$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa File: b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa (raw, json) Hash identifier: gk8HkgkwGR0kRO7YAQ5+M+KFxPIGHqQ8ptAIHeJ6bwY= Subject key identifier: 12:33:AA:26:A9:8A:C6:46:70:6C:D7:4E:49:F9:E0:B9:88:C3:D3:43 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E561A122E470CD5BB687ADF20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 9009 IP address blocks: 172.111.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:12:2e:47:0c:d5:bb:68:7a:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=f05eea70-9d24-4d5b-acdd-1558108a7f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b1:0b:d1:1e:6d:65:93:fc:fc:2f:48:24:ee: 79:f9:c1:a3:49:f3:f2:9b:81:fc:f2:b1:4e:b4:25: 39:cd:98:68:4c:1b:1c:97:5e:f7:e4:ba:5d:58:b8: 6c:03:86:ef:f2:48:10:d6:02:3d:de:18:51:45:e7: 12:83:b5:96:93:e4:43:1f:d3:10:4f:f0:78:cd:6f: e8:c6:98:20:02:4f:39:7f:65:ec:25:b1:eb:2e:ff: 81:54:04:c0:23:51:27:f0:48:ca:05:d8:ee:fe:13: 1f:b3:6b:50:c9:13:a8:31:1a:eb:82:01:5f:f6:68: 6f:4e:d3:ab:a9:35:76:bc:d5:c6:7f:36:b1:e4:19: ab:22:66:fd:cd:d4:30:50:f3:3c:ad:17:e2:6f:33: 37:97:fe:54:63:16:6b:a0:94:3b:2a:0a:c8:4e:a0: 71:14:82:91:bf:8e:46:90:d3:a6:a2:d7:10:e9:f5: e4:20:b9:3f:91:7f:23:3e:2f:bd:00:96:a8:71:a6: 9d:32:e0:9f:d9:ac:9f:cb:fd:48:d3:aa:97:69:3c: 0f:ad:27:51:08:4e:3b:ab:9d:27:df:77:d3:ca:c2: 47:1e:e1:ec:1c:cf:c0:3c:2e:3e:d1:a9:9e:23:82: b0:48:71:ae:93:1d:af:96:80:c4:b8:e1:db:ab:f4: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:33:AA:26:A9:8A:C6:46:70:6C:D7:4E:49:F9:E0:B9:88:C3:D3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f7:80:3c:df:ee:1f:27:70:0f:85:77:c8:a0:8c:6c:49:95: fb:d8:a9:ed:35:6e:74:70:6e:9f:d0:a4:10:24:ed:70:7b:ae: b5:85:56:7b:da:4e:11:96:10:55:0d:95:35:52:0f:fe:f8:b6: 21:a5:46:c3:d6:6d:e7:c1:69:31:15:e3:1d:fe:07:b7:46:f1: 6a:e6:3f:02:7a:2d:cb:10:a0:13:17:44:f5:4c:0a:ab:95:82: 55:0a:a1:69:01:6b:1e:b0:88:96:f3:10:97:67:28:43:47:16: 92:c3:86:df:13:ce:2f:27:8c:8c:77:c2:8e:6a:19:e2:6c:dc: 75:37:d4:dd:b6:10:fe:10:93:a6:ec:a7:f3:9d:6b:93:bf:68: f1:46:69:ee:b6:dd:42:b1:7d:73:bd:e0:72:58:d5:c1:72:b1: f1:8c:d2:82:4b:f7:7b:5e:55:01:88:a7:35:b7:c9:19:97:a6: 39:ff:64:85:e9:33:b8:c0:12:91:f8:52:1c:31:a9:31:fd:ae: 7f:77:bf:20:a1:c4:e8:c9:ac:a0:81:a5:7a:fe:4e:25:89:4e: 79:24:b7:af:4d:5d:37:15:72:ba:78:db:b4:9d:26:7e:47:56: 3b:63:4d:03:d5:c0:00:14:a0:98:17:aa:fe:a8:e7:c9:0a:12: 1f:d2:62:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGhIuRwzVu2h63yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjA1ZWVhNzAtOWQyNC00ZDViLWFjZGQtMTU1ODEwOGE3ZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07EL0R5tZZP8/C9IJO55+cGjSfPym4H88rFO tCU5zZhoTBscl1735LpdWLhsA4bv8kgQ1gI93hhRRecSg7WWk+RDH9MQT/B4zW/o xpggAk85f2XsJbHrLv+BVATAI1En8EjKBdju/hMfs2tQyROoMRrrggFf9mhvTtOr qTV2vNXGfzax5BmrImb9zdQwUPM8rRfibzM3l/5UYxZroJQ7KgrITqBxFIKRv45G kNOmotcQ6fXkILk/kX8jPi+9AJaocaadMuCf2ayfy/1I06qXaTwPrSdRCE47q50n 33fTysJHHuHsHM/APC4+0ameI4KwSHGukx2vloDEuOHbq/S43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIzqiapisZGcGzXTkn54LmIw9NDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjljNDgxZWItOTAyZC0z OTViLWEwZDktOTNiZmRkZmJhNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG73gDzf7h8ncA+Fd8igjGxJlfvYqe01bnRwbp/QpBAk7XB7rrWFVnva ThGWEFUNlTVSD/74tiGlRsPWbefBaTEV4x3+B7dG8WrmPwJ6LcsQoBMXRPVMCquV glUKoWkBax6wiJbzEJdnKENHFpLDht8Tzi8njIx3wo5qGeJs3HU31N22EP4Qk6bs p/Oda5O/aPFGae623UKxfXO94HJY1cFysfGM0oJL93teVQGIpzW3yRmXpjn/ZIXp M7jAEpH4UhwxqTH9rn93vyChxOjJrKCBpXr+TiWJTnkkt69NXTcVcrp427SdJn5H VjtjTQPVwAAUoJgXqv6o58kKEh/SYvI= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:44 2026 by rpki-client