$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa File: d718e811-5d3b-3e92-94a4-9ad6d104b712.roa (raw, json) Hash identifier: qxRVjV/RTtkpBZrTveOt0FXLorbgw72QflR7OnDbAq0= Subject key identifier: E6:72:A4:A3:FF:D3:8B:F0:D1:CA:EE:AE:8F:8C:BB:42:86:38:27:93 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EB416FBBB2E3BDE8522C53480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 6939 IP address blocks: 172.111.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:16:fb:bb:2e:3b:de:85:22:c5:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=c7a3db6e-d26b-4bcd-b53a-c1caf4456e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:3f:36:20:54:62:ac:45:2a:3d:88:2d:30: b5:d0:53:3c:fe:f2:b9:30:6b:f5:b5:b6:77:4a:41: de:2f:2a:f7:f0:90:d6:dd:a0:13:70:78:66:6c:6f: 11:5a:3d:a5:aa:89:19:4f:89:93:77:a2:94:21:d0: 64:6f:42:ee:ca:03:22:78:19:d9:50:6b:7b:98:7b: 7a:15:31:80:ea:4f:7b:81:f9:fa:a6:5a:90:0d:60: 4b:76:98:c2:6f:16:58:95:e6:76:fa:66:ec:2b:2c: d0:37:e0:32:38:89:3c:a2:b9:48:5a:47:35:73:18: 62:76:6c:cb:83:54:75:9f:53:15:8c:2a:d4:24:1d: a2:e9:97:70:01:f6:72:2a:6f:9b:23:6c:66:85:cd: f5:e4:bb:e8:98:88:95:6d:d9:a7:59:73:0d:0e:1d: a1:cc:db:86:a8:a8:00:6f:b6:e5:4d:ac:37:02:39: 4c:b8:b9:a8:d9:d6:ff:12:f4:a6:92:c2:28:e5:41: 41:94:ba:41:c0:ff:bd:42:bd:df:e4:49:ce:a2:cf: 4b:d1:b4:60:ad:49:b5:64:55:78:93:f2:9a:e0:00: 1e:e2:55:be:6f:40:a1:5c:d6:26:34:3e:6f:62:d1: 96:4d:58:22:2b:45:29:60:cb:5e:47:be:af:ed:c8: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:72:A4:A3:FF:D3:8B:F0:D1:CA:EE:AE:8F:8C:BB:42:86:38:27:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6d:cf:9d:eb:ea:56:69:73:b2:e2:56:9b:be:37:b9:4b:1b: d4:40:08:3f:18:ee:78:b7:f0:25:32:65:f4:49:69:f0:b5:41: bd:66:9c:a2:98:34:78:36:82:f6:2d:09:60:b8:d6:18:3a:3f: 29:46:c9:fe:76:85:f1:43:7c:5b:ed:49:d8:0f:bb:28:65:d3: 18:ef:de:a8:b1:a6:2a:74:03:8c:29:74:2c:eb:a4:70:fd:5c: 23:1a:2c:d5:98:bd:a9:7e:3d:e3:78:1d:40:8d:bd:cf:19:45: a0:eb:36:ec:dc:79:03:d9:20:79:f2:2d:9f:2e:dd:1f:db:c7: ca:d9:16:50:73:2d:90:67:5e:85:4f:8c:64:05:3c:84:09:0b: 30:86:22:83:f9:97:6f:e1:15:28:27:f5:f1:7c:d7:fe:e7:83: da:37:47:96:37:8c:d9:41:ba:43:8a:1c:94:38:22:64:91:69: 36:29:f5:4d:e2:62:5a:59:da:58:e8:01:7a:89:04:99:03:82: 6d:de:a0:ec:9e:6f:fa:44:fc:bc:11:69:af:7b:03:ef:49:5e: 2f:d5:41:58:36:a1:ed:c1:1c:a1:d5:33:74:20:84:14:b2:15: 8f:7e:24:33:f2:60:ec:3c:24:97:d7:ab:fa:aa:b5:44:6d:77: d5:9c:da:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60Fvu7LjvehSLFNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk YzdhM2RiNmUtZDI2Yi00YmNkLWI1M2EtYzFjYWY0NDU2ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW0/NiBUYqxFKj2ILTC10FM8/vK5MGv1tbZ3 SkHeLyr38JDW3aATcHhmbG8RWj2lqokZT4mTd6KUIdBkb0LuygMieBnZUGt7mHt6 FTGA6k97gfn6plqQDWBLdpjCbxZYleZ2+mbsKyzQN+AyOIk8orlIWkc1cxhidmzL g1R1n1MVjCrUJB2i6ZdwAfZyKm+bI2xmhc315LvomIiVbdmnWXMNDh2hzNuGqKgA b7blTaw3AjlMuLmo2db/EvSmksIo5UFBlLpBwP+9Qr3f5EnOos9L0bRgrUm1ZFV4 k/Ka4AAe4lW+b0ChXNYmND5vYtGWTVgiK0UpYMteR76v7cgaWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZypKP/04vw0cruro+Mu0KGOCeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDcxOGU4MTEtNWQzYi0z ZTkyLTk0YTQtOWFkNmQxMDRiNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNtz53r6lZpc7LiVpu+N7lLG9RACD8Y7ni38CUyZfRJafC1Qb1mnKKY NHg2gvYtCWC41hg6PylGyf52hfFDfFvtSdgPuyhl0xjv3qixpip0A4wpdCzrpHD9 XCMaLNWYval+PeN4HUCNvc8ZRaDrNuzceQPZIHnyLZ8u3R/bx8rZFlBzLZBnXoVP jGQFPIQJCzCGIoP5l2/hFSgn9fF81/7ng9o3R5Y3jNlBukOKHJQ4ImSRaTYp9U3i YlpZ2ljoAXqJBJkDgm3eoOyeb/pE/LwRaa97A+9JXi/VQVg2oe3BHKHVM3QghBSy FY9+JDPyYOw8JJfXq/qqtURtd9Wc2iI= -----END CERTIFICATE-----Generated at Fri Sep 4 20:58:49 2026 by rpki-client