$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json) Hash identifier: +kSXIo55y2J34SCZCSbEJKtyKeYptoxv7/aBBaRGKTg= Subject key identifier: F3:2A:DC:F8:9B:E5:F4:D9:74:16:BD:F1:6D:DA:2E:AF:EE:66:77:F8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D91C01072430D1406B1356D80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 212238 IP address blocks: 172.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:10:72:43:0d:14:06:b1:35:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=68df31da-745e-4982-94f3-6a92e858a45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:56:f6:b9:38:3d:5a:01:2a:c4:de:7c:57: 8a:c1:f8:ae:65:55:5c:59:d2:fc:c8:9f:66:66:66: b2:64:90:e8:ae:7e:bb:08:8a:f4:75:83:a1:1c:72: 77:16:89:fa:81:4a:af:05:b8:92:e0:55:e5:8d:bf: c8:33:f8:c4:01:97:56:8c:70:7c:75:d5:a7:4f:5a: 69:81:c2:e9:d9:a6:41:0f:6a:2a:39:86:bf:10:8c: d1:33:48:5c:74:05:a3:4c:f7:0e:31:bd:b3:68:72: 3c:74:16:e3:03:af:4a:b3:5c:05:02:96:e9:13:63: 10:a6:d4:a1:9c:e1:b8:51:eb:0a:1e:88:7e:73:08: 67:a3:ca:32:d7:19:06:4d:a3:02:e0:cc:de:9e:85: c4:8e:5f:44:3e:4d:84:99:77:ba:f5:4a:86:fa:f6: 8f:aa:8b:24:61:a9:5b:5c:95:37:fa:f9:71:4d:dd: 32:75:7e:8e:8f:1c:af:10:65:a3:71:f5:e9:42:4d: c7:35:74:a2:a3:b1:1c:48:78:af:20:3d:46:ce:de: 69:7b:9f:35:30:9f:55:7b:91:44:4d:bd:d9:4e:a8: 7f:50:3a:7e:14:43:1c:ac:95:59:1d:e4:ac:f3:d3: 2e:de:4e:53:bf:b3:cf:82:28:da:a0:f4:2a:03:24: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2A:DC:F8:9B:E5:F4:D9:74:16:BD:F1:6D:DA:2E:AF:EE:66:77:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:97:55:df:fa:a8:4a:b1:66:98:0c:a2:6a:e6:f2:27:f1:b3: 03:2b:7d:3b:3c:ba:45:16:67:07:de:66:07:96:28:83:41:26: 86:ba:bf:17:1c:2a:d5:1b:e1:fc:86:05:54:b5:e2:01:1e:ab: 5e:5e:e1:0c:56:7e:86:65:47:81:31:69:19:a3:15:3b:cf:c2: 85:b1:23:1c:a4:3d:58:66:46:71:e3:f6:76:6c:ec:a6:a9:b4: c7:87:0c:62:a0:8f:c6:d5:fe:1f:44:d2:44:85:bc:12:2a:46: 48:aa:a9:bc:e2:56:94:9a:dc:e4:44:15:32:3e:f3:68:fa:58: 4b:8b:6f:16:c5:6b:e2:21:10:e0:65:3a:52:5c:e6:5d:61:d4: 70:66:59:83:cb:21:2a:a2:c2:dd:cf:7c:2d:20:da:5f:c2:1c: e7:e3:99:96:df:8e:20:cf:e5:c4:ec:48:ec:b8:b8:ae:d7:e2: 0c:9b:26:4e:b7:0f:9c:3a:aa:fd:94:e7:bb:22:3c:0f:6a:d7: de:c7:60:c8:48:e1:15:89:c4:ca:30:19:af:c3:05:e4:6b:f3: c8:78:ab:e6:5b:71:63:cc:0a:f0:f6:fe:19:3f:1f:7c:11:23: e4:20:7c:d5:ee:d6:3d:2b:48:cb:3b:26:a2:d4:16:31:10:e3: 2e:85:f1:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBByQw0UBrE1bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NjhkZjMxZGEtNzQ1ZS00OTgyLTk0ZjMtNmE5MmU4NThhNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuZW9rk4PVoBKsTefFeKwfiuZVVcWdL8yJ9m ZmayZJDorn67CIr0dYOhHHJ3Fon6gUqvBbiS4FXljb/IM/jEAZdWjHB8ddWnT1pp gcLp2aZBD2oqOYa/EIzRM0hcdAWjTPcOMb2zaHI8dBbjA69Ks1wFApbpE2MQptSh nOG4UesKHoh+cwhno8oy1xkGTaMC4MzenoXEjl9EPk2EmXe69UqG+vaPqoskYalb XJU3+vlxTd0ydX6OjxyvEGWjcfXpQk3HNXSio7EcSHivID1Gzt5pe581MJ9Ve5FE Tb3ZTqh/UDp+FEMcrJVZHeSs89Mu3k5Tv7PPgijaoPQqAyTE0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMq3Pib5fTZdBa98W3aLq/uZnf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzlhMzQ2YjEtZTYwZC0z MjIzLTkxZDQtZTE0YjEzMjZhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+XVd/6qEqxZpgMomrm8ifxswMrfTs8ukUWZwfeZgeWKINBJoa6vxcc KtUb4fyGBVS14gEeq15e4QxWfoZlR4ExaRmjFTvPwoWxIxykPVhmRnHj9nZs7Kap tMeHDGKgj8bV/h9E0kSFvBIqRkiqqbziVpSa3OREFTI+82j6WEuLbxbFa+IhEOBl OlJc5l1h1HBmWYPLISqiwt3PfC0g2l/CHOfjmZbfjiDP5cTsSOy4uK7X4gybJk63 D5w6qv2U57siPA9q197HYMhI4RWJxMowGa/DBeRr88h4q+ZbcWPMCvD2/hk/H3wR I+QgfNXu1j0rSMs7JqLUFjEQ4y6F8Qc= -----END CERTIFICATE-----Generated at Wed May 13 05:16:05 2026 by rpki-client