$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd277d7c-781a-3202-8416-8342161ebcad.roa File: cd277d7c-781a-3202-8416-8342161ebcad.roa (raw, json) Hash identifier: FdVMiBZdXY2vja+2FMudCA7c53ZlSDfc/rGDVOROTmY= Subject key identifier: 36:22:6F:AD:EE:88:4D:78:BE:55:09:17:D4:DA:2D:17:52:CE:73:8E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EDB2C894F31BB3750B2F066DC Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd277d7c-781a-3202-8416-8342161ebcad.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 7040 IP address blocks: 172.111.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:89:4f:31:bb:37:50:b2:f0:66:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=2d1e42b8-4123-4ee0-8f53-7c12890bdb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:ce:99:e7:12:38:03:06:c6:30:8d:75:8c: bb:70:3f:f8:a6:c1:d3:c5:5a:76:59:f0:f9:44:8c: 7a:9a:d2:9b:85:1a:86:57:1d:d4:63:49:c3:cc:24: ec:51:b4:81:4d:0d:17:52:2d:50:84:f0:07:6e:7d: 9e:c0:3a:03:12:4d:b7:d0:60:ce:86:79:0f:aa:0c: 4f:f0:68:c8:dd:83:13:5b:fb:39:31:73:d7:12:bb: 70:0a:a4:c8:f0:16:1d:bd:76:6d:cb:b5:a9:67:25: bc:b6:7b:59:ec:c1:25:d1:a0:5a:47:5c:b6:64:7d: 89:bf:6a:44:73:27:f5:3d:23:42:54:10:d2:e0:63: c9:53:5f:88:1b:84:10:0f:5e:ff:d0:9d:16:b4:0f: 27:bc:92:fa:f7:07:85:5b:82:4b:b3:56:75:7f:a0: a2:e0:83:39:b2:36:0d:68:81:91:44:c0:f5:a3:91: 5f:c7:f5:66:9e:16:99:f7:44:24:78:1d:26:e3:e7: 5a:be:90:01:41:c5:1e:f1:ea:84:77:2c:53:91:d0: 9a:24:1a:40:b8:c8:47:d7:84:69:c1:16:16:73:f8: 47:f9:d6:52:dc:22:41:54:9c:55:00:8d:da:24:5b: d5:60:27:06:2e:d3:32:64:e8:6a:a6:a8:36:3e:07: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:22:6F:AD:EE:88:4D:78:BE:55:09:17:D4:DA:2D:17:52:CE:73:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd277d7c-781a-3202-8416-8342161ebcad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8d:3a:a4:d4:c4:bf:63:4a:52:3f:14:3a:62:54:2d:ca:29: 86:e3:ab:2a:ff:52:6d:bb:0f:0a:94:2a:9c:4e:c0:b8:53:d9: 6a:41:ac:35:53:12:62:95:3c:7d:03:f9:92:45:15:f9:ef:0d: 03:32:d9:c6:43:22:2a:86:e4:bb:31:ff:39:3b:8b:da:a0:af: 9f:44:1e:67:de:0c:09:87:81:ff:3f:a9:f9:73:c3:a3:0b:c4: 7a:e5:0a:ef:d7:e4:88:d4:d2:8e:6c:78:b2:71:09:98:ec:d9: 9f:f2:9d:29:ca:74:82:0c:6c:8c:d2:af:40:97:ef:0d:fd:ba: 55:c8:fc:a3:c1:4a:e3:12:5b:99:0b:b0:10:df:33:1d:78:85: 85:75:d6:b1:38:8d:15:6c:fa:61:11:f4:3c:a7:d2:64:ed:52: 7b:f3:f6:49:2a:40:e9:bc:69:6a:20:c3:21:ad:64:e1:e2:f2: 51:98:aa:17:16:2e:be:c9:2a:ff:54:bc:b8:56:e1:5e:35:d9: 04:94:b2:d8:49:30:38:43:64:67:3e:4c:a6:25:54:a9:07:61: 8d:7c:2c:f2:53:9d:e9:c8:84:2f:fc:99:66:6d:78:05:14:46: a7:37:e3:04:63:2a:a8:30:63:6e:dd:9e:a1:b2:15:4c:e5:9b: 61:23:a3:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLIlPMbs3ULLwZtwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk MmQxZTQyYjgtNDEyMy00ZWUwLThmNTMtN2MxMjg5MGJkYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9/OmecSOAMGxjCNdYy7cD/4psHTxVp2WfD5 RIx6mtKbhRqGVx3UY0nDzCTsUbSBTQ0XUi1QhPAHbn2ewDoDEk230GDOhnkPqgxP 8GjI3YMTW/s5MXPXErtwCqTI8BYdvXZty7WpZyW8tntZ7MEl0aBaR1y2ZH2Jv2pE cyf1PSNCVBDS4GPJU1+IG4QQD17/0J0WtA8nvJL69weFW4JLs1Z1f6Ci4IM5sjYN aIGRRMD1o5Ffx/VmnhaZ90QkeB0m4+davpABQcUe8eqEdyxTkdCaJBpAuMhH14Rp wRYWc/hH+dZS3CJBVJxVAI3aJFvVYCcGLtMyZOhqpqg2PgeYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYib63uiE14vlUJF9TaLRdSznOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2QyNzdkN2MtNzgxYS0z MjAyLTg0MTYtODM0MjE2MWViY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeNOqTUxL9jSlI/FDpiVC3KKYbjqyr/Um27DwqUKpxOwLhT2WpBrDVT EmKVPH0D+ZJFFfnvDQMy2cZDIiqG5Lsx/zk7i9qgr59EHmfeDAmHgf8/qflzw6ML xHrlCu/X5IjU0o5seLJxCZjs2Z/ynSnKdIIMbIzSr0CX7w39ulXI/KPBSuMSW5kL sBDfMx14hYV11rE4jRVs+mER9Dyn0mTtUnvz9kkqQOm8aWogwyGtZOHi8lGYqhcW Lr7JKv9UvLhW4V412QSUsthJMDhDZGc+TKYlVKkHYY18LPJTnenIhC/8mWZteAUU Rqc34wRjKqgwY27dnqGyFUzlm2Ejoyg= -----END CERTIFICATE-----Generated at Fri Sep 4 23:05:28 2026 by rpki-client