$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa File: 6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa (raw, json) Hash identifier: Gg4C/efYGPNZKvkUZKJK/5qHWA9tYrLo+nvO4VIw64w= Subject key identifier: 0B:43:22:96:3C:FF:8C:8C:A9:6A:2C:AB:7E:6D:34:D8:18:A8:E3:A1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E6F3ECD6754842225DA57C020 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 9009 IP address blocks: 172.111.147.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:cd:67:54:84:22:25:da:57:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=87e9678a-901d-4d6a-9c19-59a754cde3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:14:28:07:08:6e:c3:77:8a:aa:ee:97:5a: 7e:99:27:e7:e2:38:af:0b:58:46:d7:c3:43:a8:28: f5:70:79:19:35:f0:43:8c:f9:e0:a2:a6:8b:f8:5e: b1:e6:01:fc:63:86:e7:a7:19:bf:eb:a0:0b:d5:36: 97:fa:8e:c7:c4:ce:c6:2b:99:af:dc:f7:54:5e:64: 65:eb:a8:d5:df:4e:89:9b:25:a9:02:ea:3b:a8:a9: 85:fa:39:b6:35:16:3c:a6:dc:84:dc:00:96:54:a9: b7:f2:cf:75:20:f7:4f:d2:59:93:ec:f5:eb:6f:ac: 45:94:b0:f4:7e:21:10:7d:f3:f0:9f:5b:20:a2:bd: cf:1e:83:a3:5e:ed:c3:0e:63:05:7a:81:fd:8e:4f: 4f:e0:19:63:98:17:f8:0e:07:16:64:db:0d:6c:24: fe:93:b0:86:31:21:24:03:2a:2f:84:6d:e4:09:75: f0:04:17:3e:ac:4d:ad:f9:8d:9c:ed:19:85:ea:8d: 08:fc:2a:04:88:0b:89:7e:fb:f7:83:f1:f4:f1:8e: d1:f7:b5:f1:72:84:39:aa:44:5b:b9:7c:ee:76:7a: dc:2c:7e:23:39:43:28:44:a5:dd:9d:57:3a:a7:43: b2:57:1c:34:82:5a:55:62:15:17:3c:c6:06:7e:2b: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:43:22:96:3C:FF:8C:8C:A9:6A:2C:AB:7E:6D:34:D8:18:A8:E3:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3b:28:c9:0d:eb:a3:0f:34:68:b4:2a:ab:fa:02:2a:f1:ec: 28:bb:c6:4c:b4:be:c9:95:8a:5c:34:f3:51:73:0e:dd:81:df: ec:14:c8:2d:07:40:83:47:e9:e3:0a:9d:4b:f3:e9:56:c1:e0: 56:07:b4:f3:86:d9:94:6b:74:28:d9:b3:9a:24:e7:0d:02:b5: 29:13:cc:07:78:88:35:0a:06:03:8f:be:ea:53:dc:ee:c6:d9: 0d:c0:02:0a:2d:66:1c:a9:44:61:74:ef:c2:2e:82:42:cc:5c: 96:6e:7d:71:bf:4f:26:a3:a3:ad:53:83:c3:ba:d8:f0:ea:03: c9:56:bc:e8:f8:6e:a5:bd:8a:7e:37:c9:f9:c4:49:44:84:57: 1e:23:d3:ee:29:c1:8c:96:03:0b:81:34:a4:41:20:a0:14:27: 5f:33:58:57:aa:a1:79:fb:c0:c0:2e:49:10:a0:b5:fe:4e:c6: 84:8e:bf:e2:10:1a:ef:46:56:6f:64:e6:6c:9b:9f:69:24:ae: 5c:9b:3c:03:9d:68:1c:61:f7:9f:e3:16:17:b4:80:53:e8:eb: 4c:27:d8:c6:4b:ff:6c:ba:23:6a:54:3c:6a:65:dd:46:84:ec: 1a:bf:3f:bf:78:a5:81:d6:3e:0f:f4:13:de:aa:45:fb:23:ae: d6:ce:fa:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5vPs1nVIQiJdpXwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ODdlOTY3OGEtOTAxZC00ZDZhLTljMTktNTlhNzU0Y2RlM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI8UKAcIbsN3iqrul1p+mSfn4jivC1hG18ND qCj1cHkZNfBDjPngoqaL+F6x5gH8Y4bnpxm/66AL1TaX+o7HxM7GK5mv3PdUXmRl 66jV306JmyWpAuo7qKmF+jm2NRY8ptyE3ACWVKm38s91IPdP0lmT7PXrb6xFlLD0 fiEQffPwn1sgor3PHoOjXu3DDmMFeoH9jk9P4BljmBf4DgcWZNsNbCT+k7CGMSEk AyovhG3kCXXwBBc+rE2t+Y2c7RmF6o0I/CoEiAuJfvv3g/H08Y7R97XxcoQ5qkRb uXzudnrcLH4jOUMoRKXdnVc6p0OyVxw0glpVYhUXPMYGfiuJkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAtDIpY8/4yMqWosq35tNNgYqOOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjQ4MTY2OWEtYmQ4OS0z ZGI5LWEzYzYtOTk2NjJmN2NmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG+TgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqOyjJDeujDzRotCqr+gIq8ewou8ZMtL7JlYpcNPNRcw7dgd/sFMgt B0CDR+njCp1L8+lWweBWB7TzhtmUa3Qo2bOaJOcNArUpE8wHeIg1CgYDj77qU9zu xtkNwAIKLWYcqURhdO/CLoJCzFyWbn1xv08mo6OtU4PDutjw6gPJVrzo+G6lvYp+ N8n5xElEhFceI9PuKcGMlgMLgTSkQSCgFCdfM1hXqqF5+8DALkkQoLX+TsaEjr/i EBrvRlZvZOZsm59pJK5cmzwDnWgcYfef4xYXtIBT6OtMJ9jGS/9suiNqVDxqZd1G hOwavz+/eKWB1j4P9BPeqkX7I67Wzvo/ -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:12 2026 by rpki-client