$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa File: 0b9309e3-07db-3044-81aa-b836a369a052.roa (raw, json) Hash identifier: OiATBNsXdEeMXOhQMCQiqlRICZ9d2/SovJ8m64sz+do= Subject key identifier: 0E:62:CC:EB:3E:21:2F:1F:5A:FA:00:C3:5C:55:4B:19:07:9C:5C:64 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D91C0107F3B0C9FAEED3C6C78 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 212238 IP address blocks: 172.111.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:10:7f:3b:0c:9f:ae:ed:3c:6c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=9ac36840-65f3-4534-ba54-940c9868f62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:51:74:6c:5d:3c:68:73:7f:45:f8:1d:27: 23:ba:5f:03:59:f4:e1:c5:ba:ca:8e:16:ed:05:7f: 2b:6a:ec:c1:bf:db:9d:87:ee:a3:67:77:4a:dc:90: 50:9d:d3:b5:cd:1d:49:f5:48:f8:0b:e9:ff:85:18: b0:dc:ec:38:4f:94:43:8a:bf:77:c5:63:4a:f1:15: 23:18:80:de:bb:78:67:81:52:77:ba:f5:b4:0c:8a: e2:bc:54:fc:ed:b1:a3:d5:78:7b:2a:74:b5:0d:9c: 1e:f6:fc:8a:4d:97:ae:93:60:2d:4d:73:4b:3f:d3: fa:37:26:34:33:3b:9a:19:e6:12:c7:1a:60:66:a8: 12:74:b6:9c:3f:7b:1a:ef:7b:ed:b7:6a:09:9f:4f: 07:6b:3f:27:23:68:f4:6c:03:b7:14:7d:31:d5:3f: 8e:65:22:7b:14:d6:46:99:f1:6a:35:ea:e7:22:c7: ec:c4:a7:68:f8:2e:b9:5a:b5:68:23:7f:d5:21:28: 81:4e:9a:b1:a1:bf:43:18:e2:bb:3c:8d:29:30:13: dd:16:43:c5:b6:c8:2f:9e:a9:0f:db:ef:f3:65:77: d9:72:b6:a0:29:9f:e9:1d:0b:3b:68:36:86:1a:1d: f8:e9:2f:9b:66:a4:a8:65:09:7a:ed:4c:ce:90:b6: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:62:CC:EB:3E:21:2F:1F:5A:FA:00:C3:5C:55:4B:19:07:9C:5C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:11:f0:cd:ce:e6:0f:b3:5c:95:15:4b:9d:66:9e:30:fc:f9: a3:43:10:ea:79:60:4f:6e:fb:ce:f8:45:95:ad:af:eb:cc:21: 0e:05:ec:3c:5b:ee:9c:a7:3e:01:b7:da:23:f2:13:4e:a0:66: 27:7e:8d:ac:ca:47:8b:31:6f:3e:48:8c:b8:ce:39:5a:ca:56: 02:c2:04:92:3d:4f:b2:a4:e2:2d:60:ff:9d:6a:6b:39:65:23: 80:42:0f:9d:f5:9e:fd:89:1a:f7:97:b8:a8:8b:0a:5c:f8:7a: 6a:d3:e6:1f:47:ab:55:71:ff:0b:dc:ec:0b:9e:d4:09:45:73: 3f:88:1a:94:88:d2:a3:b4:70:f3:a6:69:33:13:3d:2c:cd:42: 69:1b:85:68:06:aa:02:54:81:a0:64:3e:05:f9:4a:9d:c1:82: 57:2e:83:5e:fd:b8:db:7f:b4:60:45:d1:52:96:43:99:ce:63: 4e:5f:3d:15:dd:62:c5:75:65:5b:df:5e:70:84:e7:4c:f0:95: 59:7e:60:0d:25:02:a5:97:a1:79:48:7a:c9:50:29:8c:79:89: 3d:42:e9:37:41:05:70:83:dc:f8:70:d3:66:39:c9:29:c5:c6: d4:71:c6:1b:a7:95:f6:ea:32:b2:03:ee:5a:23:8f:09:eb:a9: b9:dc:3d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBB/Owyfru08bHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OWFjMzY4NDAtNjVmMy00NTM0LWJhNTQtOTQwYzk4NjhmNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlZRdGxdPGhzf0X4HScjul8DWfThxbrKjhbt BX8rauzBv9udh+6jZ3dK3JBQndO1zR1J9Uj4C+n/hRiw3Ow4T5RDir93xWNK8RUj GIDeu3hngVJ3uvW0DIrivFT87bGj1Xh7KnS1DZwe9vyKTZeuk2AtTXNLP9P6NyY0 MzuaGeYSxxpgZqgSdLacP3sa73vtt2oJn08Haz8nI2j0bAO3FH0x1T+OZSJ7FNZG mfFqNernIsfsxKdo+C65WrVoI3/VISiBTpqxob9DGOK7PI0pMBPdFkPFtsgvnqkP 2+/zZXfZcragKZ/pHQs7aDaGGh346S+bZqSoZQl67UzOkLbHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5izOs+IS8fWvoAw1xVSxkHnFxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGI5MzA5ZTMtMDdkYi0z MDQ0LTgxYWEtYjgzNmEzNjlhMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIER8M3O5g+zXJUVS51mnjD8+aNDEOp5YE9u+874RZWtr+vMIQ4F7Dxb 7pynPgG32iPyE06gZid+jazKR4sxbz5IjLjOOVrKVgLCBJI9T7Kk4i1g/51qazll I4BCD531nv2JGveXuKiLClz4emrT5h9Hq1Vx/wvc7Aue1AlFcz+IGpSI0qO0cPOm aTMTPSzNQmkbhWgGqgJUgaBkPgX5Sp3Bglcug179uNt/tGBF0VKWQ5nOY05fPRXd YsV1ZVvfXnCE50zwlVl+YA0lAqWXoXlIeslQKYx5iT1C6TdBBXCD3Phw02Y5ySnF xtRxxhunlfbqMrID7lojjwnrqbncPR4= -----END CERTIFICATE-----Generated at Wed May 13 08:54:58 2026 by rpki-client