$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: t7mVbIxvGs3IQKY3k+/4l//6IJO0IVzGr5W4EG/u+LI= Subject key identifier: 11:CD:49:A8:06:97:08:28:D1:19:32:55:49:76:E7:11:62:FB:57:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D91C00FF95A8E29026C87A280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0f:f9:5a:8e:29:02:6c:87:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=a5bf32f3-4171-4fb9-b633-2c8e6d4acaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:ca:e8:39:e5:55:d6:70:af:fd:d4:1c:c4: 1c:31:05:2b:2d:1b:64:89:43:f0:de:43:07:c1:57: f2:dd:bd:7c:01:82:2a:c9:74:63:ec:b6:06:42:4c: a3:a2:ae:8e:01:bf:5a:76:0e:5b:63:04:bc:dd:63: bf:b8:ab:66:d6:91:63:b8:c4:e6:ed:2b:95:11:64: df:e4:b5:45:7f:05:57:36:76:35:c3:a1:44:38:30: 99:92:64:8e:57:e5:b6:f5:d7:95:46:45:13:a4:ad: 8f:96:ec:f4:a4:ef:2c:c0:04:2c:3e:bb:f8:6c:30: d4:b5:9f:c3:0f:33:51:56:c2:78:8a:52:db:4d:96: 8e:53:a9:63:73:7a:27:71:e4:46:ff:b3:15:be:0c: 2c:43:f9:3d:45:e5:ad:4c:5e:41:62:cd:54:67:aa: 92:aa:40:62:05:50:f8:49:2b:15:08:15:50:ff:1a: f5:90:1d:e4:92:b6:d1:33:f8:b2:b1:b8:1c:b4:ac: cf:50:21:8f:cf:00:d9:0e:d9:9a:d9:57:9e:f3:63: 9e:e7:20:4f:55:e3:03:24:83:af:64:a9:14:00:6d: 8a:19:02:81:cb:ea:93:0d:23:ed:57:d0:75:04:d9: 48:a6:18:62:55:6d:24:f1:ca:89:a2:b6:d1:20:0f: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:49:A8:06:97:08:28:D1:19:32:55:49:76:E7:11:62:FB:57:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b7:cb:07:1c:c1:75:34:15:2c:42:49:10:40:fe:49:f6:bb: fb:92:7c:39:67:da:56:31:22:a5:80:62:c1:db:3f:01:bc:a1: 81:dd:fa:71:3c:8e:9d:73:56:a5:ae:eb:e7:5c:8e:d9:07:56: 54:11:8e:0d:a2:12:df:52:cb:80:bc:58:17:11:a7:64:99:a0: a6:8f:4f:fe:80:a8:3f:44:9c:8c:de:cb:59:6b:33:d3:c0:e9: 64:dc:e3:a5:cf:fb:db:93:78:85:c0:ee:61:32:49:14:71:ed: 41:82:13:e2:56:84:70:d3:7f:11:7d:d8:4a:3a:e2:cd:36:55: 53:d3:65:f0:65:0a:99:07:f8:73:ec:fd:a1:38:a0:e9:0b:34: f3:55:d2:ea:9b:b3:18:9c:f9:9d:15:ad:00:22:86:1e:98:dd: 64:de:f2:a0:09:5e:97:84:5f:70:c5:0b:7a:02:0d:3e:64:83: 20:1b:dc:e2:19:c0:08:a5:32:04:6a:5f:22:08:97:8b:c9:eb: f8:a6:85:cb:f8:e6:57:2c:84:62:e1:e4:8f:a2:3d:06:27:7d: 27:47:91:a1:20:f3:ad:af:2f:2d:a9:e5:93:3c:2c:61:47:ba: dc:e4:c4:28:24:cf:94:50:56:51:e7:4f:e2:46:c4:1a:fe:c5: bb:23:2c:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwA/5Wo4pAmyHooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YTViZjMyZjMtNDE3MS00ZmI5LWI2MzMtMmM4ZTZkNGFjYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxPK6DnlVdZwr/3UHMQcMQUrLRtkiUPw3kMH wVfy3b18AYIqyXRj7LYGQkyjoq6OAb9adg5bYwS83WO/uKtm1pFjuMTm7SuVEWTf 5LVFfwVXNnY1w6FEODCZkmSOV+W29deVRkUTpK2Pluz0pO8swAQsPrv4bDDUtZ/D DzNRVsJ4ilLbTZaOU6ljc3onceRG/7MVvgwsQ/k9ReWtTF5BYs1UZ6qSqkBiBVD4 SSsVCBVQ/xr1kB3kkrbRM/iysbgctKzPUCGPzwDZDtma2Vee82Oe5yBPVeMDJIOv ZKkUAG2KGQKBy+qTDSPtV9B1BNlIphhiVW0k8cqJorbRIA8ZtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHNSagGlwgo0RkyVUl25xFi+1cSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO3ywccwXU0FSxCSRBA/kn2u/uSfDln2lYxIqWAYsHbPwG8oYHd+nE8 jp1zVqWu6+dcjtkHVlQRjg2iEt9Sy4C8WBcRp2SZoKaPT/6AqD9EnIzey1lrM9PA 6WTc46XP+9uTeIXA7mEySRRx7UGCE+JWhHDTfxF92Eo64s02VVPTZfBlCpkH+HPs /aE4oOkLNPNV0uqbsxic+Z0VrQAihh6Y3WTe8qAJXpeEX3DFC3oCDT5kgyAb3OIZ wAilMgRqXyIIl4vJ6/imhcv45lcshGLh5I+iPQYnfSdHkaEg862vLy2p5ZM8LGFH utzkxCgkz5RQVlHnT+JGxBr+xbsjLHU= -----END CERTIFICATE-----Generated at Wed May 13 06:41:09 2026 by rpki-client