$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json) Hash identifier: YohIzfD44F6uCO6Xv8dAJdAuxUKiG4x1iwEA0DzcN1M= Subject key identifier: DA:2C:70:3E:46:20:D6:4A:29:42:B1:82:BD:4E:96:26:64:C5:98:96 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DAAE035E64DCFEB26B50D8700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 9009 IP address blocks: 172.111.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:35:e6:4d:cf:eb:26:b5:0d:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=a9dcf338-58f1-4df2-b036-862e367326ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:c5:4d:48:a5:8f:ca:b4:7a:0d:fd:fc:fb: c1:3e:a0:7e:aa:cb:92:12:ca:56:9a:0c:a8:8b:bc: 80:0a:51:3b:e8:8b:99:55:80:75:82:1d:3f:58:83: 6d:a7:57:f3:a6:22:3a:74:59:b7:dc:08:2b:04:e5: 1d:66:76:63:ca:cd:06:bb:33:48:d5:20:2d:eb:0b: 66:25:bc:3f:be:28:42:6f:06:2f:ec:64:49:1e:7e: 4d:82:7f:b7:2a:3d:86:27:47:ea:3c:de:f2:b0:ed: 25:27:ea:21:56:bf:b1:99:40:ee:4f:c9:14:4c:a2: 00:6f:46:e9:bb:62:36:2e:0b:14:be:38:80:51:c7: 60:26:fc:d2:21:42:73:76:2c:52:ce:4e:c5:a4:06: 80:6c:1d:dd:2c:d0:c1:04:44:19:1b:64:42:12:ac: 82:2e:ff:da:fc:d3:97:aa:d6:15:26:dc:64:5c:d0: 4b:27:a1:e3:c4:20:cf:32:5d:0a:1a:c3:85:53:47: e5:ae:c6:ee:ec:02:c1:b3:91:e8:87:90:61:b3:57: 8e:fb:41:e7:56:06:68:59:9f:58:0f:f1:ac:4f:23: 26:4b:86:1c:fa:c2:24:57:41:e4:92:0b:d9:f1:c6: 14:c7:e8:9d:83:55:07:b6:4d:ff:75:c9:a7:27:24: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2C:70:3E:46:20:D6:4A:29:42:B1:82:BD:4E:96:26:64:C5:98:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:85:27:2c:c6:ac:4d:01:ac:a9:8e:e6:e5:0f:59:e4:8e:5e: 48:e3:59:bc:29:2b:4d:b4:0a:b1:c8:80:de:dd:bd:47:bf:12: c2:c2:9a:e1:2c:49:52:d3:c1:ce:49:45:79:d6:b9:31:d2:5a: 7a:3d:ba:c9:46:e7:ab:98:cf:75:0c:54:41:cc:f5:0e:32:50: f6:71:9c:b4:a2:b3:58:3d:f7:42:73:03:b9:9f:eb:14:9b:2c: ef:91:0d:17:07:01:59:df:55:a4:49:46:43:a8:1e:58:a5:4d: f5:13:51:4d:ff:01:f8:12:29:8e:86:2f:58:37:74:0a:86:da: 93:9b:2a:65:d7:d2:4f:ad:18:ea:92:28:02:5d:06:df:a3:82: 3d:5c:7e:b9:68:bb:e2:1d:de:e7:d8:86:72:7a:8e:b1:c5:d3: 70:f6:e7:2d:af:1c:dc:fb:59:da:18:3e:89:fc:57:0f:ef:25: c5:58:98:8f:1c:7a:cd:b3:cf:97:c4:4d:71:b1:bd:ce:72:58: bf:cf:c5:90:43:3f:bd:9b:47:7e:d8:17:94:1a:6f:28:bc:ed: f9:ea:e4:2b:6c:30:7a:09:01:f0:4a:b4:91:11:dc:f3:b7:08: 88:eb:26:32:4f:78:ad:cf:89:5a:72:67:ec:ea:1d:60:6d:fe: 84:ad:50:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DXmTc/rJrUNhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YTlkY2YzMzgtNThmMS00ZGYyLWIwMzYtODYyZTM2NzMyNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRDFTUilj8q0eg39/PvBPqB+qsuSEspWmgyo i7yAClE76IuZVYB1gh0/WINtp1fzpiI6dFm33AgrBOUdZnZjys0GuzNI1SAt6wtm Jbw/vihCbwYv7GRJHn5Ngn+3Kj2GJ0fqPN7ysO0lJ+ohVr+xmUDuT8kUTKIAb0bp u2I2LgsUvjiAUcdgJvzSIUJzdixSzk7FpAaAbB3dLNDBBEQZG2RCEqyCLv/a/NOX qtYVJtxkXNBLJ6HjxCDPMl0KGsOFU0flrsbu7ALBs5Hoh5Bhs1eO+0HnVgZoWZ9Y D/GsTyMmS4Yc+sIkV0HkkgvZ8cYUx+idg1UHtk3/dcmnJyRJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoscD5GINZKKUKxgr1OliZkxZiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ0MzVmNDktOWRjZC0z MjczLTkxNGEtODllNjZiOGExZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmFJyzGrE0BrKmO5uUPWeSOXkjjWbwpK020CrHIgN7dvUe/EsLCmuEs SVLTwc5JRXnWuTHSWno9uslG56uYz3UMVEHM9Q4yUPZxnLSis1g990JzA7mf6xSb LO+RDRcHAVnfVaRJRkOoHlilTfUTUU3/AfgSKY6GL1g3dAqG2pObKmXX0k+tGOqS KAJdBt+jgj1cfrlou+Id3ufYhnJ6jrHF03D25y2vHNz7WdoYPon8Vw/vJcVYmI8c es2zz5fETXGxvc5yWL/PxZBDP72bR37YF5Qabyi87fnq5CtsMHoJAfBKtJER3PO3 CIjrJjJPeK3PiVpyZ+zqHWBt/oStUOU= -----END CERTIFICATE-----Generated at Wed May 13 06:06:35 2026 by rpki-client