$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3df69ff-f425-38f5-8b93-d3fd879b2478.roa File: d3df69ff-f425-38f5-8b93-d3fd879b2478.roa (raw, json) Hash identifier: lZ6SQmoZ6XRjcofIGauuX13XbBhkt39/sYX5k7hrLgc= Subject key identifier: 47:ED:01:1A:AC:58:A9:6E:87:61:26:28:D2:32:7B:18:CE:B9:D2:48 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E00E2366F1F7525D4D17C2300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3df69ff-f425-38f5-8b93-d3fd879b2478.roa Signing time: Sat 30 May 2026 08:24:18 +0000 ROA not before: Sat 30 May 2026 08:24:18 +0000 ROA not after: Fri 28 Aug 2026 08:24:18 +0000 asID: 206535 IP address blocks: 172.111.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:e2:36:6f:1f:75:25:d4:d1:7c:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 30 08:24:18 2026 GMT Not After : Aug 28 08:24:18 2026 GMT Subject: CN=89444ddb-2bd0-4276-96d2-6ec2d62f6664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:58:e7:f9:b0:bd:a6:e8:40:b4:7f:f7:78: 24:16:5c:04:66:ba:68:50:76:ce:2c:18:c6:4e:a1: e5:f6:ff:86:37:80:eb:c9:88:c0:79:c1:66:10:90: d8:e2:2f:55:1d:92:92:57:37:01:ed:0c:65:6e:97: 7e:89:e6:35:24:fe:89:0d:27:b7:7b:98:16:43:6c: 08:d4:38:ca:39:f5:b8:3e:9f:35:02:f0:cc:47:78: da:2b:e2:5b:46:bd:a6:a5:43:e2:34:34:f7:2b:bb: e2:6d:7a:e5:9b:e5:40:ca:d4:1e:cb:53:af:0a:0b: c3:d4:18:8a:e6:d4:e5:07:42:3d:b2:8e:2d:7f:d3: 9a:76:24:bf:ee:43:4e:cb:ba:13:d1:b2:4f:49:3c: e1:64:74:7e:0f:5b:78:1a:a7:58:f6:24:70:3d:1c: 8a:53:a3:8a:e2:73:06:49:c5:a3:61:fe:b4:46:96: 61:59:38:8b:7b:26:b4:ea:8f:70:14:e4:5a:48:73: ba:fa:8b:98:f9:b4:90:3b:77:eb:77:2f:09:6d:1c: 9f:e4:4f:fb:06:88:6d:8c:93:38:e7:1f:a7:45:38: d7:ba:64:a2:0e:be:f4:c4:c9:06:25:7c:dc:3f:a9: 4f:16:33:a9:13:1e:52:ef:0d:dc:c3:18:64:69:b0: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:ED:01:1A:AC:58:A9:6E:87:61:26:28:D2:32:7B:18:CE:B9:D2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3df69ff-f425-38f5-8b93-d3fd879b2478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:44:aa:1c:15:3c:51:23:ce:3a:bb:1c:42:ce:e3:2e:62:9f: a7:43:f8:0c:63:88:c3:1d:f7:75:82:e1:0f:5d:bb:db:8f:97: f9:76:43:63:65:92:82:f3:cd:8a:11:f3:76:1d:18:fd:4a:e3: 96:3a:4b:bf:e8:30:8c:cb:d9:10:b0:ba:01:8f:79:28:b9:11: f4:c4:6c:52:4a:71:8e:33:f3:ee:49:59:5f:19:af:9c:d4:3e: 30:34:a0:04:9c:3a:59:b1:e6:9b:52:ce:c9:92:92:86:af:3e: 7f:c8:4a:54:2f:f8:eb:fe:89:46:8c:1e:ec:17:d7:85:55:04: f2:9e:70:38:9a:73:a5:0e:38:40:fb:c7:b7:f0:7b:45:f8:6f: 01:cc:58:97:97:5a:14:07:5a:77:7f:25:da:2a:d4:d2:0f:8a: 0f:93:9d:c0:f4:93:e1:48:92:47:5c:33:5e:bd:9a:3e:d5:c3: 79:c3:0f:ec:79:dc:c7:c8:99:ce:1c:39:6a:6d:61:42:c2:e0: 3b:d1:d7:fe:0e:9e:dc:c3:af:83:1d:f2:5f:04:7d:c2:05:65: 54:df:66:44:ed:e8:87:10:9a:34:84:23:fd:8c:a7:12:a9:9b: 6b:1e:1c:71:6c:81:ca:f8:d6:7a:bd:f5:0d:80:3c:f7:0f:b5: cf:9f:c8:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4A4jZvH3Ul1NF8IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUzMDA4MjQxOFoXDTI2MDgyODA4MjQxOFowLzEtMCsGA1UEAxMk ODk0NDRkZGItMmJkMC00Mjc2LTk2ZDItNmVjMmQ2MmY2NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaVY5/mwvaboQLR/93gkFlwEZrpoUHbOLBjG TqHl9v+GN4DryYjAecFmEJDY4i9VHZKSVzcB7Qxlbpd+ieY1JP6JDSe3e5gWQ2wI 1DjKOfW4Pp81AvDMR3jaK+JbRr2mpUPiNDT3K7vibXrlm+VAytQey1OvCgvD1BiK 5tTlB0I9so4tf9OadiS/7kNOy7oT0bJPSTzhZHR+D1t4GqdY9iRwPRyKU6OK4nMG ScWjYf60RpZhWTiLeya06o9wFORaSHO6+ouY+bSQO3frdy8JbRyf5E/7BohtjJM4 5x+nRTjXumSiDr70xMkGJXzcP6lPFjOpEx5S7w3cwxhkabB/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEftARqsWKluh2EmKNIyexjOudJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDNkZjY5ZmYtZjQyNS0z OGY1LThiOTMtZDNmZDg3OWIyNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACREqhwVPFEjzjq7HELO4y5in6dD+AxjiMMd93WC4Q9du9uPl/l2Q2Nl koLzzYoR83YdGP1K45Y6S7/oMIzL2RCwugGPeSi5EfTEbFJKcY4z8+5JWV8Zr5zU PjA0oAScOlmx5ptSzsmSkoavPn/ISlQv+Ov+iUaMHuwX14VVBPKecDiac6UOOED7 x7fwe0X4bwHMWJeXWhQHWnd/Jdoq1NIPig+TncD0k+FIkkdcM169mj7Vw3nDD+x5 3MfImc4cOWptYULC4DvR1/4OntzDr4Md8l8EfcIFZVTfZkTt6IcQmjSEI/2MpxKp m2seHHFsgcr41nq99Q2APPcPtc+fyBA= -----END CERTIFICATE-----Generated at Thu Jun 4 10:00:22 2026 by rpki-client