$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa File: 61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa (raw, json) Hash identifier: i86zrm0vsO5wGh8p8KBR7+KxdkwgXzDdkAX7atbQJwU= Subject key identifier: B9:03:DB:6E:08:83:9F:C7:93:06:0F:45:BF:B1:10:A1:2F:FF:E5:EA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D8C2AA20747721DD0250A9180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.111.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a2:07:47:72:1d:d0:25:0a:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=1572d74f-9767-4d63-81ea-e4c2176ddca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:a2:7d:83:81:cb:b8:77:46:70:37:b6:5e: 6a:f5:c6:f7:21:34:bf:b3:45:6f:f9:e1:5d:cd:3f: 0b:90:f6:6f:eb:d0:6c:0e:4a:83:90:74:52:79:5c: 30:ef:05:f5:c4:06:2c:af:cd:f2:6a:c7:51:01:98: c1:72:63:2f:1a:53:fe:a1:ef:6b:51:3c:11:7b:c4: 5a:9d:51:83:71:82:bf:b2:d5:f3:ed:03:51:e9:2e: 03:82:6f:a1:6d:8d:18:36:0f:2c:09:77:fa:bb:4b: 5a:fe:ec:07:87:f0:29:b0:7d:13:5d:d7:b1:02:61: ff:49:92:f5:ad:1a:73:62:4e:fb:69:55:3b:68:d0: 1d:09:1f:3a:4b:73:a5:73:93:b6:f2:23:e2:9e:86: 47:df:bd:54:16:82:85:d8:ee:92:4e:7c:c9:4f:76: 9c:8f:de:78:13:ec:9d:4a:7b:98:37:e8:7a:e7:69: 99:83:7d:b6:2d:db:5a:ac:9e:6b:e3:90:1c:a1:e4: da:40:ec:ec:b3:91:77:b7:57:c0:73:53:65:f2:d5: 09:7e:00:21:f9:18:a9:e8:c7:9a:c3:7a:1c:5a:14: 2e:69:9d:00:c5:ea:4b:b2:96:6f:50:f3:63:ec:63: 0e:d2:99:91:52:5f:c3:95:e2:30:99:77:ec:30:ea: dd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:03:DB:6E:08:83:9F:C7:93:06:0F:45:BF:B1:10:A1:2F:FF:E5:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:33:c7:fc:5b:a2:ef:61:97:c0:bc:b9:ca:da:4c:74:01:1e: 43:75:1e:0e:d5:ed:cc:ca:b5:36:be:f9:ce:6f:f8:c0:89:83: 98:99:fd:ca:cf:83:76:d7:a7:ce:b3:b4:b8:45:8f:7f:00:f8: a4:68:3b:47:5e:6f:e0:5e:35:9a:84:bb:2b:dc:2c:16:08:2b: 47:e3:39:95:23:d8:7f:70:5c:73:71:a6:44:bb:1c:7d:3a:5d: eb:a9:9f:19:64:7b:43:1c:83:e9:89:10:f9:48:79:5b:0c:b5: d4:69:fe:5f:43:4c:29:05:b5:9e:d0:68:2f:45:9b:a7:0b:64: f1:fb:58:4e:1f:37:84:2b:1f:61:c7:c0:ac:7b:bf:e8:fd:87: 43:97:c5:ce:b4:56:94:60:a6:80:07:9d:19:5e:42:33:46:53: 3a:5f:1f:98:ff:96:8e:b7:f7:cf:7b:c7:b1:55:d1:ca:57:7c: 14:bc:2d:ae:20:1c:35:de:af:4a:ac:18:6b:b2:3f:31:91:10: 36:71:0c:78:ec:1e:97:ef:58:04:71:23:fe:f7:d5:56:8f:f0: 3b:5e:17:54:b6:a7:55:4c:18:5a:63:3d:f1:aa:a5:13:92:92: 60:27:55:af:04:c2:cc:9a:f2:b8:03:e1:e1:08:88:24:35:cc: e9:5a:36:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqIHR3Id0CUKkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MTU3MmQ3NGYtOTc2Ny00ZDYzLTgxZWEtZTRjMjE3NmRkY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkziifYOBy7h3RnA3tl5q9cb3ITS/s0Vv+eFd zT8LkPZv69BsDkqDkHRSeVww7wX1xAYsr83yasdRAZjBcmMvGlP+oe9rUTwRe8Ra nVGDcYK/stXz7QNR6S4Dgm+hbY0YNg8sCXf6u0ta/uwHh/ApsH0TXdexAmH/SZL1 rRpzYk77aVU7aNAdCR86S3Olc5O28iPinoZH371UFoKF2O6STnzJT3acj954E+yd SnuYN+h652mZg322LdtarJ5r45AcoeTaQOzss5F3t1fAc1Nl8tUJfgAh+Rip6Mea w3ocWhQuaZ0AxepLspZvUPNj7GMO0pmRUl/DleIwmXfsMOrdzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkD224Ig5/HkwYPRb+xEKEv/+XqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjFmOTk4MTYtMGY3MS0z YTIwLWIwYzItYzcxZWZiYzY5YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgzx/xbou9hl8C8ucraTHQBHkN1Hg7V7czKtTa++c5v+MCJg5iZ/crP g3bXp86ztLhFj38A+KRoO0deb+BeNZqEuyvcLBYIK0fjOZUj2H9wXHNxpkS7HH06 Xeupnxlke0Mcg+mJEPlIeVsMtdRp/l9DTCkFtZ7QaC9Fm6cLZPH7WE4fN4QrH2HH wKx7v+j9h0OXxc60VpRgpoAHnRleQjNGUzpfH5j/lo639897x7FV0cpXfBS8La4g HDXer0qsGGuyPzGREDZxDHjsHpfvWARxI/731VaP8DteF1S2p1VMGFpjPfGqpROS kmAnVa8Ewsya8rgD4eEIiCQ1zOlaNmo= -----END CERTIFICATE-----Generated at Sat Apr 18 22:26:19 2026 by rpki-client