$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa File: a7c850a7-6057-3aba-a856-158b07a73e10.roa (raw, json) Hash identifier: jRehkubjl9TgviJvBXan7t9/p6DYy8kobTbJHOq1TfM= Subject key identifier: 3F:00:75:48:94:A4:44:E4:B7:B7:72:A5:33:D8:C2:A2:C3:AA:F3:40 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E0A6FF83E6EE75BE1FD3A0F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 14618 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f8:3e:6e:e7:5b:e1:fd:3a:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=172c8850-7f63-4647-bf54-e7af6b782b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:58:08:b5:5d:2c:ac:67:be:f0:83:68:bb: e3:c1:55:d0:8c:9c:ad:26:da:da:ae:b1:72:d5:93: eb:c8:82:93:22:42:db:1f:a7:48:04:02:4d:29:df: 59:49:e9:bb:4c:ae:71:1f:f5:3a:bd:3c:59:a1:5f: 5a:b4:ea:d0:9f:45:1b:a1:27:7f:08:3e:3c:65:f8: ef:80:dc:fc:84:f7:97:c6:5c:40:ed:09:8d:ac:a0: ef:a4:83:31:9c:1e:3e:88:c5:ed:21:36:05:da:89: 71:d5:2d:2e:0e:a8:30:28:49:ba:9a:27:c8:c0:b4: a5:2b:16:4f:71:56:ff:d1:b6:59:4b:f0:41:11:29: 65:9c:5e:24:fb:d3:3a:ce:4c:f1:cb:cd:34:d9:3f: 48:ce:1a:c5:4c:2e:ad:24:82:e6:ce:d4:88:df:27: d5:97:cc:ff:26:91:3b:05:59:19:d6:f3:61:4f:38: ec:d4:05:6b:b2:e3:af:2a:d4:34:17:f7:6c:83:92: 6f:8d:e3:c3:e4:ab:b2:b4:da:64:31:1e:e8:68:53: 9f:ff:d6:30:ff:cd:01:7b:5a:60:68:77:7f:89:cf: 19:da:37:a6:52:15:8b:f1:d4:b8:25:40:6d:26:ca: 4e:8c:30:75:46:e6:98:be:10:c1:b4:9f:0a:43:0a: f1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:75:48:94:A4:44:E4:B7:B7:72:A5:33:D8:C2:A2:C3:AA:F3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:00:fb:8f:aa:69:7f:4c:51:2c:f4:c4:42:77:69:22:2b:7f: ad:03:42:bf:27:04:30:c3:57:a4:e8:d2:99:c3:7a:04:5c:3a: d9:4c:4a:fa:39:37:37:e8:30:e2:34:50:85:00:80:12:51:14: d4:18:a0:ae:b0:00:c4:b1:9d:c1:2c:8a:f9:9c:55:5d:57:5f: b4:d4:9f:cd:83:01:ba:c2:52:d9:3a:1b:30:db:4a:85:5e:c6: ea:af:19:34:b5:ab:6f:19:a3:9d:6f:b6:6e:d0:e9:75:73:7c: 04:3f:1f:86:4b:f0:60:2e:28:f0:b4:36:1a:57:ba:ca:0e:33: 8e:04:53:f1:a3:3b:33:43:8a:59:2e:cc:cc:ff:f1:62:36:84: 3f:13:3e:8d:a3:9b:d3:25:30:86:fa:3f:66:1c:10:21:03:6e: 50:42:37:4b:3a:e8:08:06:50:b0:45:fc:df:4d:00:09:fa:8d: d2:5e:86:44:bf:f8:c9:72:af:a2:90:03:e5:0b:a9:e3:c9:cd: b4:07:8f:54:79:55:13:6c:3d:73:6c:8a:2b:77:57:b3:84:6c: e4:53:18:e6:fe:5e:da:91:64:db:7e:53:b4:d7:42:8f:f8:1f: 4d:42:72:47:01:31:cb:50:7d:24:74:f5:df:41:7a:83:d2:a3: b2:43:dc:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/g+budb4f06D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MTcyYzg4NTAtN2Y2My00NjQ3LWJmNTQtZTdhZjZiNzgyYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEdYCLVdLKxnvvCDaLvjwVXQjJytJtrarrFy 1ZPryIKTIkLbH6dIBAJNKd9ZSem7TK5xH/U6vTxZoV9atOrQn0UboSd/CD48Zfjv gNz8hPeXxlxA7QmNrKDvpIMxnB4+iMXtITYF2olx1S0uDqgwKEm6mifIwLSlKxZP cVb/0bZZS/BBESllnF4k+9M6zkzxy8002T9IzhrFTC6tJILmztSI3yfVl8z/JpE7 BVkZ1vNhTzjs1AVrsuOvKtQ0F/dsg5JvjePD5KuytNpkMR7oaFOf/9Yw/80Be1pg aHd/ic8Z2jemUhWL8dS4JUBtJspOjDB1RuaYvhDBtJ8KQwrx3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8AdUiUpETkt7dypTPYwqLDqvNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTdjODUwYTctNjA1Ny0z YWJhLWE4NTYtMTU4YjA3YTczZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUA+4+qaX9MUSz0xEJ3aSIrf60DQr8nBDDDV6To0pnDegRcOtlMSvo5 NzfoMOI0UIUAgBJRFNQYoK6wAMSxncEsivmcVV1XX7TUn82DAbrCUtk6GzDbSoVe xuqvGTS1q28Zo51vtm7Q6XVzfAQ/H4ZL8GAuKPC0NhpXusoOM44EU/GjOzNDilku zMz/8WI2hD8TPo2jm9MlMIb6P2YcECEDblBCN0s66AgGULBF/N9NAAn6jdJehkS/ +Mlyr6KQA+ULqePJzbQHj1R5VRNsPXNsiit3V7OEbORTGOb+XtqRZNt+U7TXQo/4 H01CckcBMctQfSR09d9BeoPSo7JD3Ok= -----END CERTIFICATE-----Generated at Thu Jun 4 09:05:25 2026 by rpki-client