$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa File: deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa (raw, json) Hash identifier: cBLBhNSMNHW51j3OhCaAbrKBL1ceDGvmQc+IFuCrm4k= Subject key identifier: A3:A7:26:FA:BA:43:DC:70:7B:9E:C9:8B:64:CA:06:D5:3B:55:F6:AA Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5975AA12C4BF0B46C4100 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 172.111.122.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:97:5a:a1:2c:4b:f0:b4:6c:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=1b12f038-6c92-4981-825e-457da23c52bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:ec:c9:51:f9:c4:de:21:29:a7:23:d2:bd: 87:ab:9b:62:7e:58:aa:57:d1:4a:dd:3a:2c:88:5a: e1:1a:93:b3:1d:77:e0:bd:7c:c9:1b:0d:69:fe:6d: 66:f6:49:ec:90:02:fd:27:f6:96:8d:82:e1:41:fd: d0:a1:f3:d4:f9:4c:75:cb:c2:eb:67:94:a3:0b:b0: fb:b7:b3:75:d5:e5:ee:16:f4:99:6f:47:90:e1:86: 7d:29:08:c6:36:e8:9a:be:9e:47:09:e0:b9:83:f4: 87:1b:31:fc:96:32:e5:9d:a6:23:d0:1e:64:11:9f: 9c:5f:32:ad:12:1f:73:c4:91:6e:8d:8a:93:ff:b8: bc:4e:d4:70:21:1b:d2:06:a9:46:56:04:b1:45:84: 2b:ec:37:62:cd:f8:68:b8:b1:39:6e:f5:02:14:31: 04:9b:87:d7:95:7f:27:39:d9:f9:ac:f4:4c:57:de: 19:32:a9:c5:e7:e0:51:97:15:03:a8:ce:b1:d6:e8: 25:cc:d8:f0:11:bf:ab:e9:18:82:58:c2:5d:e3:37: 95:b7:4f:9f:b8:89:08:5e:0d:27:12:fe:18:75:82: a2:b0:b3:ff:0f:1f:bb:7d:b2:10:7f:26:98:ae:b8: d9:95:db:e3:89:f4:fd:34:d1:a0:cc:55:0e:53:e6: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A7:26:FA:BA:43:DC:70:7B:9E:C9:8B:64:CA:06:D5:3B:55:F6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.122.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:93:2c:b3:cd:f0:64:db:cd:91:f1:cf:48:ba:cb:0d:8f:8a: c0:82:86:11:d1:5f:12:93:fb:e5:cb:24:a2:4a:02:52:4d:b6: 35:42:9e:6d:f8:16:0e:e8:fd:e7:cc:df:48:ee:9b:8d:6f:f1: 76:3d:4a:09:69:dd:00:42:40:05:20:da:60:f1:3e:78:53:8f: ac:62:d4:3a:37:cf:0a:b6:00:6d:ae:ba:d3:e7:03:11:45:4b: f2:f3:a4:b2:7f:30:61:97:e4:4f:29:0b:e1:a5:73:2d:83:28: 66:ea:a6:b9:66:f4:6c:63:f0:99:e3:04:a5:f2:5a:2f:70:9c: 13:ce:31:ef:ae:06:71:b9:0b:44:da:36:52:f2:34:02:fe:5d: 6d:d1:25:83:a3:2b:98:d5:12:a8:76:dd:f4:20:72:15:e8:4e: 18:df:50:c8:c4:b3:f8:33:28:ad:81:50:d8:f6:3b:a5:92:11: 6a:92:c6:df:4b:f0:2c:ad:e9:c5:b5:cd:60:f5:6f:39:e7:bc: b9:32:73:56:4e:86:a1:23:03:5e:f8:c8:e6:8b:16:15:9a:27: e5:52:5d:46:64:a6:ab:bf:bb:f0:cb:18:fc:fa:df:55:66:3e: 17:9e:9b:06:d4:40:da:0a:4a:67:60:98:ac:ca:d3:2f:bf:80: 58:2e:59:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pZdaoSxL8LRsQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk MWIxMmYwMzgtNmM5Mi00OTgxLTgyNWUtNDU3ZGEyM2M1MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vbsyVH5xN4hKacj0r2Hq5tifliqV9FK3Tos iFrhGpOzHXfgvXzJGw1p/m1m9knskAL9J/aWjYLhQf3QofPU+Ux1y8LrZ5SjC7D7 t7N11eXuFvSZb0eQ4YZ9KQjGNuiavp5HCeC5g/SHGzH8ljLlnaYj0B5kEZ+cXzKt Eh9zxJFujYqT/7i8TtRwIRvSBqlGVgSxRYQr7DdizfhouLE5bvUCFDEEm4fXlX8n Odn5rPRMV94ZMqnF5+BRlxUDqM6x1uglzNjwEb+r6RiCWMJd4zeVt0+fuIkIXg0n Ev4YdYKisLP/Dx+7fbIQfyaYrrjZldvjifT9NNGgzFUOU+Y6dwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKOnJvq6Q9xwe57Ji2TKBtU7VfaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZGVjYTFkOWMtZjU4Yy0z YzNlLWJjMTctMDdkYzFlODAxZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUErG96ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnkyyzzfBk282R8c9IussNj4rAgoYR0V8Sk/vlyySiSgJSTbY1Qp5t +BYO6P3nzN9I7puNb/F2PUoJad0AQkAFINpg8T54U4+sYtQ6N88KtgBtrrrT5wMR RUvy86SyfzBhl+RPKQvhpXMtgyhm6qa5ZvRsY/CZ4wSl8lovcJwTzjHvrgZxuQtE 2jZS8jQC/l1t0SWDoyuY1RKodt30IHIV6E4Y31DIxLP4MyitgVDY9julkhFqksbf S/AsrenFtc1g9W8557y5MnNWToahIwNe+MjmixYVmiflUl1GZKarv7vwyxj8+t9V Zj4XnpsG1EDaCkpnYJisytMvv4BYLlnw -----END CERTIFICATE-----Generated at Sun May 3 17:55:31 2026 by rpki-client