$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa File: d187a421-c3fa-3a3d-82ce-a52b6630982c.roa (raw, json) Hash identifier: TRtLAoWheTeyoqD4on9NSgKWz1trobylVNpyVwN1/DA= Subject key identifier: D9:55:73:A9:FD:7E:CC:E7:3A:53:D9:16:56:18:1D:3D:FD:FB:0A:D5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA6B02278FFDEF5C750A03E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 9009 IP address blocks: 172.111.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:22:78:ff:de:f5:c7:50:a0:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=966ca6ae-e2df-4734-95e2-aa3b0d6082c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:6a:06:d7:19:6d:9a:ec:cd:eb:bc:68:3b: 41:95:34:ac:ba:42:78:3a:fb:08:8d:7a:9c:f2:4f: 55:d9:7d:7e:07:93:40:b0:ce:c4:2b:85:b4:38:67: 64:5c:cb:80:16:71:97:83:04:3e:e8:33:8a:b5:5d: c8:d7:e2:67:68:07:c1:29:c2:ec:18:03:46:30:23: 2d:93:8c:9f:ee:71:27:e7:d2:50:1f:8e:eb:4d:dc: 22:d3:d2:fa:89:23:05:ec:f4:8b:24:d4:7f:9c:b1: 09:fb:9a:c1:18:5f:74:8c:e1:e8:5f:0a:54:15:38: 4a:64:b2:6f:51:03:7b:b3:d9:22:2d:da:69:e5:ac: 29:4d:e6:f5:24:9c:91:43:42:bb:74:27:cb:1c:41: c5:53:35:ec:22:ec:51:73:e2:66:f3:62:d3:51:9e: 42:30:06:68:cd:f7:1e:14:28:c4:a7:c2:f9:6d:0f: ea:bf:73:15:30:99:20:41:25:ef:85:61:6f:8d:a6: 06:07:a5:64:45:c8:5b:d1:c6:fb:00:74:0b:88:78: a3:e0:b5:37:f6:26:8b:4c:43:ae:0b:83:69:8a:4b: b8:b9:56:80:11:ec:1e:38:c9:c6:08:99:29:5b:cd: d9:c4:2e:b3:23:62:f9:2a:5c:60:61:32:aa:4b:0d: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:55:73:A9:FD:7E:CC:E7:3A:53:D9:16:56:18:1D:3D:FD:FB:0A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ac:8d:9d:05:98:3c:db:47:75:d4:78:a5:ec:c0:d4:ab:d6: 18:f6:ca:30:6c:0f:a6:54:4a:13:57:53:fa:65:9f:dd:d1:b2: 9e:d7:00:69:c6:90:3f:12:7a:36:46:25:6e:09:07:fd:88:1d: 3b:cf:0b:5f:1b:26:b8:7d:b4:ef:59:b0:41:e0:48:2c:7d:94: b3:6e:df:84:66:af:d0:4d:50:a9:24:4a:fd:3b:a7:80:4a:24: 8c:9e:30:48:04:6f:42:b7:8d:3f:28:0a:be:ab:c8:df:08:a8: f0:57:7d:b4:41:2c:2e:7c:71:fd:40:d9:49:0c:42:60:e9:3d: 1e:69:cd:cc:09:f1:82:50:ed:0f:7e:5f:92:0f:e8:fe:15:a2: 03:40:de:92:6d:10:f9:64:7a:79:95:10:32:17:e4:e2:33:92: b1:9a:d9:c2:3a:2f:54:47:65:f7:c9:17:f4:0b:2c:c6:09:bd: 5b:b0:b6:e0:01:45:4c:8d:f7:1d:27:27:7d:c6:b0:60:cd:bf: 24:05:08:5a:38:03:18:09:ff:d2:1f:ed:63:65:5e:6e:b1:6f: b7:fd:db:ff:66:f4:df:99:1e:dd:12:61:a8:0f:35:4c:96:fb: 23:99:c0:20:73:ff:9c:33:5b:67:87:30:b8:e0:4c:7a:6f:88: ad:ef:ba:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCJ4/971x1CgPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OTY2Y2E2YWUtZTJkZi00NzM0LTk1ZTItYWEzYjBkNjA4MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NhqBtcZbZrszeu8aDtBlTSsukJ4OvsIjXqc 8k9V2X1+B5NAsM7EK4W0OGdkXMuAFnGXgwQ+6DOKtV3I1+JnaAfBKcLsGANGMCMt k4yf7nEn59JQH47rTdwi09L6iSMF7PSLJNR/nLEJ+5rBGF90jOHoXwpUFThKZLJv UQN7s9kiLdpp5awpTeb1JJyRQ0K7dCfLHEHFUzXsIuxRc+Jm82LTUZ5CMAZozfce FCjEp8L5bQ/qv3MVMJkgQSXvhWFvjaYGB6VkRchb0cb7AHQLiHij4LU39iaLTEOu C4Npiku4uVaAEeweOMnGCJkpW83ZxC6zI2L5KlxgYTKqSw1y2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlVc6n9fsznOlPZFlYYHT39+wrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE4N2E0MjEtYzNmYS0z YTNkLTgyY2UtYTUyYjY2MzA5ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWsjZ0FmDzbR3XUeKXswNSr1hj2yjBsD6ZUShNXU/pln93Rsp7XAGnG kD8SejZGJW4JB/2IHTvPC18bJrh9tO9ZsEHgSCx9lLNu34Rmr9BNUKkkSv07p4BK JIyeMEgEb0K3jT8oCr6ryN8IqPBXfbRBLC58cf1A2UkMQmDpPR5pzcwJ8YJQ7Q9+ X5IP6P4VogNA3pJtEPlkenmVEDIX5OIzkrGa2cI6L1RHZffJF/QLLMYJvVuwtuAB RUyN9x0nJ33GsGDNvyQFCFo4AxgJ/9If7WNlXm6xb7f92/9m9N+ZHt0SYagPNUyW +yOZwCBz/5wzW2eHMLjgTHpviK3vujw= -----END CERTIFICATE-----Generated at Wed May 13 04:28:15 2026 by rpki-client