$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa File: 901d7078-5ae0-31f8-a837-37437b50a24f.roa (raw, json) Hash identifier: ZKKLfBGn3Jxt7hKYzuvnPLiQTPvFSoSb/IEchk3ZNlY= Subject key identifier: 60:5C:FD:B0:14:EA:87:E7:39:C2:55:35:1E:DE:3A:86:5C:D3:3E:31 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EB2B1AA564A93C8697508B680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 3223 IP address blocks: 172.111.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:aa:56:4a:93:c8:69:75:08:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=d6aad0d3-d013-4254-abac-970736a928fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:ca:df:f6:18:63:92:b0:68:60:e0:b3:8e: a7:04:4a:18:a0:1c:48:3e:12:64:b1:6f:fd:c1:64: e7:64:4b:6d:16:1e:dc:eb:82:86:43:c8:76:9a:0b: b0:b4:e4:b1:c9:c3:2a:20:45:c1:2a:a2:60:e1:b8: 36:de:90:19:27:b7:5f:13:e8:3b:48:11:b0:ce:b4: b1:26:b1:a2:74:2f:e6:4a:d3:9d:5c:9a:c0:83:be: 4c:2b:0f:dd:d2:61:c3:08:e9:3e:6b:13:8a:10:b2: 7a:dc:ee:d1:1e:73:16:71:1c:77:40:0c:86:f9:05: c7:d5:47:46:c4:30:60:aa:4d:23:92:04:e8:34:98: b2:3b:f6:61:c0:59:6a:8c:46:dd:69:0c:4a:74:d5: a1:4f:f6:d7:82:9b:74:dc:3c:b2:49:19:ed:9d:30: 3c:37:fa:7e:d4:f4:5b:28:b2:58:c8:ba:2e:c7:db: ba:38:ec:8e:f7:af:fe:59:5c:0e:3c:62:45:d9:d6: c5:7d:08:12:e4:91:c1:cf:27:94:85:13:be:4a:05: cb:73:04:02:f7:75:62:cc:5a:77:d5:a9:72:69:36: f6:bd:b4:d6:3d:d9:e4:c5:7c:b4:9f:b9:fc:a6:fa: c2:be:15:81:a4:ae:02:68:b6:e6:69:8c:16:8e:82: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5C:FD:B0:14:EA:87:E7:39:C2:55:35:1E:DE:3A:86:5C:D3:3E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:20:d2:98:75:13:94:33:26:ab:ff:35:36:41:e0:9e:5e:37: 36:1d:8d:44:f3:31:9e:bf:b2:45:66:e7:43:1f:ac:bb:11:b3: e6:83:60:23:35:86:44:d4:79:3e:5b:be:93:79:0a:b0:0b:a0: 2d:ce:f1:0a:5b:18:00:c6:50:79:9d:22:48:7e:9e:79:38:89: 9c:69:5e:76:2c:30:d8:ae:37:82:ba:84:f2:69:a1:4d:2b:d7: b6:bd:d4:7f:6f:63:2b:cd:5d:15:ff:a1:e7:21:59:cc:16:77: 09:e5:57:b5:80:0f:7b:8b:a4:fe:b1:86:7f:b4:29:ec:5e:5e: 7f:9c:05:5d:3a:14:78:d2:75:5c:04:bb:9d:d6:f9:c0:44:25: 9b:99:36:9f:14:12:68:6f:74:0d:0e:c5:b8:5f:fc:6f:3d:6d: 1b:ae:69:bd:67:fb:d6:2f:21:81:01:d5:ff:34:c3:ec:6a:f4: 13:91:70:1e:d5:59:46:52:60:40:d7:81:15:e4:18:b7:2b:bb: 62:69:9b:1d:99:c0:3d:98:cc:e2:e5:7f:4f:fe:66:64:bc:da: 76:04:45:84:49:47:58:0a:fb:1b:9a:b6:06:10:ae:8a:e4:7f: 74:96:85:9d:27:1b:e1:5f:42:fd:84:56:17:48:77:b4:24:1c: c0:fb:d0:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysapWSpPIaXUItoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZDZhYWQwZDMtZDAxMy00MjU0LWFiYWMtOTcwNzM2YTkyOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLPK3/YYY5KwaGDgs46nBEoYoBxIPhJksW/9 wWTnZEttFh7c64KGQ8h2mguwtOSxycMqIEXBKqJg4bg23pAZJ7dfE+g7SBGwzrSx JrGidC/mStOdXJrAg75MKw/d0mHDCOk+axOKELJ63O7RHnMWcRx3QAyG+QXH1UdG xDBgqk0jkgToNJiyO/ZhwFlqjEbdaQxKdNWhT/bXgpt03DyySRntnTA8N/p+1PRb KLJYyLoux9u6OOyO96/+WVwOPGJF2dbFfQgS5JHBzyeUhRO+SgXLcwQC93VizFp3 1alyaTb2vbTWPdnkxXy0n7n8pvrCvhWBpK4CaLbmaYwWjoKXcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBc/bAU6ofnOcJVNR7eOoZc0z4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxZDcwNzgtNWFlMC0z MWY4LWE4MzctMzc0MzdiNTBhMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYg0ph1E5QzJqv/NTZB4J5eNzYdjUTzMZ6/skVm50MfrLsRs+aDYCM1 hkTUeT5bvpN5CrALoC3O8QpbGADGUHmdIkh+nnk4iZxpXnYsMNiuN4K6hPJpoU0r 17a91H9vYyvNXRX/oechWcwWdwnlV7WAD3uLpP6xhn+0KexeXn+cBV06FHjSdVwE u53W+cBEJZuZNp8UEmhvdA0Oxbhf/G89bRuuab1n+9YvIYEB1f80w+xq9BORcB7V WUZSYEDXgRXkGLcru2Jpmx2ZwD2YzOLlf0/+ZmS82nYERYRJR1gK+xuatgYQrork f3SWhZ0nG+FfQv2EVhdId7QkHMD70II= -----END CERTIFICATE-----Generated at Fri Sep 4 15:17:01 2026 by rpki-client