$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa File: f3a11e3c-29b8-3899-a1d3-970745a11a14.roa (raw, json) Hash identifier: 2qP36D39mz6ooXfVVFeMfF/8rGs0CZDnYWCLa2PwXLE= Subject key identifier: 25:07:A0:EF:03:BA:43:B2:CD:4A:D1:F2:25:56:08:99:E7:0E:C3:0A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E0A6FF855322FA7D4DCF07B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 16509 IP address blocks: 172.111.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f8:55:32:2f:a7:d4:dc:f0:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=2613374b-2981-44ed-a7d3-196fb0706327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:e1:2a:5c:d0:81:6f:64:77:ca:f1:e0:c0: 80:bc:c1:1b:c1:dd:0b:c6:08:a4:a9:24:a2:ec:d3: 91:d4:3c:47:5b:18:74:5e:e0:d9:93:77:c9:a8:2d: dc:4e:98:e0:02:4a:be:9e:0e:76:c7:1a:8c:49:f6: fe:1d:26:f7:da:0d:34:e9:11:2e:ec:f4:1f:37:ac: 89:1b:02:b7:bc:b9:95:c2:23:be:46:06:c6:44:22: 07:40:fa:03:4d:8a:07:f2:d5:c9:e6:97:6b:4e:38: 21:80:66:b4:7d:59:61:c2:8e:5d:5e:fa:82:60:d1: 91:9b:8a:c7:5a:3c:5e:15:53:e0:95:18:86:01:39: 26:8f:88:37:99:76:3d:05:89:48:87:9f:05:21:f2: 6f:ac:12:fd:d6:05:51:24:47:b4:55:3e:7f:64:ad: 61:50:3a:36:27:e6:96:28:c1:26:ff:88:d0:43:70: 15:67:cd:76:c0:f0:d6:fa:4b:2b:35:86:6d:3c:a5: e6:00:4c:12:55:c5:36:7b:ab:27:4a:bf:fb:86:e1: b7:88:1b:31:25:12:3e:8b:f7:4f:53:f1:a1:bc:f2: 8b:35:4b:49:54:0d:c3:7a:e1:e8:9a:03:5f:1d:a4: 66:9f:a4:94:85:77:d3:d4:38:a9:32:33:99:d4:fa: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:07:A0:EF:03:BA:43:B2:CD:4A:D1:F2:25:56:08:99:E7:0E:C3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f7:26:49:ae:4f:36:50:af:03:71:71:01:97:e9:99:b2:f7: 6d:f2:26:85:93:8a:60:d7:4d:f1:d8:db:14:b0:3f:0e:4b:a8: 26:fd:c4:b2:56:e3:f7:85:9a:cb:99:bc:08:fb:17:f0:89:cb: d5:64:5e:fb:9e:fa:05:aa:c0:40:5b:a3:06:bb:cd:d1:8a:4f: d3:06:1c:0c:7b:b4:a5:84:4c:02:48:48:e3:fc:f7:e4:82:4a: 12:f4:1c:ff:fa:33:1d:33:82:73:f6:1a:47:0e:e0:97:35:ab: d3:cc:51:36:92:b3:6c:32:cd:88:0a:5b:cc:ca:89:a9:b0:57: a6:94:d9:b5:b7:72:28:c5:d0:fc:3e:b3:81:ea:b2:4a:9f:0e: 10:27:17:aa:9a:ec:68:1c:e7:88:92:c6:19:e7:92:13:ba:0b: 18:5f:c4:ee:61:c2:b6:f6:dc:7d:79:b3:d5:e5:dd:c9:52:50: c9:fe:2b:c6:62:d5:83:31:ad:ef:f0:17:1b:a3:ce:d4:20:b2: cf:e3:f6:04:73:ac:dc:5d:78:53:e4:1b:cc:f5:14:20:a3:fd: 59:dc:02:01:9c:e7:df:37:1f:bc:e4:5c:03:18:18:a0:7b:3e: 17:67:f0:ee:ea:27:f6:b7:4b:ea:c2:b4:32:e5:8d:df:48:b8: ef:a0:f3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/hVMi+n1Nzwe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MjYxMzM3NGItMjk4MS00NGVkLWE3ZDMtMTk2ZmIwNzA2MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2DhKlzQgW9kd8rx4MCAvMEbwd0LxgikqSSi 7NOR1DxHWxh0XuDZk3fJqC3cTpjgAkq+ng52xxqMSfb+HSb32g006REu7PQfN6yJ GwK3vLmVwiO+RgbGRCIHQPoDTYoH8tXJ5pdrTjghgGa0fVlhwo5dXvqCYNGRm4rH WjxeFVPglRiGATkmj4g3mXY9BYlIh58FIfJvrBL91gVRJEe0VT5/ZK1hUDo2J+aW KMEm/4jQQ3AVZ812wPDW+ksrNYZtPKXmAEwSVcU2e6snSr/7huG3iBsxJRI+i/dP U/GhvPKLNUtJVA3DeuHomgNfHaRmn6SUhXfT1DipMjOZ1Po9VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUHoO8DukOyzUrR8iVWCJnnDsMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjNhMTFlM2MtMjliOC0z ODk5LWExZDMtOTcwNzQ1YTExYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD3JkmuTzZQrwNxcQGX6Zmy923yJoWTimDXTfHY2xSwPw5LqCb9xLJW 4/eFmsuZvAj7F/CJy9VkXvue+gWqwEBbowa7zdGKT9MGHAx7tKWETAJISOP89+SC ShL0HP/6Mx0zgnP2GkcO4Jc1q9PMUTaSs2wyzYgKW8zKiamwV6aU2bW3cijF0Pw+ s4HqskqfDhAnF6qa7Ggc54iSxhnnkhO6CxhfxO5hwrb23H15s9Xl3clSUMn+K8Zi 1YMxre/wFxujztQgss/j9gRzrNxdeFPkG8z1FCCj/VncAgGc5983H7zkXAMYGKB7 Phdn8O7qJ/a3S+rCtDLljd9IuO+g8x0= -----END CERTIFICATE-----Generated at Thu Jun 4 10:07:46 2026 by rpki-client