$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa File: dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa (raw, json) Hash identifier: y4x9/xWZYP1AxBSc3Bqvjzv0LByBNihreOhWqQ0e/pE= Subject key identifier: 25:32:EE:C2:35:4E:DA:9E:38:A5:2E:7C:42:59:CB:22:A6:9B:5A:F1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E561A11E743689F71F1DABF60 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 9009 IP address blocks: 172.111.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:11:e7:43:68:9f:71:f1:da:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=7fddb019-0f47-45a4-9103-cf5bcec34f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:6b:49:3e:44:3c:72:9d:41:5e:4c:56:f7: d4:af:74:00:f7:1a:45:1a:07:ef:bf:f7:9e:e7:60: a7:92:0d:ee:c9:ef:e1:ac:a0:35:24:fc:35:86:8f: a6:d4:3d:a1:f3:5e:9b:40:25:af:f8:84:8d:b9:9d: db:01:28:7f:97:b8:ba:73:60:6b:f2:a1:c8:fc:37: c5:8a:42:00:d6:27:f8:53:26:60:ea:4d:ec:13:5d: b1:c3:f8:2d:84:49:29:4d:e9:42:44:c5:84:cb:75: 89:25:c3:c9:3b:92:65:7e:c7:67:42:8e:d2:4f:2e: 7e:83:86:0e:45:fe:40:fd:47:5e:f9:ce:16:49:fd: ac:60:26:a0:bc:7f:40:c3:49:78:0f:af:f0:9d:3d: bb:b0:13:5c:64:96:39:3a:88:f7:6e:83:3b:d9:84: fc:c7:93:96:36:1b:cc:af:ee:3e:8f:e6:06:b8:a5: 03:43:ee:e5:c0:79:f0:d7:fb:06:36:93:3f:94:69: 63:45:ea:af:ef:00:05:cf:b1:65:0b:29:0a:31:c0: ab:76:d1:5a:c6:a3:ef:db:76:68:1c:a3:47:a6:db: 8d:c3:09:89:4a:b6:a1:73:87:53:08:c3:02:72:d6: 52:e1:33:11:dd:0d:93:57:ae:9f:d5:fe:65:24:2f: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:32:EE:C2:35:4E:DA:9E:38:A5:2E:7C:42:59:CB:22:A6:9B:5A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:5e:f5:a3:97:35:6b:86:c3:1c:0b:f1:4f:4c:cb:4d:28:d1: 90:07:7f:86:9c:8b:0f:cb:f7:25:9d:b6:1b:2d:40:ab:14:31: d1:c3:d1:40:db:42:aa:d7:cb:fa:f9:8b:6d:59:2a:58:81:18: 85:34:fb:4d:44:55:79:5d:c4:96:98:a1:0e:aa:ba:75:9e:79: 78:e8:60:9c:56:d0:81:cf:8d:d0:35:59:76:28:91:86:99:18: 04:75:7c:de:f9:85:36:6a:c1:19:ca:44:a2:f4:40:d6:e8:0f: 4c:aa:4e:87:a0:90:64:9f:74:ff:97:f3:6f:04:27:fe:6e:81: 1a:fa:c1:47:ec:1b:8b:65:e4:c6:c7:da:f5:61:5c:86:27:58: 59:3b:25:fb:50:e3:9a:7e:ad:c2:8b:bf:08:6f:ce:59:18:7f: a0:de:d0:a6:ce:f6:b6:be:c5:0a:04:17:7b:68:59:37:c9:8f: 9e:62:b0:ed:72:8c:ed:89:64:fd:1c:04:84:65:ab:d5:e1:f3: 76:cb:50:e9:1d:1e:d2:51:70:91:d2:dd:e7:cb:b5:13:8e:fa: a3:c3:34:5d:57:f6:94:3b:32:29:55:92:9e:4e:0c:4b:12:1a: 3d:83:18:48:20:94:89:ef:2a:c1:30:8f:33:8c:58:57:1d:8e: 55:6b:7d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGhHnQ2ifcfHav2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk N2ZkZGIwMTktMGY0Ny00NWE0LTkxMDMtY2Y1YmNlYzM0Zjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0VrST5EPHKdQV5MVvfUr3QA9xpFGgfvv/ee 52Cnkg3uye/hrKA1JPw1ho+m1D2h816bQCWv+ISNuZ3bASh/l7i6c2Br8qHI/DfF ikIA1if4UyZg6k3sE12xw/gthEkpTelCRMWEy3WJJcPJO5JlfsdnQo7STy5+g4YO Rf5A/Ude+c4WSf2sYCagvH9Aw0l4D6/wnT27sBNcZJY5Ooj3boM72YT8x5OWNhvM r+4+j+YGuKUDQ+7lwHnw1/sGNpM/lGljReqv7wAFz7FlCykKMcCrdtFaxqPv23Zo HKNHptuNwwmJSrahc4dTCMMCctZS4TMR3Q2TV66f1f5lJC+naQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUy7sI1TtqeOKUufEJZyyKmm1rxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGM3OWJjNGMtMjI1Yy0z YTdhLWE2NTItY2YzMWYwZTIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINe9aOXNWuGwxwL8U9My00o0ZAHf4aciw/L9yWdthstQKsUMdHD0UDb QqrXy/r5i21ZKliBGIU0+01EVXldxJaYoQ6qunWeeXjoYJxW0IHPjdA1WXYokYaZ GAR1fN75hTZqwRnKRKL0QNboD0yqToegkGSfdP+X828EJ/5ugRr6wUfsG4tl5MbH 2vVhXIYnWFk7JftQ45p+rcKLvwhvzlkYf6De0KbO9ra+xQoEF3toWTfJj55isO1y jO2JZP0cBIRlq9Xh83bLUOkdHtJRcJHS3efLtROO+qPDNF1X9pQ7MilVkp5ODEsS Gj2DGEgglInvKsEwjzOMWFcdjlVrfXs= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:24 2026 by rpki-client