$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/431a86c8-cd94-3de2-915d-ff8b0fb1fdfa.roa File: 431a86c8-cd94-3de2-915d-ff8b0fb1fdfa.roa (raw, json) Hash identifier: DKGJmdQDCM2pfxj5Qdkv+sRLyiiYr5xzJZuuVC/NP/I= Subject key identifier: AC:33:CD:CE:8E:DB:A7:30:B1:53:2C:56:D7:99:03:1F:8C:87:CD:A3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DCC38EE50782531526CAB9400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/431a86c8-cd94-3de2-915d-ff8b0fb1fdfa.roa Signing time: Mon 11 May 2026 11:41:11 +0000 ROA not before: Mon 11 May 2026 11:41:11 +0000 ROA not after: Sun 09 Aug 2026 11:41:11 +0000 asID: 138195 IP address blocks: 172.111.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:38:ee:50:78:25:31:52:6c:ab:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 11 11:41:11 2026 GMT Not After : Aug 9 11:41:11 2026 GMT Subject: CN=9aea067d-c755-4619-982c-97110c2144ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:73:bf:aa:12:5a:ea:09:f4:af:ab:79:f0: e9:04:e0:19:7e:99:cf:6c:32:bd:00:29:f5:83:4d: ec:fa:d8:f8:14:c0:bf:c7:df:ca:cc:5e:91:d6:aa: 86:a3:4a:3b:0d:6b:2e:4d:03:a4:bd:97:63:dd:da: d1:ae:9b:29:83:bc:11:e3:94:75:4e:09:92:e8:94: 3b:cf:42:90:14:b8:c3:94:e0:15:3e:02:96:32:d3: 6d:92:80:7a:88:08:34:12:32:48:aa:6b:e9:56:4e: e0:83:c1:74:44:36:79:08:c7:d0:9c:5d:c5:1c:a1: f1:24:63:70:01:46:bd:8b:a5:66:7c:55:23:ff:ba: 63:10:4c:c4:c4:17:b1:8b:66:9f:b4:78:30:f1:0b: 6e:c2:82:78:30:94:7c:18:22:a1:15:45:39:52:7b: ee:e3:bd:8a:97:74:fa:95:af:42:fe:1f:27:8a:b5: 02:4f:4f:94:04:45:52:a9:76:b3:18:f0:b7:c1:0e: 44:8b:14:b9:45:f3:4f:e0:e1:39:86:d2:c2:0e:59: ca:9f:ac:c7:c9:f4:db:b0:d7:8f:13:bc:96:6e:27: 4a:42:ac:46:17:a0:4b:66:0d:2d:e2:d9:70:cf:f3: e1:8d:75:e2:98:19:37:39:7d:d0:c4:3a:66:f7:4b: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:33:CD:CE:8E:DB:A7:30:B1:53:2C:56:D7:99:03:1F:8C:87:CD:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/431a86c8-cd94-3de2-915d-ff8b0fb1fdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:22:b0:06:ad:24:85:1e:ff:30:8e:fe:ea:86:38:7d:be:1c: e3:14:f8:db:db:3a:07:dc:89:39:68:b9:f1:c6:c8:fa:57:ce: 40:20:90:60:1e:e9:32:ee:72:db:c9:ad:e8:19:5a:93:6d:c6: 47:58:87:67:fe:8a:2a:f4:36:ba:fc:50:b9:18:39:ef:4a:63: 75:76:ba:5b:c9:a7:99:82:44:81:38:4c:ee:e0:01:ae:52:a9: 5e:9c:cb:73:1e:a4:b1:1a:d7:c0:d2:9e:71:f0:50:a5:63:20: 8e:92:fe:57:3e:24:0c:16:48:01:17:9c:99:ac:79:9a:0d:e1: c1:2b:77:7f:21:62:29:97:6e:92:c4:56:81:02:9d:9c:5d:d8: 8f:01:0d:14:69:d1:eb:f8:a8:3a:54:58:57:3a:13:dc:f0:da: 2c:a9:34:5b:6b:17:46:58:f0:b8:0c:a1:aa:d7:87:13:f9:8d: ee:69:58:f0:fb:c8:42:45:ad:35:ea:67:a5:61:7f:6b:09:11: a2:29:e3:81:df:19:e5:44:42:47:7d:1f:c2:79:77:9d:f0:f4: c1:f0:d7:45:4b:0b:15:30:8f:6b:30:68:14:81:6a:9c:e9:33: 1b:5c:06:fc:f2:0b:fb:0e:2b:8f:54:29:02:de:74:6a:2e:e9: cc:6c:e1:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MOO5QeCUxUmyrlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUxMTExNDExMVoXDTI2MDgwOTExNDExMVowLzEtMCsGA1UEAxMk OWFlYTA2N2QtYzc1NS00NjE5LTk4MmMtOTcxMTBjMjE0NGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre1zv6oSWuoJ9K+refDpBOAZfpnPbDK9ACn1 g03s+tj4FMC/x9/KzF6R1qqGo0o7DWsuTQOkvZdj3drRrpspg7wR45R1TgmS6JQ7 z0KQFLjDlOAVPgKWMtNtkoB6iAg0EjJIqmvpVk7gg8F0RDZ5CMfQnF3FHKHxJGNw AUa9i6VmfFUj/7pjEEzExBexi2aftHgw8QtuwoJ4MJR8GCKhFUU5Unvu472Kl3T6 la9C/h8nirUCT0+UBEVSqXazGPC3wQ5EixS5RfNP4OE5htLCDlnKn6zHyfTbsNeP E7yWbidKQqxGF6BLZg0t4tlwz/PhjXXimBk3OX3QxDpm90uPlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwzzc6O26cwsVMsVteZAx+Mh82jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDMxYTg2YzgtY2Q5NC0z ZGUyLTkxNWQtZmY4YjBmYjFmZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsisAatJIUe/zCO/uqGOH2+HOMU+NvbOgfciTloufHGyPpXzkAgkGAe 6TLuctvJregZWpNtxkdYh2f+iir0Nrr8ULkYOe9KY3V2ulvJp5mCRIE4TO7gAa5S qV6cy3MepLEa18DSnnHwUKVjII6S/lc+JAwWSAEXnJmseZoN4cErd38hYimXbpLE VoECnZxd2I8BDRRp0ev4qDpUWFc6E9zw2iypNFtrF0ZY8LgMoarXhxP5je5pWPD7 yEJFrTXqZ6Vhf2sJEaIp44HfGeVEQkd9H8J5d53w9MHw10VLCxUwj2swaBSBapzp MxtcBvzyC/sOK49UKQLedGou6cxs4f4= -----END CERTIFICATE-----Generated at Wed May 13 01:35:55 2026 by rpki-client