$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa File: a2894994-fc45-31ef-9443-e6e1133a12f2.roa (raw, json) Hash identifier: 1JyJDnRODTxx+tQIvwBrcEYYWaPm8Alo7PuJ0KhmlmQ= Subject key identifier: 78:54:2B:32:71:DD:A6:5F:78:0F:3D:91:5A:26:CB:D6:FD:5A:DB:1C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E2F045802B08230E2F34C9300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 132372 IP address blocks: 172.111.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:58:02:b0:82:30:e2:f3:4c:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=471dde66-dc53-44b1-91c8-7b9b8ba828a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:d0:87:f2:19:1f:6e:4b:20:3f:41:db:6a: f6:b5:34:24:94:40:30:17:de:49:b9:d2:c9:c4:ff: 6c:86:9b:0a:55:a6:00:ca:2f:59:ab:9c:cf:9f:9e: 74:1f:29:d1:34:ac:36:f9:94:72:81:dd:df:b3:d7: e1:f0:20:22:d3:20:af:c7:e0:3a:7c:20:bd:c1:db: 1d:d7:84:7f:e6:ec:e9:de:06:29:9b:e1:55:88:fe: e5:8d:67:06:ae:3a:a8:c7:4e:d4:5e:90:9f:28:5d: 60:13:c7:d2:18:87:fb:21:2e:1a:c8:c4:de:c9:15: e6:11:c4:b4:95:10:4d:4a:38:b2:36:cf:77:0d:06: 79:bb:df:85:ae:4b:d9:46:71:07:ca:12:89:21:9b: fb:77:25:60:ba:db:fa:70:e5:7f:14:18:fb:88:a9: 76:4d:53:3f:f1:6e:26:69:49:07:12:f1:20:1a:07: 7b:15:94:43:92:3f:20:0b:89:8c:77:82:f7:74:c1: 89:a7:c0:98:f8:d4:28:9e:e3:db:36:b1:ad:65:e8: 21:e5:bc:63:c5:9b:10:72:1c:49:7b:91:0b:cd:fa: ac:69:7e:0d:0e:63:c1:b7:3c:41:e5:6c:1b:d5:38: 3f:37:95:7d:2e:b7:e3:9c:ed:76:99:b5:cf:61:0d: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:54:2B:32:71:DD:A6:5F:78:0F:3D:91:5A:26:CB:D6:FD:5A:DB:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:59:7a:27:ce:38:3f:79:15:f1:8d:bd:ab:43:b6:fa:de:69: 8e:50:36:b8:93:14:f0:9f:7a:37:95:25:f6:d8:07:3f:97:ed: fb:79:37:70:a3:48:78:64:8a:ca:50:8f:59:ee:71:eb:a4:7b: 0b:0e:64:09:d6:99:58:7f:96:8b:cf:16:d8:7a:52:1c:1c:0e: 0e:f5:01:33:db:15:6e:d1:36:e1:96:6b:e5:89:8b:d3:e4:c4: b1:9b:da:7a:e2:8a:da:f1:24:b3:6c:db:62:49:ab:9b:0b:1e: bc:91:22:b0:9b:3b:ba:f0:fc:43:71:1d:52:9e:82:27:00:35: 1c:0f:da:e8:5c:7e:78:fa:1a:e7:ab:9d:97:21:8c:49:e5:e3: 87:3c:a8:c7:eb:33:37:55:66:8b:14:c3:6b:30:38:d5:92:90: f5:a6:68:49:fc:da:e9:16:60:1b:1b:a4:5f:db:e1:5f:2a:cf: 5e:81:39:92:6a:ce:2e:ef:45:39:3d:59:a8:82:00:2d:26:26: b8:1d:f6:8f:ea:3f:51:ea:40:74:52:31:9b:3a:2a:a1:64:2b: 26:e2:b1:ca:da:f6:f9:a3:05:b3:8b:24:43:08:82:4e:4d:5f: 26:1c:53:b1:14:b3:08:a2:f3:b4:11:10:bd:f0:98:05:e6:5b: 48:72:3e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFgCsIIw4vNMkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk NDcxZGRlNjYtZGM1My00NGIxLTkxYzgtN2I5YjhiYTgyOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4DQh/IZH25LID9B22r2tTQklEAwF95JudLJ xP9shpsKVaYAyi9Zq5zPn550HynRNKw2+ZRygd3fs9fh8CAi0yCvx+A6fCC9wdsd 14R/5uzp3gYpm+FViP7ljWcGrjqox07UXpCfKF1gE8fSGIf7IS4ayMTeyRXmEcS0 lRBNSjiyNs93DQZ5u9+FrkvZRnEHyhKJIZv7dyVgutv6cOV/FBj7iKl2TVM/8W4m aUkHEvEgGgd7FZRDkj8gC4mMd4L3dMGJp8CY+NQonuPbNrGtZegh5bxjxZsQchxJ e5ELzfqsaX4NDmPBtzxB5Wwb1Tg/N5V9LrfjnO12mbXPYQ1ftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhUKzJx3aZfeA89kVomy9b9WtscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTI4OTQ5OTQtZmM0NS0z MWVmLTk0NDMtZTZlMTEzM2ExMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhZeifOOD95FfGNvatDtvreaY5QNriTFPCfejeVJfbYBz+X7ft5N3Cj SHhkispQj1nuceukewsOZAnWmVh/lovPFth6UhwcDg71ATPbFW7RNuGWa+WJi9Pk xLGb2nriitrxJLNs22JJq5sLHryRIrCbO7rw/ENxHVKegicANRwP2uhcfnj6Guer nZchjEnl44c8qMfrMzdVZosUw2swONWSkPWmaEn82ukWYBsbpF/b4V8qz16BOZJq zi7vRTk9WaiCAC0mJrgd9o/qP1HqQHRSMZs6KqFkKybiscra9vmjBbOLJEMIgk5N XyYcU7EUswii87QREL3wmAXmW0hyPuc= -----END CERTIFICATE-----Generated at Tue Jul 21 14:59:33 2026 by rpki-client