$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa File: 4c52d1c0-771e-385b-af85-88ec944d16c2.roa (raw, json) Hash identifier: dhc1D5xlxTcojXK76/cm/jsYjRdlGuxbad9O5E+1+bM= Subject key identifier: 7C:84:96:77:E0:1B:A6:5A:E7:EC:07:D0:E9:31:35:45:CA:9B:6C:65 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E1FA99341F3BF63306559B340 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 9009 IP address blocks: 172.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:93:41:f3:bf:63:30:65:59:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=760d9a76-7085-4c8e-8941-be8ec1d55ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:db:f5:42:19:0b:93:05:b7:d5:71:e8:17:16: 1f:c5:ae:0b:e9:d8:1c:a0:25:78:85:4f:d0:a9:b2: 76:0f:26:f4:42:f0:9c:71:e8:f7:97:4c:0d:53:fc: e0:0f:c0:50:bb:20:c8:95:1c:ad:c9:84:61:16:8b: b6:f0:e9:39:9a:5f:cf:7a:cd:12:c3:1a:23:80:91: c2:f2:00:ae:3e:02:ba:c7:5e:41:0f:17:b2:eb:26: b4:1e:91:69:77:ff:08:95:ee:62:54:03:95:1d:6d: 8e:45:4f:16:d2:84:c0:4d:13:d7:b0:4a:66:29:de: 82:f8:99:39:64:24:ff:36:20:0a:01:17:bc:70:60: e4:2b:e5:6a:c9:04:ce:22:45:f8:54:d6:c6:96:10: 4b:2f:27:d4:56:f2:78:a7:8d:91:4f:a1:66:e8:fe: 78:35:01:55:2e:2d:3f:bd:65:0a:d0:be:db:e9:82: 8f:e5:01:a9:88:ba:9a:e9:bd:c3:15:f2:81:55:10: 44:eb:3c:08:65:58:be:05:08:da:11:06:a5:e7:1c: c4:09:78:3e:10:8a:d4:40:ba:44:80:11:21:4d:24: 73:02:a2:a4:85:bb:f9:6a:4f:03:8e:60:4d:20:7e: a4:75:fc:16:e0:b0:e3:60:d9:e8:4a:6b:a5:f9:ca: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:84:96:77:E0:1B:A6:5A:E7:EC:07:D0:E9:31:35:45:CA:9B:6C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5b:32:22:53:e5:5f:f6:26:42:c6:cf:12:b9:77:66:f5:46: 9e:76:00:dd:7b:3b:d0:29:08:f6:34:46:79:c4:8c:35:b9:fc: 26:a6:44:3d:52:e6:df:19:7a:71:83:50:8b:d4:34:eb:6d:86: c7:5a:40:bc:4d:61:59:92:ee:c7:9b:09:ae:5f:3b:6e:03:47: 38:9a:8e:3c:d8:f9:34:e1:11:54:d2:8a:ff:54:15:97:cb:22: dc:48:21:4f:b6:61:31:52:1a:8b:90:76:6e:67:0b:b1:0f:0a: 7b:f0:a8:3d:44:27:7d:22:71:40:38:2c:7f:1a:78:3b:c8:14: 15:22:2d:62:a5:f6:20:a3:36:07:ec:99:9d:1a:86:0c:89:1b: 56:71:f6:bb:a0:bc:48:95:bc:57:61:43:b5:59:84:4d:b8:f3: ca:e1:28:41:78:97:6d:06:83:a8:b9:8a:d9:e8:b0:ca:57:99: e8:d2:4e:d3:90:c6:3c:91:4e:06:d8:db:3e:86:e1:38:52:60: c0:e2:c4:17:2a:20:33:70:d2:19:8b:28:92:97:2a:ba:98:ec: 57:95:f6:b7:7b:95:e2:8c:07:7a:27:da:0f:45:ad:e8:e0:62: 72:e9:9b:eb:83:15:39:08:7c:fd:b1:4b:6d:65:ea:06:dc:f4: 43:3f:e0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZNB879jMGVZs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk NzYwZDlhNzYtNzA4NS00YzhlLTg5NDEtYmU4ZWMxZDU1Y2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNv1QhkLkwW31XHoFxYfxa4L6dgcoCV4hU/Q qbJ2Dyb0QvCccej3l0wNU/zgD8BQuyDIlRytyYRhFou28Ok5ml/Pes0SwxojgJHC 8gCuPgK6x15BDxey6ya0HpFpd/8Ile5iVAOVHW2ORU8W0oTATRPXsEpmKd6C+Jk5 ZCT/NiAKARe8cGDkK+VqyQTOIkX4VNbGlhBLLyfUVvJ4p42RT6Fm6P54NQFVLi0/ vWUK0L7b6YKP5QGpiLqa6b3DFfKBVRBE6zwIZVi+BQjaEQal5xzECXg+EIrUQLpE gBEhTSRzAqKkhbv5ak8DjmBNIH6kdfwW4LDjYNnoSmul+crZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyElnfgG6Za5+wH0OkxNUXKm2xlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGM1MmQxYzAtNzcxZS0z ODViLWFmODUtODhlYzk0NGQxNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBbMiJT5V/2JkLGzxK5d2b1Rp52AN17O9ApCPY0RnnEjDW5/CamRD1S 5t8ZenGDUIvUNOtthsdaQLxNYVmS7sebCa5fO24DRziajjzY+TThEVTSiv9UFZfL ItxIIU+2YTFSGouQdm5nC7EPCnvwqD1EJ30icUA4LH8aeDvIFBUiLWKl9iCjNgfs mZ0ahgyJG1Zx9rugvEiVvFdhQ7VZhE2488rhKEF4l20Gg6i5itnosMpXmejSTtOQ xjyRTgbY2z6G4ThSYMDixBcqIDNw0hmLKJKXKrqY7FeV9rd7leKMB3on2g9Frejg YnLpm+uDFTkIfP2xS21l6gbc9EM/4N8= -----END CERTIFICATE-----Generated at Sat Jun 13 05:59:49 2026 by rpki-client