$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dea34c47-07bf-3cb9-a6a6-f0869d6eb400.roa File: dea34c47-07bf-3cb9-a6a6-f0869d6eb400.roa (raw, json) Hash identifier: oNIuR3IlBirPc+u/yecdhzIc8BHfrFOIgCB3lE94kAE= Subject key identifier: 5C:B4:B7:D6:4C:D9:78:2A:E7:0C:37:5D:88:CA:90:0A:9B:42:D8:4E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E376485BF23CC6518249D3E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dea34c47-07bf-3cb9-a6a6-f0869d6eb400.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 132372 IP address blocks: 172.111.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:85:bf:23:cc:65:18:24:9d:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=9fcf1875-47c3-45b0-a33c-274565214652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bb:c0:d3:3a:b1:45:03:f2:08:a1:64:aa:ce: 39:cc:7b:39:98:81:85:31:6a:16:51:73:ff:25:9d: 4f:13:95:f1:6c:76:74:15:c2:7f:96:43:c3:49:4e: 7b:e7:94:2d:8a:a9:c0:88:a0:4e:e4:9c:e2:be:ce: 55:7c:e3:ef:54:e9:dc:14:8c:8f:d0:f0:fa:d1:4b: ef:1f:fa:d7:3b:0b:79:a8:33:3f:19:09:c7:3c:00: 68:12:0a:26:db:7c:f0:e4:66:82:df:b0:17:1c:33: a8:a7:79:62:57:e5:bb:fb:9c:47:82:c4:47:f6:12: ec:30:40:82:de:69:af:ef:34:c5:d2:43:d3:5d:67: 7e:ae:b6:2d:c9:d6:7f:07:c2:05:24:ab:81:b4:a1: 0b:7c:5d:68:f2:51:be:9e:64:87:30:e1:0d:b4:e2: 3a:4b:6d:05:04:56:56:e8:74:bd:0f:b4:ff:14:8f: eb:44:3c:01:18:23:7f:b5:13:9b:9c:7b:fa:1a:43: 10:f9:29:4f:44:85:b3:20:68:27:ce:a5:ea:68:85: 48:b8:01:5f:87:6d:3f:a7:c4:0d:af:a2:22:8a:79: 93:5b:7e:96:e4:4a:30:28:23:8e:dd:98:a4:2d:6a: 8f:94:64:1b:a1:31:10:fe:4b:8f:3d:2b:e4:1e:29: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B4:B7:D6:4C:D9:78:2A:E7:0C:37:5D:88:CA:90:0A:9B:42:D8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dea34c47-07bf-3cb9-a6a6-f0869d6eb400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2b:28:b6:96:13:01:c9:75:30:47:e7:ac:3b:2e:fb:55:0c: 19:25:32:19:ab:95:3c:90:3b:09:de:fa:9d:eb:a2:18:6e:48: 1f:b2:a7:68:d4:84:3b:7c:bd:2a:79:34:dd:a3:cb:ca:c0:a5: d8:a6:38:a9:8f:63:6a:05:fc:cc:aa:1a:7e:98:3f:c8:7d:df: 5f:16:18:c0:61:60:5e:17:24:a1:00:57:6e:47:0b:66:e0:da: 21:14:29:49:71:42:5b:d5:f5:43:7d:f0:06:06:08:00:9e:a3: fa:28:3b:0d:b6:08:5d:9c:dc:4a:3f:9a:e5:96:be:31:b1:b3: 37:be:9f:55:c1:31:2c:e1:6f:8f:9a:4c:cd:5a:98:21:dc:8d: 84:78:af:8f:2c:21:3c:65:1d:80:32:a3:0c:e3:3e:2b:35:00: 24:44:cc:cc:a9:dc:86:8d:72:e8:c5:7b:89:82:e0:98:52:64: 90:5a:ee:24:f7:f8:54:bd:79:35:18:d3:08:45:3e:80:83:ad: 42:5a:36:95:19:f0:6a:e8:3a:d0:41:6a:b9:e3:69:d6:cf:b6: 36:fe:55:02:75:3a:04:9b:a9:4c:40:8b:68:29:4b:4a:7b:7d: f2:f2:aa:99:e9:4c:32:9f:21:4a:85:b7:80:5a:72:fd:c9:65: b8:57:a1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIW/I8xlGCSdPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk OWZjZjE4NzUtNDdjMy00NWIwLWEzM2MtMjc0NTY1MjE0NjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7vA0zqxRQPyCKFkqs45zHs5mIGFMWoWUXP/ JZ1PE5XxbHZ0FcJ/lkPDSU5755QtiqnAiKBO5Jzivs5VfOPvVOncFIyP0PD60Uvv H/rXOwt5qDM/GQnHPABoEgom23zw5GaC37AXHDOop3liV+W7+5xHgsRH9hLsMECC 3mmv7zTF0kPTXWd+rrYtydZ/B8IFJKuBtKELfF1o8lG+nmSHMOENtOI6S20FBFZW 6HS9D7T/FI/rRDwBGCN/tRObnHv6GkMQ+SlPRIWzIGgnzqXqaIVIuAFfh20/p8QN r6IiinmTW36W5EowKCOO3ZikLWqPlGQboTEQ/kuPPSvkHinnkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy0t9ZM2Xgq5ww3XYjKkAqbQthOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGVhMzRjNDctMDdiZi0z Y2I5LWE2YTYtZjA4NjlkNmViNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcrKLaWEwHJdTBH56w7LvtVDBklMhmrlTyQOwne+p3rohhuSB+yp2jU hDt8vSp5NN2jy8rApdimOKmPY2oF/MyqGn6YP8h9318WGMBhYF4XJKEAV25HC2bg 2iEUKUlxQlvV9UN98AYGCACeo/ooOw22CF2c3Eo/muWWvjGxsze+n1XBMSzhb4+a TM1amCHcjYR4r48sITxlHYAyowzjPis1ACREzMyp3IaNcujFe4mC4JhSZJBa7iT3 +FS9eTUY0whFPoCDrUJaNpUZ8GroOtBBarnjadbPtjb+VQJ1OgSbqUxAi2gpS0p7 ffLyqpnpTDKfIUqFt4Bacv3JZbhXofE= -----END CERTIFICATE-----Generated at Tue Jul 21 14:59:52 2026 by rpki-client