$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa File: f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa (raw, json) Hash identifier: 3ANnTpCKfx8Sa7vf9PBBOeVZJ0OpOaUAMzlvpGzlnC4= Subject key identifier: 8A:81:7C:F4:AF:C5:F2:9A:9C:84:FC:54:A9:F5:BE:72:48:26:6B:B3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E736A227116536C0946433000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 9009 IP address blocks: 172.111.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:22:71:16:53:6c:09:46:43:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=fca1a1cd-0666-446c-bd09-02fe3071b8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:66:a6:cd:f3:78:6c:72:7c:3b:4f:41:d1: fa:33:38:22:91:92:f6:b5:83:cd:88:14:38:ad:5e: 01:2c:2f:ae:f2:04:43:6f:c3:61:da:72:04:67:1c: 22:36:c7:cd:ce:e9:f1:04:fb:5b:be:46:75:5b:64: 81:2d:f9:6a:55:ad:2c:76:5d:27:d3:e5:fd:2a:97: 47:d9:78:cf:df:ea:ea:a8:ac:ad:86:29:cb:b4:7f: 40:38:46:bb:a6:2a:45:5c:97:d1:17:2f:ec:d3:d9: 3b:27:91:96:8d:38:63:ce:26:b1:cc:93:c3:1c:70: 2f:8b:a0:24:ec:e6:94:4a:2a:67:2b:26:05:c4:a4: 7c:4a:cc:c0:8d:db:d9:14:ce:e7:4c:d1:62:a2:8f: 87:2d:a9:4d:4c:2e:f8:b4:1c:7f:05:fb:c0:90:3c: bd:4d:de:70:2a:11:23:91:56:48:6d:2b:35:8d:a8: b8:3f:20:c3:b0:e8:26:5c:7a:8e:02:ee:b7:14:8d: 87:8a:ee:c0:1b:f5:14:4e:cf:7b:e6:80:e3:67:a7: f6:87:90:16:b5:ac:42:22:de:ea:bb:eb:40:51:7b: a2:3c:0d:2a:be:2c:ea:d9:15:02:31:4c:a6:93:06: 20:42:65:c1:f2:0c:38:12:26:11:cc:fc:09:c5:8a: 3b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:81:7C:F4:AF:C5:F2:9A:9C:84:FC:54:A9:F5:BE:72:48:26:6B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:66:49:49:9f:85:12:97:b3:a9:ae:3f:7c:53:7b:cc:11:0f: ec:89:8b:cf:be:ef:b0:dd:02:2b:0d:1b:67:f4:9d:b1:fc:03: 2b:e5:08:7c:37:92:99:8b:ec:ca:05:76:1c:65:d7:73:81:7d: c5:4b:4f:e5:45:47:e3:5e:22:57:be:f2:19:7a:5b:c2:94:52: 18:9f:35:ca:7f:30:e9:b7:6a:1d:5d:ab:41:1f:0b:bf:46:73: dc:6e:3e:e0:fb:be:b1:ff:31:ac:0d:69:a0:d3:f4:89:29:e9: cb:84:49:4c:1d:6d:80:70:e3:65:38:c8:8e:12:7b:d4:03:c2: f3:02:f0:fe:a8:a0:bd:44:0d:65:53:89:1f:ee:a2:21:13:64: 92:02:d5:c7:b6:e0:b9:8a:54:42:47:50:eb:a6:60:d1:dc:c0: aa:ea:00:e9:25:5b:a0:aa:03:4d:96:8c:3d:6c:9c:c7:26:7b: 35:2b:c1:e0:46:8d:2c:03:96:0c:f8:96:bd:b6:0a:ee:86:53: e0:36:6b:39:9a:a8:90:dc:01:d4:39:5e:58:39:be:a4:dc:dd: ce:8f:ea:dc:f8:b3:ec:d7:5c:7b:b9:74:c9:bf:d2:c9:fc:73: df:08:76:a3:1b:56:19:96:38:47:d6:bd:42:58:bb:6b:2b:b1: 27:5b:6a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiJxFlNsCUZDMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk ZmNhMWExY2QtMDY2Ni00NDZjLWJkMDktMDJmZTMwNzFiOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWpmps3zeGxyfDtPQdH6MzgikZL2tYPNiBQ4 rV4BLC+u8gRDb8Nh2nIEZxwiNsfNzunxBPtbvkZ1W2SBLflqVa0sdl0n0+X9KpdH 2XjP3+rqqKythinLtH9AOEa7pipFXJfRFy/s09k7J5GWjThjziaxzJPDHHAvi6Ak 7OaUSipnKyYFxKR8SszAjdvZFM7nTNFioo+HLalNTC74tBx/BfvAkDy9Td5wKhEj kVZIbSs1jai4PyDDsOgmXHqOAu63FI2Hiu7AG/UUTs975oDjZ6f2h5AWtaxCIt7q u+tAUXuiPA0qvizq2RUCMUymkwYgQmXB8gw4EiYRzPwJxYo71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqBfPSvxfKanIT8VKn1vnJIJmuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjhkZGI2YTgtMmU3MC0z NzFkLTkzZTQtNzJmY2QzMzYzMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJmSUmfhRKXs6muP3xTe8wRD+yJi8++77DdAisNG2f0nbH8AyvlCHw3 kpmL7MoFdhxl13OBfcVLT+VFR+NeIle+8hl6W8KUUhifNcp/MOm3ah1dq0EfC79G c9xuPuD7vrH/MawNaaDT9Ikp6cuESUwdbYBw42U4yI4Se9QDwvMC8P6ooL1EDWVT iR/uoiETZJIC1ce24LmKVEJHUOumYNHcwKrqAOklW6CqA02WjD1snMcmezUrweBG jSwDlgz4lr22Cu6GU+A2azmaqJDcAdQ5Xlg5vqTc3c6P6tz4s+zXXHu5dMm/0sn8 c98IdqMbVhmWOEfWvUJYu2srsSdbaqg= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:46 2026 by rpki-client