$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa File: febb0e75-40f1-37a9-a0a4-5dc80635d514.roa (raw, json) Hash identifier: EQN3hpqVX1yNAU/XImm5PK+2mKmYVl8luO6OT1NjROo= Subject key identifier: 4D:71:8C:C6:51:9D:3E:F3:AF:6A:2D:33:2E:94:F8:B0:AA:5B:9B:52 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E86F4F8D8CC344242F5EC5240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 3223 IP address blocks: 172.111.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f8:d8:cc:34:42:42:f5:ec:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=917d89c0-80de-40ea-8a76-b2942a22372c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:e0:0b:a7:41:91:00:d9:46:36:47:87:62: 4e:6b:d8:ff:4e:14:cb:2a:51:60:b7:fa:6d:3b:12: 0a:ba:7a:5e:46:59:ba:30:c4:65:33:a9:c4:7b:91: eb:a4:95:d8:1f:15:a6:88:0f:80:f6:43:a3:a8:9c: 9e:92:22:aa:75:81:a3:b5:3e:b7:81:88:72:ff:42: 73:a1:31:27:f3:f9:ef:91:78:91:00:ba:02:97:28: 0e:56:24:b0:17:6e:8d:0b:09:43:b0:49:66:83:ba: da:bc:10:d8:dc:da:aa:55:97:fa:1d:d4:9c:c6:53: b5:98:1b:db:d7:7c:0b:40:a9:48:5c:20:92:8b:22: 0c:74:8a:8c:cb:0a:dd:c3:d6:44:04:bb:bf:1d:99: 98:8e:64:15:8d:ce:b6:9a:51:88:8b:b7:3d:b5:48: 69:56:1d:00:76:4c:19:51:11:ee:2d:05:7b:c4:84: 68:7e:b1:b0:b0:eb:a4:50:f9:c6:05:b7:68:5f:6d: 7c:29:3c:4a:4f:06:22:2d:2a:4f:9c:ce:66:ff:56: 56:c3:76:01:80:87:12:04:7b:e9:05:c6:e3:11:73: d4:2a:d9:22:b6:88:c1:a3:ba:6e:27:a1:ab:8f:ca: 89:6c:1b:44:c6:71:1a:ce:e8:6a:94:5d:2d:1f:bf: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:71:8C:C6:51:9D:3E:F3:AF:6A:2D:33:2E:94:F8:B0:AA:5B:9B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:80:5f:ad:2e:c1:af:2e:4e:e6:d1:e9:ee:96:82:29:87:8c: cc:1a:4f:8d:c9:5d:69:8f:c2:7d:5d:69:1e:b1:86:31:db:cb: 86:d4:8f:fe:ab:f6:41:39:34:d1:a6:01:c1:a0:e1:1a:76:22: 7f:39:35:67:17:b2:1b:84:b7:82:30:a5:6e:71:7e:cb:2b:28: 5a:50:ac:13:00:60:72:6f:24:38:5b:f4:92:87:fd:c8:29:48: 0c:f0:43:63:27:01:11:97:c7:67:e6:90:a7:5a:d9:e8:39:e4: 3e:db:0a:93:60:db:c3:e2:2f:60:ff:df:7f:a9:f5:24:5f:1d: 1c:e9:27:70:fd:f3:52:29:1e:3d:aa:5c:45:28:03:72:57:b2: a9:38:e4:a7:0a:bd:25:af:8f:7d:95:89:34:a0:f5:be:1c:9f: 67:6f:dc:af:c1:1d:63:28:87:05:87:48:bb:94:d0:43:4c:84: 52:1b:f3:44:5c:ad:8c:b6:e1:9b:b3:3f:4a:1b:53:37:ea:61: 6f:82:30:c3:80:86:68:3d:45:51:2c:81:ce:0a:33:9a:f1:94: 8e:b1:2a:ef:5c:1f:ac:5a:bd:8a:02:83:3a:62:81:8e:90:f8: 05:e8:75:89:ef:16:d9:2b:2e:50:d6:c7:a3:d7:a9:5e:f1:16: dc:37:dc:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PjYzDRCQvXsUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk OTE3ZDg5YzAtODBkZS00MGVhLThhNzYtYjI5NDJhMjIzNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqTgC6dBkQDZRjZHh2JOa9j/ThTLKlFgt/pt OxIKunpeRlm6MMRlM6nEe5HrpJXYHxWmiA+A9kOjqJyekiKqdYGjtT63gYhy/0Jz oTEn8/nvkXiRALoClygOViSwF26NCwlDsElmg7ravBDY3NqqVZf6HdScxlO1mBvb 13wLQKlIXCCSiyIMdIqMywrdw9ZEBLu/HZmYjmQVjc62mlGIi7c9tUhpVh0AdkwZ URHuLQV7xIRofrGwsOukUPnGBbdoX218KTxKTwYiLSpPnM5m/1ZWw3YBgIcSBHvp BcbjEXPUKtkitojBo7puJ6Grj8qJbBtExnEazuhqlF0tH79QxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1xjMZRnT7zr2otMy6U+LCqW5tSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmViYjBlNzUtNDBmMS0z N2E5LWEwYTQtNWRjODA2MzVkNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuAX60uwa8uTubR6e6WgimHjMwaT43JXWmPwn1daR6xhjHby4bUj/6r 9kE5NNGmAcGg4Rp2In85NWcXshuEt4IwpW5xfssrKFpQrBMAYHJvJDhb9JKH/cgp SAzwQ2MnARGXx2fmkKda2eg55D7bCpNg28PiL2D/33+p9SRfHRzpJ3D981IpHj2q XEUoA3JXsqk45KcKvSWvj32ViTSg9b4cn2dv3K/BHWMohwWHSLuU0ENMhFIb80Rc rYy24ZuzP0obUzfqYW+CMMOAhmg9RVEsgc4KM5rxlI6xKu9cH6xavYoCgzpigY6Q +AXodYnvFtkrLlDWx6PXqV7xFtw33L8= -----END CERTIFICATE-----Generated at Tue Jul 21 01:33:11 2026 by rpki-client