$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa File: a71e0638-78b5-3914-8d96-9db194d3fc38.roa (raw, json) Hash identifier: EapLOSnm2Jx6/P3uJEd4NfRNsjYSdCHC02vjMtLXXBo= Subject key identifier: 3B:A9:7D:99:8A:8B:A1:3D:85:FB:38:4E:44:EE:AC:91:65:C3:67:EB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E86F4F8CB473508B5BBE06100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 9009 IP address blocks: 172.111.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f8:cb:47:35:08:b5:bb:e0:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=5587b866-141c-4a13-b106-0c118992bcfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:bb:f2:c6:5d:7c:0e:66:b1:eb:a4:99:17: d3:5d:e3:0f:7e:22:98:e4:7d:b0:00:88:6c:8b:03: 1a:b5:e7:85:c6:bf:40:77:55:ce:0d:77:61:85:fa: d9:49:51:47:22:3a:1c:22:7e:82:31:9b:b8:4f:4f: 71:3c:86:a7:69:47:45:82:83:95:1f:51:1a:5c:f6: 3f:84:a1:8e:4e:e2:89:05:8e:3a:24:56:65:36:fc: d1:ff:92:3e:cf:19:0f:28:99:55:94:a5:10:a0:4c: 7c:62:b7:02:51:1c:47:81:e8:b6:dc:55:76:be:dd: 28:df:b6:d0:56:af:ef:bc:c0:db:3a:86:0b:01:fb: 72:d4:05:c6:ac:cf:e6:2a:83:a5:bd:fd:22:6e:a7: ea:74:dc:1a:7f:02:4a:c7:57:ce:b5:c7:3f:2d:21: 07:7f:d4:21:a3:94:2c:61:91:ed:99:f9:27:0f:47: 20:44:e5:a0:1c:19:da:2a:04:cf:f7:46:2e:49:66: 29:57:00:cd:09:e7:10:c3:8d:23:0a:1c:38:57:35: 3c:34:b8:e5:7d:31:2b:05:85:34:e9:71:41:58:da: 2a:81:0b:38:0b:93:69:cd:e2:c1:30:5d:6e:30:54: c3:66:26:51:75:86:4e:a7:2a:07:97:cd:f7:b5:9f: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:7D:99:8A:8B:A1:3D:85:FB:38:4E:44:EE:AC:91:65:C3:67:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7e:d9:39:c9:4d:61:ee:28:a7:75:87:67:91:6a:70:5a:fd: 54:dd:b1:9c:1b:1a:ba:2c:42:b0:6a:6d:28:13:f7:1a:7d:4f: 42:d2:2a:23:9d:c3:4a:9e:db:78:41:c6:bf:06:6c:8d:78:21: 29:c0:d4:6e:bf:b5:6a:3d:8d:06:54:77:dc:f0:3d:e4:5f:45: 21:38:59:47:26:23:ed:b8:76:91:40:29:10:fb:98:36:84:8a: 8c:98:72:17:96:41:29:12:ae:ff:c5:8c:e1:60:a2:c1:93:08: a6:4c:da:02:13:1d:f0:b8:08:5e:2a:35:29:7c:1c:b8:3d:c3: d5:70:99:a4:7b:6e:11:9c:f8:83:88:a1:24:fa:40:05:22:36: 24:58:50:b8:67:37:f9:b3:7a:81:24:a4:8a:9d:a4:b8:03:df: bb:87:30:09:0f:01:19:7c:70:3d:e5:0e:a1:8c:91:9e:23:48: 01:ee:22:66:59:0d:1b:d2:55:24:15:dc:f6:f9:12:06:e9:45: 97:7d:10:77:ef:88:4b:b6:99:6d:06:55:9a:7e:1f:23:6d:8b: 5f:b8:8e:95:be:7d:1e:ef:fc:3d:92:72:b5:c5:85:36:53:58: 3e:8b:6b:70:d4:4c:43:5f:7a:80:e1:90:83:f6:f8:83:bb:9f: d3:45:8a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PjLRzUItbvgYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NTU4N2I4NjYtMTQxYy00YTEzLWIxMDYtMGMxMTg5OTJiY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilu78sZdfA5mseukmRfTXeMPfiKY5H2wAIhs iwMateeFxr9Ad1XODXdhhfrZSVFHIjocIn6CMZu4T09xPIanaUdFgoOVH1EaXPY/ hKGOTuKJBY46JFZlNvzR/5I+zxkPKJlVlKUQoEx8YrcCURxHgei23FV2vt0o37bQ Vq/vvMDbOoYLAfty1AXGrM/mKoOlvf0ibqfqdNwafwJKx1fOtcc/LSEHf9Qho5Qs YZHtmfknD0cgROWgHBnaKgTP90YuSWYpVwDNCecQw40jChw4VzU8NLjlfTErBYU0 6XFBWNoqgQs4C5NpzeLBMF1uMFTDZiZRdYZOpyoHl833tZ9ecQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDupfZmKi6E9hfs4TkTurJFlw2frMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTcxZTA2MzgtNzhiNS0z OTE0LThkOTYtOWRiMTk0ZDNmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR+2TnJTWHuKKd1h2eRanBa/VTdsZwbGrosQrBqbSgT9xp9T0LSKiOd w0qe23hBxr8GbI14ISnA1G6/tWo9jQZUd9zwPeRfRSE4WUcmI+24dpFAKRD7mDaE ioyYcheWQSkSrv/FjOFgosGTCKZM2gITHfC4CF4qNSl8HLg9w9VwmaR7bhGc+IOI oST6QAUiNiRYULhnN/mzeoEkpIqdpLgD37uHMAkPARl8cD3lDqGMkZ4jSAHuImZZ DRvSVSQV3Pb5EgbpRZd9EHfviEu2mW0GVZp+HyNti1+4jpW+fR7v/D2ScrXFhTZT WD6La3DUTENfeoDhkIP2+IO7n9NFitY= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:57 2026 by rpki-client