$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: bTBNljKtCSmew9PYAWYNoyyHutm4qJbTKvXV3EcPm5w= Subject key identifier: DE:ED:82:DB:88:11:2E:09:0A:C9:9B:D1:21:FB:A4:AC:EC:D2:C7:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E7204D16F64567F2D461B8C40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d1:6f:64:56:7f:2d:46:1b:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=ad4798b6-b144-4251-a575-a28dbd7d9149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:62:57:52:ae:86:77:17:46:27:ca:19:f6: d5:f3:18:b4:b2:a0:d7:c1:f9:e2:0f:23:87:70:a7: 2f:39:ed:e8:c9:c9:34:ea:2f:37:3f:b9:96:50:65: d7:e9:bd:8b:6f:42:45:38:01:a3:26:37:13:fd:b1: fe:91:41:af:57:b0:dd:95:fd:c4:b3:4a:b5:34:7b: fb:23:38:52:05:e8:8e:24:d2:75:f0:32:3f:87:f8: 64:45:db:18:d6:36:5c:59:fc:e1:cd:7f:75:92:2e: f0:8b:49:5d:0a:35:17:6f:bd:46:be:8f:5e:b9:f4: 7b:00:2d:3f:65:1d:5c:5f:94:8e:9c:1f:23:8d:c8: c2:d3:e1:a0:27:90:1f:07:30:e2:61:d5:1d:29:24: d1:51:2a:d8:46:e7:73:4f:d7:5c:4f:8e:89:41:f0: 7e:fe:ff:f4:1f:93:2a:32:aa:2f:90:e9:cd:cf:54: 0d:ef:e3:c1:45:f4:a5:0a:c3:3a:45:49:fb:db:7c: d1:44:b5:bb:34:dd:6b:da:4e:8f:23:81:c4:5c:61: 2c:6d:31:4f:15:f0:11:e8:d2:68:07:5d:ae:1d:73: a6:1e:83:38:5b:e2:d2:19:40:ba:90:73:6b:69:d1: f5:18:ee:55:25:74:3a:e1:fb:ee:00:87:ff:73:d5: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:ED:82:DB:88:11:2E:09:0A:C9:9B:D1:21:FB:A4:AC:EC:D2:C7:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c5:e7:ad:48:df:0b:f3:49:48:d7:6f:18:d6:00:bd:89:0d: 7b:82:94:bf:b8:4f:87:8e:c2:05:39:7e:7a:21:e4:32:62:5d: 82:3a:c0:8c:9a:ed:61:e0:9b:9f:77:0d:b7:79:2e:1a:83:e6: e5:48:fe:c9:79:6c:9f:52:71:b1:ef:d7:e2:3e:42:ba:63:31: 09:47:78:5b:74:ff:d5:a4:da:0a:7d:4f:4e:b7:b8:90:6f:ed: e3:09:4a:ff:0b:df:05:41:1d:6e:14:73:a5:11:f5:f2:cf:56: 76:26:17:49:c2:bc:bb:ec:63:04:23:5c:c4:59:ea:65:62:79: 6f:ce:8e:78:66:61:47:e6:b0:b3:a7:0d:08:54:6f:9e:80:2d: eb:2a:73:e2:c2:94:d8:8d:c5:5f:f7:57:3e:1b:2d:7d:c6:7c: 78:4b:ba:2d:76:c4:d6:1f:63:0b:ab:fe:13:e1:dc:27:9a:9e: 30:63:81:46:e2:09:51:b2:8c:80:1c:a7:f7:e9:df:d3:b5:9f: 41:a9:4e:81:73:55:c0:09:5d:4e:36:79:45:9a:ab:4f:97:bc: 1b:ee:27:83:3c:9d:5c:8f:54:98:10:06:3d:f0:cd:b5:e0:63: c8:fd:ca:fd:b6:6d:d1:98:bf:ad:3c:53:d4:67:a1:07:d5:75: 59:40:05:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNFvZFZ/LUYbjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YWQ0Nzk4YjYtYjE0NC00MjUxLWE1NzUtYTI4ZGJkN2Q5MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwViV1KuhncXRifKGfbV8xi0sqDXwfniDyOH cKcvOe3oyck06i83P7mWUGXX6b2Lb0JFOAGjJjcT/bH+kUGvV7Ddlf3Es0q1NHv7 IzhSBeiOJNJ18DI/h/hkRdsY1jZcWfzhzX91ki7wi0ldCjUXb71Gvo9eufR7AC0/ ZR1cX5SOnB8jjcjC0+GgJ5AfBzDiYdUdKSTRUSrYRudzT9dcT46JQfB+/v/0H5Mq MqovkOnNz1QN7+PBRfSlCsM6RUn723zRRLW7NN1r2k6PI4HEXGEsbTFPFfAR6NJo B12uHXOmHoM4W+LSGUC6kHNradH1GO5VJXQ64fvuAIf/c9UjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7tgtuIES4JCsmb0SH7pKzs0se6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvF561I3wvzSUjXbxjWAL2JDXuClL+4T4eOwgU5fnoh5DJiXYI6wIya 7WHgm593Dbd5LhqD5uVI/sl5bJ9ScbHv1+I+QrpjMQlHeFt0/9Wk2gp9T063uJBv 7eMJSv8L3wVBHW4Uc6UR9fLPVnYmF0nCvLvsYwQjXMRZ6mVieW/OjnhmYUfmsLOn DQhUb56ALesqc+LClNiNxV/3Vz4bLX3GfHhLui12xNYfYwur/hPh3CeanjBjgUbi CVGyjIAcp/fp39O1n0GpToFzVcAJXU42eUWaq0+XvBvuJ4M8nVyPVJgQBj3wzbXg Y8j9yv22bdGYv608U9RnoQfVdVlABQ8= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:40 2026 by rpki-client