$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64748225-4a11-38a2-adb8-83247f1d8d4e.roa File: 64748225-4a11-38a2-adb8-83247f1d8d4e.roa (raw, json) Hash identifier: oBkD4L287Coy+zb2jOjP1/ubtV5ZtNyFPDTleOhY6jE= Subject key identifier: 7D:71:51:29:68:2E:3F:46:D8:14:F6:CD:3B:60:A8:89:F4:B4:87:E7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E067846FAF599C48D410B7540 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64748225-4a11-38a2-adb8-83247f1d8d4e.roa Signing time: Mon 01 Jun 2026 08:25:42 +0000 ROA not before: Mon 01 Jun 2026 08:25:42 +0000 ROA not after: Sun 30 Aug 2026 08:25:42 +0000 asID: 154383 IP address blocks: 172.111.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:06:78:46:fa:f5:99:c4:8d:41:0b:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 1 08:25:42 2026 GMT Not After : Aug 30 08:25:42 2026 GMT Subject: CN=bbe15d76-8b3f-4978-902e-50ff8d096d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:4c:76:59:65:5d:f2:9b:61:92:d3:ff:27: cb:ea:0f:8e:5e:6b:e9:11:56:dd:1e:77:e1:40:c6: 57:7e:d3:69:0f:7b:c8:4e:e8:7d:0b:b0:33:0c:d3: b5:40:a3:52:91:03:59:42:f2:01:03:f2:16:0e:95: 1b:c2:11:d2:12:0d:16:f9:ba:72:74:b0:3f:a8:6c: 96:09:49:e8:53:bd:22:8f:ba:86:d7:cc:35:50:ae: 85:63:1f:e0:2b:63:46:54:0c:7c:d5:c3:02:34:bd: 42:13:4c:36:8e:6c:89:ec:3b:62:ed:21:28:99:0f: 5c:1f:95:2d:38:d4:35:56:7f:0a:5c:0e:bb:41:95: 3d:ce:94:3f:0e:15:6c:c9:d8:7d:cc:12:df:f0:49: 12:7d:86:32:67:9e:36:c5:50:5e:28:f5:f5:cf:0e: ed:ff:a7:c8:b2:df:4a:1d:93:d8:3e:47:1a:47:f2: e2:c6:00:03:15:ae:7a:59:da:4e:29:4b:02:ff:9a: 78:64:3e:fb:8e:eb:25:af:f5:c7:0e:4d:47:32:2d: 60:b4:d8:44:44:e9:70:89:47:e0:f7:16:35:d5:b9: ec:a1:6f:04:e4:fe:b2:3e:d3:1e:19:4f:75:0a:60: 08:b9:53:e4:44:e6:bc:7b:e5:67:05:f4:61:20:f1: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:71:51:29:68:2E:3F:46:D8:14:F6:CD:3B:60:A8:89:F4:B4:87:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64748225-4a11-38a2-adb8-83247f1d8d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:bf:82:80:b1:8e:db:d2:54:f5:e0:20:78:fd:2f:64:59:ad: c9:d3:52:bd:57:07:59:b3:7a:93:2c:9c:a0:8d:50:78:f8:42: f6:b6:8b:31:d6:a6:42:51:da:54:a3:5c:99:17:d4:fe:e5:40: 28:59:aa:8c:74:ee:6e:da:d2:b8:95:77:43:a9:95:43:19:d9: a2:42:68:fe:6b:83:89:eb:cf:de:b4:cd:a3:ac:1f:66:3c:2e: 8d:f5:dc:63:88:0c:8e:5f:75:17:4b:74:ce:f7:30:39:34:b1: 40:dc:71:f5:bd:a7:70:b0:2c:6b:d4:a7:28:64:2e:10:31:05: 91:e9:95:56:f4:b6:bd:f8:fe:cf:6c:4d:97:f8:eb:e6:33:78: 41:66:27:2b:9c:f9:c7:f0:d5:1c:db:97:bd:88:94:c8:9b:18: 71:86:5d:6b:96:8d:2e:c4:a0:9d:92:4d:bb:b7:a4:22:c6:a1: dd:a8:22:f5:f3:0d:14:04:93:3a:d7:ed:e7:25:4e:da:85:5a: 51:aa:57:3c:ea:44:6b:be:72:1b:f5:c1:4f:cf:73:ed:1d:4e: 28:7d:df:1c:03:d2:46:b7:a9:dc:d0:36:aa:c6:4b:97:48:b3: fc:e9:25:15:e6:8a:8b:50:eb:0a:05:a7:77:a8:4f:6d:ab:89: 9d:a7:9d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4GeEb69ZnEjUELdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMTA4MjU0MloXDTI2MDgzMDA4MjU0MlowLzEtMCsGA1UEAxMk YmJlMTVkNzYtOGIzZi00OTc4LTkwMmUtNTBmZjhkMDk2ZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFRMdlllXfKbYZLT/yfL6g+OXmvpEVbdHnfh QMZXftNpD3vITuh9C7AzDNO1QKNSkQNZQvIBA/IWDpUbwhHSEg0W+bpydLA/qGyW CUnoU70ij7qG18w1UK6FYx/gK2NGVAx81cMCNL1CE0w2jmyJ7Dti7SEomQ9cH5Ut ONQ1Vn8KXA67QZU9zpQ/DhVsydh9zBLf8EkSfYYyZ542xVBeKPX1zw7t/6fIst9K HZPYPkcaR/LixgADFa56WdpOKUsC/5p4ZD77juslr/XHDk1HMi1gtNhEROlwiUfg 9xY11bnsoW8E5P6yPtMeGU91CmAIuVPkROa8e+VnBfRhIPHnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1xUSloLj9G2BT2zTtgqIn0tIfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjQ3NDgyMjUtNGExMS0z OGEyLWFkYjgtODMyNDdmMWQ4ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK/goCxjtvSVPXgIHj9L2RZrcnTUr1XB1mzepMsnKCNUHj4Qva2izHW pkJR2lSjXJkX1P7lQChZqox07m7a0riVd0OplUMZ2aJCaP5rg4nrz960zaOsH2Y8 Lo313GOIDI5fdRdLdM73MDk0sUDccfW9p3CwLGvUpyhkLhAxBZHplVb0tr34/s9s TZf46+YzeEFmJyuc+cfw1Rzbl72IlMibGHGGXWuWjS7EoJ2STbu3pCLGod2oIvXz DRQEkzrX7eclTtqFWlGqVzzqRGu+chv1wU/Pc+0dTih93xwD0ka3qdzQNqrGS5dI s/zpJRXmiotQ6woFp3eoT22riZ2nnWY= -----END CERTIFICATE-----Generated at Thu Jun 4 09:01:16 2026 by rpki-client