$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7355f8e2-7ff6-32db-9e1f-e20cb4a6f754.roa File: 7355f8e2-7ff6-32db-9e1f-e20cb4a6f754.roa (raw, json) Hash identifier: Yce1lH8mG9AWK0YMTiDMhL2tZgujzrvWgN41qGlguG4= Subject key identifier: 0A:69:99:E2:98:DB:7A:12:0A:E1:DB:44:A2:CC:DE:15:89:8E:1A:56 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E428F2A10EDCC6A51E1669300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7355f8e2-7ff6-32db-9e1f-e20cb4a6f754.roa Signing time: Mon 22 Jun 2026 21:00:12 +0000 ROA not before: Mon 22 Jun 2026 21:00:12 +0000 ROA not after: Sun 20 Sep 2026 21:00:12 +0000 asID: 132372 IP address blocks: 172.111.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:8f:2a:10:ed:cc:6a:51:e1:66:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 22 21:00:12 2026 GMT Not After : Sep 20 21:00:12 2026 GMT Subject: CN=edd679e0-47c1-4db5-b581-2baccee431b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:89:6c:62:d5:71:2a:4e:7f:da:e5:fb:ea: 91:22:01:7a:a3:e4:51:b3:c2:16:34:4f:8b:f4:34: b1:86:b1:5d:bd:df:ff:e7:9b:5c:68:0d:b9:9b:87: 43:37:e6:24:b0:f9:d3:a1:4f:27:8e:8a:e9:c4:a9: 42:ca:49:27:45:3c:7d:23:b9:35:2a:ff:d2:c5:2d: a0:2b:7b:d0:f7:61:bf:8b:2e:cd:54:91:f6:3f:1b: 28:09:48:3b:60:bd:ee:b5:f2:0e:ec:fa:d1:0a:eb: 63:ee:a9:8a:4b:7e:49:cd:fa:0e:17:20:15:bc:e1: 1b:ad:36:4c:da:39:3d:71:75:b2:62:bd:8b:ad:c5: c6:72:06:85:0a:86:e8:8e:d0:d9:e1:79:b2:39:ff: ea:91:27:51:a9:03:e4:29:74:7a:38:84:08:03:7f: f8:a9:c2:08:6f:20:0f:d6:d4:75:f1:a8:e5:3b:ef: fc:ca:82:89:32:39:1d:f7:42:fa:16:61:9c:5c:8b: b1:6f:11:96:fd:06:83:e1:84:3b:92:bf:d1:a9:9c: d2:6a:7e:52:9d:31:b7:42:79:33:f4:f6:d1:a1:a7: 8c:8a:fd:a8:41:97:58:99:78:f2:66:5c:f4:84:ed: 41:c9:a6:ea:a0:66:58:33:93:2d:6d:cb:75:80:41: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:69:99:E2:98:DB:7A:12:0A:E1:DB:44:A2:CC:DE:15:89:8E:1A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7355f8e2-7ff6-32db-9e1f-e20cb4a6f754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:be:37:25:e8:6e:2e:2d:11:be:b8:c7:71:41:04:14:b9:ad: db:6a:8d:e7:eb:01:58:84:69:4e:c7:78:03:1c:7e:16:03:e2: 36:fe:8a:a8:2d:d9:60:b5:83:02:15:61:9d:43:ad:2e:ce:a8: 71:f2:55:8d:cd:14:3b:4a:82:fe:4c:53:83:b6:fb:b0:c3:c4: e8:01:eb:e8:28:8a:29:bb:f2:3d:3a:64:c1:e5:36:2a:fb:b9: b0:91:f7:42:9a:05:f2:0c:d6:37:7c:65:5d:cb:b8:21:d8:9b: a5:e8:71:3b:57:85:ae:9e:1a:ad:c7:77:82:5d:3f:86:99:14: 83:6b:22:1f:7f:d9:01:d9:45:c3:1d:cf:87:90:44:6a:de:d1: e0:d8:8c:d2:08:47:73:04:29:db:d1:d9:e2:2a:f7:61:51:9e: a1:49:05:f3:c0:6f:99:89:f9:94:91:cf:b6:14:ae:e7:b2:ac: 9c:e4:cc:fb:c5:76:a7:ea:9a:e1:85:12:ff:56:6c:13:03:e3: c5:2a:64:0c:c9:5d:b0:c0:3d:3e:d3:6d:d8:33:09:1d:37:29: 60:e1:73:45:96:1c:eb:e7:41:42:c2:94:99:78:06:2a:da:5f: c6:63:4d:83:0a:d5:c5:34:49:87:18:21:37:e5:66:46:f3:6c: 14:d5:ec:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5CjyoQ7cxqUeFmkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk ZWRkNjc5ZTAtNDdjMS00ZGI1LWI1ODEtMmJhY2NlZTQzMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9yJbGLVcSpOf9rl++qRIgF6o+RRs8IWNE+L 9DSxhrFdvd//55tcaA25m4dDN+YksPnToU8njorpxKlCykknRTx9I7k1Kv/SxS2g K3vQ92G/iy7NVJH2PxsoCUg7YL3utfIO7PrRCutj7qmKS35JzfoOFyAVvOEbrTZM 2jk9cXWyYr2LrcXGcgaFCobojtDZ4XmyOf/qkSdRqQPkKXR6OIQIA3/4qcIIbyAP 1tR18ajlO+/8yoKJMjkd90L6FmGcXIuxbxGW/QaD4YQ7kr/RqZzSan5SnTG3Qnkz 9PbRoaeMiv2oQZdYmXjyZlz0hO1ByabqoGZYM5Mtbct1gEHowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAppmeKY23oSCuHbRKLM3hWJjhpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzM1NWY4ZTItN2ZmNi0z MmRiLTllMWYtZTIwY2I0YTZmNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy+NyXobi4tEb64x3FBBBS5rdtqjefrAViEaU7HeAMcfhYD4jb+iqgt 2WC1gwIVYZ1DrS7OqHHyVY3NFDtKgv5MU4O2+7DDxOgB6+goiim78j06ZMHlNir7 ubCR90KaBfIM1jd8ZV3LuCHYm6XocTtXha6eGq3Hd4JdP4aZFINrIh9/2QHZRcMd z4eQRGre0eDYjNIIR3MEKdvR2eIq92FRnqFJBfPAb5mJ+ZSRz7YUrueyrJzkzPvF dqfqmuGFEv9WbBMD48UqZAzJXbDAPT7TbdgzCR03KWDhc0WWHOvnQULClJl4Bira X8ZjTYMK1cU0SYcYITflZkbzbBTV7Pw= -----END CERTIFICATE-----Generated at Tue Jul 21 14:55:49 2026 by rpki-client