$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa File: febb0e75-40f1-37a9-a0a4-5dc80635d514.roa (raw, json) Hash identifier: 0cYXeAmv+/8v4KWM6zYtM+NwJUbRkgh4af6gxnlhFGY= Subject key identifier: 03:BE:20:D4:1E:77:57:5A:E3:E6:97:81:C1:55:F1:1F:3D:CB:26:D9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA6B01D132B57D40C3DFB6980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 3223 IP address blocks: 172.111.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1d:13:2b:57:d4:0c:3d:fb:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=1eedbd01-d810-457a-b3f8-7c7ff0cc38e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:6e:22:90:62:b3:90:0a:c0:f9:05:d5:c6: b0:bd:90:ec:4d:d7:30:29:22:3e:19:0c:54:10:16: da:b3:38:86:f4:b3:78:af:da:23:28:34:22:ba:c2: 7b:81:49:14:59:f8:29:26:4b:5d:d9:42:e0:5b:a0: 78:dd:e5:f5:74:07:3e:8e:88:e5:b1:9d:5e:62:22: 9f:d0:0b:7a:8c:9c:ec:fc:8a:aa:b6:67:63:93:69: a3:7d:a8:56:19:b2:07:85:ca:c9:c2:09:23:95:6a: 94:03:dc:78:6b:27:3b:27:92:ea:2b:48:b2:47:40: 67:98:6c:a2:da:20:86:42:cd:c6:d4:e2:d7:5c:1f: 5b:45:c6:1c:db:66:f2:15:46:19:49:48:25:a4:1a: 3a:a9:96:6a:66:35:39:4a:22:aa:70:97:e0:3e:dc: 70:44:7b:dc:05:b1:5a:b1:a2:da:82:92:55:3b:08: e5:81:79:b3:95:df:31:59:80:92:ca:44:36:61:30: a1:b0:75:ae:1b:95:2f:27:a8:c7:29:3a:a7:61:04: 80:c9:58:b4:e4:0d:c2:97:bf:5a:8c:33:10:31:db: 7c:56:be:ec:7f:00:52:f0:78:18:84:50:cc:b7:50: 41:43:b0:da:a5:7b:40:8c:cd:b3:1b:79:b7:11:c8: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:20:D4:1E:77:57:5A:E3:E6:97:81:C1:55:F1:1F:3D:CB:26:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:06:de:4b:18:1a:d5:0a:16:fb:5b:d8:6a:88:74:d8:42:45: 8a:75:69:7d:2c:64:49:63:b9:09:1a:36:8e:79:aa:08:cb:f6: a8:ec:c9:2b:a6:ea:a0:12:4f:65:a7:87:4e:d7:b5:dd:a7:e1: 0a:c8:a2:a4:ab:26:1b:2f:41:79:87:8e:cd:d6:ab:0b:19:dd: 14:bb:fa:f6:70:d7:33:d8:97:09:ea:67:e3:a0:32:d0:3f:c3: fd:b5:7f:4b:84:cb:cd:78:01:f1:a6:86:9f:d6:29:cb:31:a8: 34:e2:27:20:c9:55:c2:14:b2:93:48:5d:53:af:d5:e8:91:f7: 70:9e:c0:f6:b5:c8:08:77:bb:13:c1:c7:e7:06:53:23:50:99: d5:01:40:94:d3:66:f1:b7:4b:ce:5e:5b:d8:24:3f:a7:be:7a: 58:4b:7d:81:fb:38:c7:1b:c8:cd:f0:eb:48:1f:de:ad:eb:3a: b2:cc:9f:8f:d1:15:9b:a2:f6:6f:b6:ee:a0:72:db:1b:04:ec: 37:6c:3f:91:a4:42:66:ee:ac:14:ee:76:c1:f6:aa:0b:f1:cf: 97:e8:2a:dd:d6:ac:88:95:98:57:e6:b5:6d:1a:46:62:6a:ae: 5d:36:27:fb:64:a5:d7:ba:53:e5:6d:bd:71:3e:92:25:4b:73: 86:f5:50:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB0TK1fUDD37aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MWVlZGJkMDEtZDgxMC00NTdhLWIzZjgtN2M3ZmYwY2MzOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknRuIpBis5AKwPkF1cawvZDsTdcwKSI+GQxU EBbasziG9LN4r9ojKDQiusJ7gUkUWfgpJktd2ULgW6B43eX1dAc+jojlsZ1eYiKf 0At6jJzs/Iqqtmdjk2mjfahWGbIHhcrJwgkjlWqUA9x4ayc7J5LqK0iyR0BnmGyi 2iCGQs3G1OLXXB9bRcYc22byFUYZSUglpBo6qZZqZjU5SiKqcJfgPtxwRHvcBbFa saLagpJVOwjlgXmzld8xWYCSykQ2YTChsHWuG5UvJ6jHKTqnYQSAyVi05A3Cl79a jDMQMdt8Vr7sfwBS8HgYhFDMt1BBQ7DapXtAjM2zG3m3Ech4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO+INQed1da4+aXgcFV8R89yybZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmViYjBlNzUtNDBmMS0z N2E5LWEwYTQtNWRjODA2MzVkNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwG3ksYGtUKFvtb2GqIdNhCRYp1aX0sZEljuQkaNo55qgjL9qjsySum 6qAST2Wnh07Xtd2n4QrIoqSrJhsvQXmHjs3WqwsZ3RS7+vZw1zPYlwnqZ+OgMtA/ w/21f0uEy814AfGmhp/WKcsxqDTiJyDJVcIUspNIXVOv1eiR93CewPa1yAh3uxPB x+cGUyNQmdUBQJTTZvG3S85eW9gkP6e+elhLfYH7OMcbyM3w60gf3q3rOrLMn4/R FZui9m+27qBy2xsE7DdsP5GkQmburBTudsH2qgvxz5foKt3WrIiVmFfmtW0aRmJq rl02J/tkpde6U+VtvXE+kiVLc4b1UHs= -----END CERTIFICATE-----Generated at Wed May 13 06:07:42 2026 by rpki-client