$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa File: d187a421-c3fa-3a3d-82ce-a52b6630982c.roa (raw, json) Hash identifier: Wc35ZRKsHVxMZuXBZoLApNW20xdQlTj85E933/Fl024= Subject key identifier: A5:90:D8:84:69:05:98:EB:97:08:B8:7E:FF:82:95:7D:2E:B6:44:24 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E86F4FE3110B690C2EA331240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 9009 IP address blocks: 172.111.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:fe:31:10:b6:90:c2:ea:33:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=8783d551-f962-4bbd-acca-86d3f3d6233e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:4f:2d:19:eb:1e:4b:82:a9:c3:fc:47:7d: a8:82:d4:31:09:d4:fa:47:f0:55:d2:dc:99:ba:10: 2a:a8:b6:e4:9a:b5:43:a7:17:d8:51:56:6d:f7:59: b4:a0:ca:83:58:73:63:d8:94:e3:8b:ea:18:38:bf: 24:59:13:08:e5:ab:18:3f:23:72:24:38:9f:8a:26: d8:df:cc:01:ae:bb:61:ae:38:1a:52:bf:72:a6:b3: 8d:4e:fd:d1:22:40:13:e7:95:55:bb:44:e0:83:f0: c7:9e:41:8e:1f:54:cb:9b:e4:46:96:db:70:72:12: 70:c8:f2:24:b4:49:8a:24:ea:f6:a8:0b:95:80:46: 0b:0b:1c:05:7d:cc:c9:b2:9c:28:83:91:4b:50:59: 0a:e8:83:7d:cc:cc:33:a4:54:76:0c:ed:aa:21:bc: 04:f3:96:9b:8f:45:c4:c4:da:49:db:1f:7f:d1:72: 7a:1e:35:18:7d:cb:dd:cc:d4:7e:b0:8d:bf:06:4a: ec:4e:13:45:84:b5:e7:b6:ce:fa:8b:92:73:2d:f3: 1e:62:8a:ef:4e:a2:1e:0e:f6:eb:e4:00:de:a5:c9: 45:d5:2a:98:f7:e2:1f:f0:10:f2:bf:30:e2:c0:a1: b2:79:01:3c:87:30:34:69:11:0c:70:2c:86:b5:7d: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:90:D8:84:69:05:98:EB:97:08:B8:7E:FF:82:95:7D:2E:B6:44:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5c:cd:e0:91:1b:d3:63:21:5c:38:8b:64:f7:b0:2b:76:7d: 30:8a:2e:d1:e9:ae:88:62:e0:20:73:04:a5:3a:1e:34:43:ee: 92:2e:2e:22:81:30:87:53:fb:6a:2c:ab:d6:30:2f:ff:03:23: 81:c7:2a:80:63:01:2c:71:31:71:e9:62:9b:a3:20:c8:d1:72: 79:e4:86:6f:28:d1:41:ec:d7:80:42:97:57:57:32:d8:92:88: 74:62:d2:a7:bc:c6:ed:66:98:2d:ca:20:1a:32:9f:8e:a2:77: 45:c0:ee:42:b3:ed:6c:3c:9b:90:d8:be:c3:a9:9e:48:28:a4: dd:03:c9:df:3b:54:0c:8d:49:05:1d:ed:f8:f8:48:66:13:ca: 1b:c2:86:44:e3:74:7f:57:d3:b0:b8:4f:c9:b3:d7:5b:b9:01: 04:36:65:10:92:ca:6b:27:3c:07:f3:e2:10:82:4f:2a:29:45: 55:7a:f8:7f:21:aa:d3:62:18:17:7c:ed:a1:6a:59:71:c6:6d: 05:6b:3a:22:d7:ce:ad:39:29:32:b6:50:fa:53:b6:05:f6:47: ea:52:d6:9f:93:7d:5c:a7:2f:64:03:f7:bb:14:7e:21:9d:79: a8:0b:67:a9:03:ff:3e:e3:ed:23:ff:44:8a:21:79:eb:3f:95: 16:e3:5e:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9P4xELaQwuozEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ODc4M2Q1NTEtZjk2Mi00YmJkLWFjY2EtODZkM2YzZDYyMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PVPLRnrHkuCqcP8R32ogtQxCdT6R/BV0tyZ uhAqqLbkmrVDpxfYUVZt91m0oMqDWHNj2JTji+oYOL8kWRMI5asYPyNyJDifiibY 38wBrrthrjgaUr9yprONTv3RIkAT55VVu0Tgg/DHnkGOH1TLm+RGlttwchJwyPIk tEmKJOr2qAuVgEYLCxwFfczJspwog5FLUFkK6IN9zMwzpFR2DO2qIbwE85abj0XE xNpJ2x9/0XJ6HjUYfcvdzNR+sI2/BkrsThNFhLXnts76i5JzLfMeYorvTqIeDvbr 5ADepclF1SqY9+If8BDyvzDiwKGyeQE8hzA0aREMcCyGtX17awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWQ2IRpBZjrlwi4fv+ClX0utkQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE4N2E0MjEtYzNmYS0z YTNkLTgyY2UtYTUyYjY2MzA5ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9czeCRG9NjIVw4i2T3sCt2fTCKLtHprohi4CBzBKU6HjRD7pIuLiKB MIdT+2osq9YwL/8DI4HHKoBjASxxMXHpYpujIMjRcnnkhm8o0UHs14BCl1dXMtiS iHRi0qe8xu1mmC3KIBoyn46id0XA7kKz7Ww8m5DYvsOpnkgopN0Dyd87VAyNSQUd 7fj4SGYTyhvChkTjdH9X07C4T8mz11u5AQQ2ZRCSymsnPAfz4hCCTyopRVV6+H8h qtNiGBd87aFqWXHGbQVrOiLXzq05KTK2UPpTtgX2R+pS1p+TfVynL2QD97sUfiGd eagLZ6kD/z7j7SP/RIohees/lRbjXuQ= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:49 2026 by rpki-client