$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json) Hash identifier: XO/7gA2jk3mXpihwwy/UB+ZAY0d0OGdYVE/sfe4bQX0= Subject key identifier: D7:C4:4D:4E:FC:07:C9:5E:A1:15:2E:89:B5:2D:CF:32:87:9F:98:A0 Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584DC830438A800D4A135D7B4F00 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 393909 IP address blocks: 172.86.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:43:8a:80:0d:4a:13:5d:7b:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=ca504354-8139-4650-a9d3-9aad794b377e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:7b:c6:1b:fd:08:a5:25:5d:25:91:6c:44: 24:cf:d2:35:56:c0:b0:dc:c6:c0:4e:e0:0d:10:2a: 4f:79:c2:16:0c:f7:6f:fc:34:9e:76:c9:78:2c:34: 3c:f6:5f:c9:90:09:74:56:0c:e2:ad:3d:a2:4d:96: 05:29:f1:43:b8:3b:61:cd:62:37:26:63:7b:e5:99: 1d:be:d4:d2:98:ec:0c:30:9a:0e:3a:46:74:67:33: a9:da:f0:7b:8a:24:02:b4:eb:b1:86:b4:b8:92:b1: 29:f3:b8:d8:db:ac:57:d5:51:7e:8c:8e:65:f5:5a: 04:0a:9e:9b:ca:8a:08:40:fd:83:13:ae:20:f0:3b: 53:67:41:ef:c2:a1:8d:d2:ff:51:7c:05:cd:54:a1: 35:c1:ef:23:81:27:e5:6b:bd:a2:d6:41:24:b1:cc: d6:d0:9c:96:98:d0:07:7a:52:ec:66:4d:10:4e:07: d0:03:60:8b:b3:10:31:8e:8c:05:d6:7d:10:1e:70: 77:26:ec:aa:c6:6b:2b:d9:4f:8e:3a:af:35:dc:4b: 58:32:b3:e7:82:12:f4:38:96:40:d7:2f:ea:c8:46: 47:51:b0:a2:d7:6f:a4:98:02:f9:bc:70:52:a1:a8: 0a:34:7c:51:a8:3c:c9:28:e6:97:cf:58:87:4b:be: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C4:4D:4E:FC:07:C9:5E:A1:15:2E:89:B5:2D:CF:32:87:9F:98:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 172.86.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:68:c6:a6:4a:5a:f4:43:cc:75:8f:bd:f0:fe:68:cd:10:84: 25:90:8b:79:dc:af:21:cc:f5:9d:0d:31:29:47:67:28:c5:58: c8:7d:2f:31:43:a8:bc:01:04:8a:eb:b1:fb:5f:91:26:9f:21: 59:d6:05:69:be:a6:50:93:41:92:04:6c:63:3d:81:b4:c4:d6: 3d:de:1e:7d:3e:7d:cf:bb:ad:9e:41:c8:0c:22:78:89:59:1e: 03:bc:47:ba:77:c3:85:de:65:fd:84:32:a3:9f:bc:93:a5:e5: 71:ed:9a:da:bf:7a:75:91:df:6f:b8:68:4d:e3:4e:f1:d5:c0: 45:95:85:7b:80:e4:ff:bb:49:76:97:16:26:1f:30:a7:3e:e9: e9:ae:2a:27:37:55:fa:f4:89:1c:9a:a2:de:5d:58:8f:81:d1: 67:3b:14:7a:9a:5c:11:78:ea:40:0a:28:5d:d5:cc:e0:8b:ed: 47:1c:0d:8c:6f:01:c9:ac:82:8a:eb:be:12:97:ff:37:5b:6a: cb:44:e5:24:82:07:38:dd:ec:85:44:ef:79:02:a6:a2:25:52: f7:8c:58:10:cb:5f:bb:d8:f4:9c:09:b9:d6:ab:89:bb:00:11: 6b:b5:82:ac:ab:b3:b6:d8:5a:bf:45:8d:11:2c:13:67:fc:40: 2d:02:e7:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMEOKgA1KE117TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk Y2E1MDQzNTQtODEzOS00NjUwLWE5ZDMtOWFhZDc5NGIzNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX17xhv9CKUlXSWRbEQkz9I1VsCw3MbATuAN ECpPecIWDPdv/DSedsl4LDQ89l/JkAl0VgzirT2iTZYFKfFDuDthzWI3JmN75Zkd vtTSmOwMMJoOOkZ0ZzOp2vB7iiQCtOuxhrS4krEp87jY26xX1VF+jI5l9VoECp6b yooIQP2DE64g8DtTZ0HvwqGN0v9RfAXNVKE1we8jgSfla72i1kEksczW0JyWmNAH elLsZk0QTgfQA2CLsxAxjowF1n0QHnB3Juyqxmsr2U+OOq813EtYMrPnghL0OJZA 1y/qyEZHUbCi12+kmAL5vHBSoagKNHxRqDzJKOaXz1iHS76c+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfETU78B8leoRUuibUtzzKHn5igMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvZmY1NDk5YmYtODI4MC0z ODZkLWE1NWEtYzQ5NDE4MWJlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1oxqZKWvRDzHWPvfD+aM0QhCWQi3ncryHM9Z0NMSlHZyjFWMh9LzFD qLwBBIrrsftfkSafIVnWBWm+plCTQZIEbGM9gbTE1j3eHn0+fc+7rZ5ByAwieIlZ HgO8R7p3w4XeZf2EMqOfvJOl5XHtmtq/enWR32+4aE3jTvHVwEWVhXuA5P+7SXaX FiYfMKc+6emuKic3Vfr0iRyaot5dWI+B0Wc7FHqaXBF46kAKKF3VzOCL7UccDYxv AcmsgorrvhKX/zdbastE5SSCBzjd7IVE73kCpqIlUveMWBDLX7vY9JwJudaribsA EWu1gqyrs7bYWr9FjREsE2f8QC0C55o= -----END CERTIFICATE-----Generated at Wed May 13 13:38:48 2026 by rpki-client