
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa
File: ef79e838-59d8-3228-8050-1413d2bdbb7c.roa (raw, json)
Hash identifier: /raTDbNHo1s+HJme1g0v3cYDqzWBhCIfMu6Kh/K+syk=
Subject key identifier: DF:B5:73:16:18:6F:60:7A:D4:02:AB:52:48:B8:5B:8B:ED:76:DD:8F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584EA79C45DF6EA22909632DB680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 202656
IP address blocks: 172.111.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:45:df:6e:a2:29:09:63:2d:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e5f68f48-e50d-498e-87e9-64d55c29b312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:e4:47:b4:48:3f:c1:f3:a0:4b:36:98:1f:
a7:23:b4:b6:57:12:46:04:27:26:1b:55:41:27:4d:
02:7b:92:84:08:9e:c7:ae:a0:b2:4c:84:4e:2c:83:
81:25:08:4a:ed:fc:9a:ae:10:4d:5f:80:1f:18:51:
7a:d1:5c:c7:2f:17:5d:5b:ff:7e:84:bf:05:89:8c:
61:d7:29:c2:69:1a:c8:4c:ec:76:d6:a6:bd:ac:be:
8d:dc:57:7d:46:d0:8c:1c:a1:7f:69:ab:91:a8:62:
46:e5:3d:ba:6f:9c:11:6d:64:c4:1b:17:a9:20:dd:
ed:52:f3:83:ca:7a:93:06:6b:38:2d:10:82:39:1c:
98:f9:92:9e:ff:e7:62:ac:69:b7:4c:18:ee:dd:92:
ee:d0:ff:ab:a4:b5:36:9a:1a:3e:c7:32:a8:e2:e4:
74:b2:be:9f:8c:4b:d0:cd:1c:36:e5:0a:8e:76:59:
1a:3b:49:af:c7:c2:5d:0c:5e:67:9b:e2:e7:1c:7c:
c0:02:ac:ce:2c:1f:7b:13:a9:08:fb:4c:8f:4f:6f:
21:98:e8:b0:2b:65:21:e3:f3:a1:6d:1d:96:4c:dd:
b5:7b:32:21:75:f4:7b:58:6e:c4:be:56:95:fa:5e:
30:55:ed:f8:c8:c5:41:8f:22:a3:30:8b:b7:e6:cb:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B5:73:16:18:6F:60:7A:D4:02:AB:52:48:B8:5B:8B:ED:76:DD:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:29:f3:c0:20:72:d4:74:65:39:e0:6d:c0:72:fa:12:17:38:
95:12:4b:63:fb:4d:8f:0c:ee:f5:9c:b3:47:fa:13:60:b1:46:
b5:64:a5:b5:c6:41:b3:ef:8b:4a:7c:ab:a9:38:9d:56:0d:93:
07:05:68:73:59:f3:ac:d6:c8:dd:8b:ab:66:7d:11:7d:a6:c6:
d4:de:86:b2:37:d3:31:11:a1:c0:64:07:05:28:b6:aa:b9:75:
f4:b3:f9:68:23:1a:0d:5a:c5:f3:7e:b8:06:8c:cf:fc:3a:7e:
b2:f1:d0:f8:3f:5a:3c:b1:03:08:93:6e:82:24:f6:25:1b:93:
7a:87:a1:ce:dd:e6:ff:5a:d9:57:05:16:d2:ae:39:b8:b0:e1:
70:ca:f2:dd:fb:ef:43:75:8a:77:f6:86:c7:b0:7a:54:d8:cc:
55:f3:89:b1:d8:26:a2:3e:44:18:c6:5e:d0:92:09:59:82:db:
21:a2:a0:db:de:1f:51:10:b3:8e:15:c1:9d:d8:59:32:50:d8:
71:5e:a8:23:29:34:1a:28:81:aa:67:a3:a6:f6:8b:cd:e4:40:
38:f8:9f:0e:86:09:45:fe:6f:1e:c6:61:29:24:68:ab:62:cf:
bc:8c:68:eb:09:b7:0f:ee:17:c1:f5:71:20:70:3a:0b:10:91:
e4:da:e3:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnEXfbqIpCWMttoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTVmNjhmNDgtZTUwZC00OThlLTg3ZTktNjRkNTVjMjliMzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQHkR7RIP8HzoEs2mB+nI7S2VxJGBCcmG1VB
J00Ce5KECJ7HrqCyTIROLIOBJQhK7fyarhBNX4AfGFF60VzHLxddW/9+hL8FiYxh
1ynCaRrITOx21qa9rL6N3Fd9RtCMHKF/aauRqGJG5T26b5wRbWTEGxepIN3tUvOD
ynqTBms4LRCCORyY+ZKe/+dirGm3TBju3ZLu0P+rpLU2mho+xzKo4uR0sr6fjEvQ
zRw25QqOdlkaO0mvx8JdDF5nm+LnHHzAAqzOLB97E6kI+0yPT28hmOiwK2Uh4/Oh
bR2WTN21ezIhdfR7WG7EvlaV+l4wVe34yMVBjyKjMIu35ss3uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+1cxYYb2B61AKrUki4W4vtdt2PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWY3OWU4MzgtNTlkOC0z
MjI4LTgwNTAtMTQxM2QyYmRiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8p88AgctR0ZTngbcBy+hIXOJUSS2P7TY8M7vWcs0f6E2CxRrVkpbXG
QbPvi0p8q6k4nVYNkwcFaHNZ86zWyN2Lq2Z9EX2mxtTehrI30zERocBkBwUotqq5
dfSz+WgjGg1axfN+uAaMz/w6frLx0Pg/WjyxAwiTboIk9iUbk3qHoc7d5v9a2VcF
FtKuObiw4XDK8t3770N1inf2hsewelTYzFXzibHYJqI+RBjGXtCSCVmC2yGioNve
H1EQs44VwZ3YWTJQ2HFeqCMpNBoogapno6b2i83kQDj4nw6GCUX+bx7GYSkkaKti
z7yMaOsJtw/uF8H1cSBwOgsQkeTa43Q=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:51:06 2026 by rpki-client