$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa File: f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa (raw, json) Hash identifier: c4Q2qXqYgmAieAsmkw+XEq13XCaIn9f0nORaijcZ5w4= Subject key identifier: 6A:14:79:5C:0E:EE:9D:5F:16:33:F9:A6:84:99:F2:E9:52:91:88:6E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D932549EAFA11983DA23EFEE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 9009 IP address blocks: 172.111.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:49:ea:fa:11:98:3d:a2:3e:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=7c1b3dd2-4a31-4026-a041-59beb77f022c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:51:70:1a:9f:fe:c3:a0:97:a4:86:7b:68: ab:f7:df:0d:ab:c8:58:0b:34:3a:b4:4f:2a:04:54: 9d:01:75:e5:ab:38:4d:78:0a:cd:df:9f:eb:36:23: 88:9b:cb:7b:99:00:5e:23:7a:2c:13:7b:d1:bc:21: 1d:d1:26:7c:05:b3:63:b7:1d:fa:bd:06:e1:a6:74: e3:24:f8:ed:04:f5:a9:27:d5:d3:ad:80:21:9d:a4: a3:94:cb:40:da:9c:63:ae:4d:e2:e3:f2:27:b0:82: 9e:69:4b:c3:49:2e:ce:a6:d7:ad:dd:57:00:02:ec: 28:59:b6:2b:5b:e9:72:06:d4:79:01:9c:d1:d3:b2: 7c:0a:e6:85:2d:81:ce:fe:ec:b0:0e:48:25:8e:c5: 19:a5:0b:1d:a3:84:49:23:22:69:d8:8b:8b:7d:4f: 64:53:7f:8b:14:06:cc:a0:c9:9b:5c:06:26:08:02: c4:bb:c1:78:f9:c1:a0:30:f4:73:62:53:62:82:a4: 7b:db:83:5f:53:8f:46:05:31:66:fd:e3:d0:02:8f: 86:aa:1c:7d:30:e3:ef:58:13:0f:c6:6f:98:bd:d9: c1:43:b9:ca:91:86:5b:88:51:6a:5c:1d:fa:62:9f: 05:80:0b:99:3d:73:aa:7a:de:d2:ab:5c:e7:a0:13: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:14:79:5C:0E:EE:9D:5F:16:33:F9:A6:84:99:F2:E9:52:91:88:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:54:54:39:a5:18:a2:05:48:c0:ba:84:e3:b0:fa:cb:1c:fd: 3f:bb:5a:32:de:37:0c:1b:3c:62:76:b7:14:79:92:be:fd:62: 23:50:d9:07:8b:06:bb:25:57:d1:c6:72:c8:2f:f5:4a:cf:9c: 45:cf:68:e5:74:8a:c8:87:86:b4:91:ba:62:35:73:cb:2f:68: 7e:f8:a4:6f:7c:cc:7d:60:88:e2:ac:e4:16:dd:bf:0f:f3:62: cb:57:be:17:3f:9a:24:aa:6e:b2:1d:09:e0:c6:5d:c0:98:3e: 8d:55:d6:69:99:77:37:97:35:c2:bd:05:af:6b:26:d4:6c:bb: e9:79:70:39:26:e2:e9:bd:09:e1:e2:1a:5e:d8:2e:44:8e:32: 0b:ea:f8:0e:44:38:92:46:d1:32:24:c9:91:2e:80:8c:ee:9a: f2:ab:90:9f:bb:e0:78:4b:1a:b0:d1:7c:c5:0f:ef:cf:85:23: 3d:e5:51:27:fb:e9:1d:6b:39:46:ae:d8:01:51:d7:bc:40:f5: e9:7e:13:04:db:66:94:a6:c5:15:1c:ac:4a:ac:8d:7c:31:6a: 6e:72:ae:cb:34:30:a6:4f:3a:e8:80:60:40:18:b5:fc:f2:70: d5:5f:17:e4:84:78:b1:b8:42:6d:84:05:49:b1:97:df:b7:24: 91:1a:9b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUnq+hGYPaI+/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk N2MxYjNkZDItNGEzMS00MDI2LWEwNDEtNTliZWI3N2YwMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31tRcBqf/sOgl6SGe2ir998Nq8hYCzQ6tE8q BFSdAXXlqzhNeArN35/rNiOIm8t7mQBeI3osE3vRvCEd0SZ8BbNjtx36vQbhpnTj JPjtBPWpJ9XTrYAhnaSjlMtA2pxjrk3i4/InsIKeaUvDSS7Optet3VcAAuwoWbYr W+lyBtR5AZzR07J8CuaFLYHO/uywDkgljsUZpQsdo4RJIyJp2IuLfU9kU3+LFAbM oMmbXAYmCALEu8F4+cGgMPRzYlNigqR724NfU49GBTFm/ePQAo+Gqhx9MOPvWBMP xm+YvdnBQ7nKkYZbiFFqXB36Yp8FgAuZPXOqet7Sq1znoBPNcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoUeVwO7p1fFjP5poSZ8ulSkYhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjhkZGI2YTgtMmU3MC0z NzFkLTkzZTQtNzJmY2QzMzYzMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFUVDmlGKIFSMC6hOOw+ssc/T+7WjLeNwwbPGJ2txR5kr79YiNQ2QeL BrslV9HGcsgv9UrPnEXPaOV0isiHhrSRumI1c8svaH74pG98zH1giOKs5Bbdvw/z YstXvhc/miSqbrIdCeDGXcCYPo1V1mmZdzeXNcK9Ba9rJtRsu+l5cDkm4um9CeHi Gl7YLkSOMgvq+A5EOJJG0TIkyZEugIzumvKrkJ+74HhLGrDRfMUP78+FIz3lUSf7 6R1rOUau2AFR17xA9el+EwTbZpSmxRUcrEqsjXwxam5yrss0MKZPOuiAYEAYtfzy cNVfF+SEeLG4Qm2EBUmxl9+3JJEam5A= -----END CERTIFICATE-----Generated at Wed May 13 04:39:34 2026 by rpki-client