjFqKHN6LQyFvI2PwKQTVPBx3lxXaEFD58o2M0W8SBay+AEf20TqEDFIoofZ BbXQnEKIGA1UvHdfoF8+oURK4TIFvvo= -----END CERTIFICATE-----Generated at Sat Apr 18 22:28:25 2026 by rpki-client