$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa File: 3523baea-e454-3068-b7aa-2b5588e904f2.roa (raw, json) Hash identifier: 1mNyWFvPsegJtLnRtfAqvd6Ix6MOcOO5uUySFI0JHbA= Subject key identifier: 33:9F:70:8F:18:B3:9E:4D:88:8F:96:9F:DA:6F:84:D0:C2:DB:50:C7 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A59B7D5347AF315B789840 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 172.111.124.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:9b:7d:53:47:af:31:5b:78:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=d5edb4c6-84b2-4f32-b3a6-45108a52d6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:11:af:fe:6e:c1:08:71:01:88:07:ba:99: 7f:f0:3a:d5:c7:b6:bc:08:ba:27:7a:79:0f:57:d6: cd:04:de:f6:5d:e5:71:99:2e:dd:49:a4:e0:ec:89: 89:a2:df:6f:87:85:4c:4d:b0:3a:a6:d5:a0:21:21: 2f:86:f3:88:9b:ca:2b:4f:08:00:8e:d3:8d:e9:f2: 2c:d0:fa:e5:bd:58:56:24:7c:23:6f:8e:71:59:0f: 5b:c3:f5:be:7b:55:51:a4:63:d1:d4:d2:e9:fc:30: ab:58:7f:8f:c8:e0:09:6d:d3:f1:b7:cb:26:db:14: 70:9a:e5:72:f3:55:a0:55:e5:12:6f:23:4a:c0:68: f5:73:f9:9f:df:57:19:db:60:e0:49:ed:54:10:d3: 53:ec:fe:4a:05:d5:06:46:ae:41:9d:e7:2d:c1:67: bf:e8:d2:73:d6:01:3c:22:84:56:b2:72:23:25:db: e3:02:a5:d8:d6:3b:4e:66:16:1e:f2:c6:fd:bb:91: f6:df:09:07:79:17:27:db:5c:02:dd:8e:a6:56:84: 9a:3e:41:3f:54:8d:a4:fd:4b:d2:30:2d:33:2a:f4: b2:fb:47:22:96:f8:8a:73:ab:a6:ab:8e:4e:39:e6: ab:13:36:36:2c:7f:30:49:f2:37:1b:48:43:cc:0b: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:70:8F:18:B3:9E:4D:88:8F:96:9F:DA:6F:84:D0:C2:DB:50:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.124.64/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c6:67:6e:c9:68:76:4d:93:b1:ee:6b:49:72:7f:c1:b4:87: db:9e:62:44:0a:60:00:9c:58:b3:4d:6d:f0:ab:27:73:1b:46: 1f:d2:22:14:f3:eb:ca:19:a4:da:87:68:94:c5:0b:6b:d4:e5: 2e:a6:bb:79:e4:56:40:bb:a6:38:4f:cd:cb:73:3c:9a:20:33: 7f:df:bd:50:32:2a:9c:7b:95:8c:d1:39:af:83:9e:b8:33:f2: a7:95:ae:e0:7b:3f:fd:62:5c:12:ff:32:a8:0e:02:da:4f:37: 35:0b:6b:f5:60:e0:e3:28:ff:e5:ae:69:cf:d3:29:0a:c8:f5: 40:25:7d:93:f8:c6:a5:bf:f7:aa:03:80:d8:06:14:42:12:66: e6:f9:e6:7e:06:3b:65:c8:90:21:ac:53:6b:b1:81:fa:8f:00: 5f:da:c9:e9:70:2c:49:b1:70:d7:11:00:5c:72:07:b6:4c:60: 25:3d:1c:04:95:f7:9e:00:73:fe:cc:b6:1d:62:a6:43:31:bd: 5b:9f:5d:df:9c:34:c8:ee:cb:88:8e:ce:e5:2d:92:90:f3:8f: 40:45:2b:32:c6:da:f1:8f:24:79:a2:2c:59:2a:e3:1b:46:5d: 9b:d8:8a:ea:d4:1c:2f:cc:c2:04:e4:e0:85:09:97:8a:39:8d: 62:40:f6:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pZt9U0evMVt4mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDVlZGI0YzYtODRiMi00ZjMyLWIzYTYtNDUxMDhhNTJkNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn30Rr/5uwQhxAYgHupl/8DrVx7a8CLonenkP V9bNBN72XeVxmS7dSaTg7ImJot9vh4VMTbA6ptWgISEvhvOIm8orTwgAjtON6fIs 0PrlvVhWJHwjb45xWQ9bw/W+e1VRpGPR1NLp/DCrWH+PyOAJbdPxt8sm2xRwmuVy 81WgVeUSbyNKwGj1c/mf31cZ22DgSe1UENNT7P5KBdUGRq5BnectwWe/6NJz1gE8 IoRWsnIjJdvjAqXY1jtOZhYe8sb9u5H23wkHeRcn21wC3Y6mVoSaPkE/VI2k/UvS MC0zKvSy+0cilviKc6umq45OOearEzY2LH8wSfI3G0hDzAsV9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDOfcI8Ys55NiI+Wn9pvhNDC21DHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMzUyM2JhZWEtZTQ1NC0z MDY4LWI3YWEtMmI1NTg4ZTkwNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGrG98QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwxmduyWh2TZOx7mtJcn/BtIfbnmJECmAAnFizTW3wqydzG0Yf0iIU 8+vKGaTah2iUxQtr1OUuprt55FZAu6Y4T83LczyaIDN/371QMiqce5WM0Tmvg564 M/Knla7gez/9YlwS/zKoDgLaTzc1C2v1YODjKP/lrmnP0ykKyPVAJX2T+Malv/eq A4DYBhRCEmbm+eZ+BjtlyJAhrFNrsYH6jwBf2snpcCxJsXDXEQBccge2TGAlPRwE lfeeAHP+zLYdYqZDMb1bn13fnDTI7suIjs7lLZKQ849ARSsyxtrxjyR5oixZKuMb Rl2b2Irq1BwvzMIE5OCFCZeKOY1iQPbo -----END CERTIFICATE-----Generated at Sun May 3 17:53:52 2026 by rpki-client