$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa File: 831e684b-3865-3f29-a227-911e4062b52f.roa (raw, json) Hash identifier: oed40Ni5HrxDTe62+6pxshvK82jQjCchXebLO3Zguow= Subject key identifier: F4:29:02:CA:AB:23:59:DF:76:7D:9A:DC:EE:3D:33:40:78:4C:4A:97 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D80FFF23294B2FC0B52C87F00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.111.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f2:32:94:b2:fc:0b:52:c8:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=aea6fc93-779e-4b87-97e7-a3ad986c9337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:34:f9:eb:57:a7:92:66:32:d2:fa:01:09: b8:53:f4:60:84:02:b4:3e:d3:3f:60:fe:4f:c8:56: ff:01:6f:58:2c:aa:2a:f0:f1:cd:42:e3:02:6b:ec: 74:b0:7e:12:80:29:2c:20:d9:d8:b1:8b:a8:f6:28: 51:cc:6b:c8:45:f9:80:5c:6e:94:2d:46:17:e3:fb: ce:27:8f:86:d0:0c:d8:95:8a:e9:17:6c:c6:d7:0b: 5a:c5:5e:13:d2:da:26:21:c8:e9:55:f1:fc:e5:5a: 64:2e:e1:cd:c7:0b:18:46:5e:08:fa:34:b4:97:d6: e3:b0:ef:52:9c:16:45:c2:08:c2:ed:79:fe:55:f9: 19:c3:9b:10:4c:68:19:6c:c9:2e:b1:7b:8c:b7:d6: 0c:4b:6a:f4:57:a2:d7:3c:13:ea:17:03:3f:6e:6c: 1a:4c:c7:31:df:69:f1:01:66:cb:fe:b3:31:d2:62: aa:a6:27:66:33:03:da:4b:f7:92:cd:db:39:2d:22: 96:54:88:d4:26:50:ac:82:b3:8c:a7:2a:a1:49:c7: 8b:cc:8f:a7:73:c9:aa:32:92:f0:9c:1a:3a:f1:70: 48:f7:c8:94:f3:4a:62:f6:eb:38:96:1a:79:d2:4c: c0:71:fc:f3:cf:d2:01:6c:33:87:fc:c0:b0:bf:be: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:29:02:CA:AB:23:59:DF:76:7D:9A:DC:EE:3D:33:40:78:4C:4A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fa:70:f9:ef:6a:f5:18:cc:78:ba:d0:1b:80:dc:74:9b:db: 6b:6b:4e:1b:09:04:c2:2b:db:a8:f3:6c:93:07:4c:b3:a0:c5: 9b:2b:74:e2:e5:85:d6:32:82:64:ea:fc:90:55:08:bb:26:04: ba:e2:83:c8:fd:1c:c0:a4:e0:68:14:92:74:1e:7f:d4:a4:d4: d3:f5:74:6a:e7:1b:09:a5:50:c5:4f:e0:31:bb:49:5f:a3:2a: cb:e2:7a:78:8b:1e:25:ba:94:5a:64:8f:01:30:d2:3d:90:6f: b7:86:7d:61:7a:50:17:2f:7c:38:cf:c6:de:3e:2e:87:3a:2d: 0f:cc:f7:60:49:d3:2a:34:91:57:74:a5:93:81:45:e7:00:ed: a2:8c:67:0c:24:68:09:de:4b:22:88:df:19:5f:fc:02:83:78: 81:66:d1:96:51:9b:d0:d3:cc:cc:19:92:36:b1:db:e7:f6:91: e0:5c:38:be:ab:74:25:05:74:d8:2c:0b:91:5c:d5:71:14:9d: c8:90:f1:55:43:83:64:84:d5:73:ac:5b:50:3f:43:db:54:ce: 0e:56:62:0d:28:f4:d2:33:03:14:16:cf:3c:78:fb:be:df:8e: 5d:33:7f:3c:75:63:3a:74:04:09:24:40:b5:dc:2a:40:a4:48: 9f:28:e9:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//IylLL8C1LIfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YWVhNmZjOTMtNzc5ZS00Yjg3LTk3ZTctYTNhZDk4NmM5MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxk0+etXp5JmMtL6AQm4U/RghAK0PtM/YP5P yFb/AW9YLKoq8PHNQuMCa+x0sH4SgCksINnYsYuo9ihRzGvIRfmAXG6ULUYX4/vO J4+G0AzYlYrpF2zG1wtaxV4T0tomIcjpVfH85VpkLuHNxwsYRl4I+jS0l9bjsO9S nBZFwgjC7Xn+VfkZw5sQTGgZbMkusXuMt9YMS2r0V6LXPBPqFwM/bmwaTMcx32nx AWbL/rMx0mKqpidmMwPaS/eSzds5LSKWVIjUJlCsgrOMpyqhSceLzI+nc8mqMpLw nBo68XBI98iU80pi9us4lhp50kzAcfzzz9IBbDOH/MCwv75UiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQpAsqrI1nfdn2a3O49M0B4TEqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODMxZTY4NGItMzg2NS0z ZjI5LWEyMjctOTExZTQwNjJiNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD6cPnvavUYzHi60BuA3HSb22trThsJBMIr26jzbJMHTLOgxZsrdOLl hdYygmTq/JBVCLsmBLrig8j9HMCk4GgUknQef9Sk1NP1dGrnGwmlUMVP4DG7SV+j KsvieniLHiW6lFpkjwEw0j2Qb7eGfWF6UBcvfDjPxt4+Loc6LQ/M92BJ0yo0kVd0 pZOBRecA7aKMZwwkaAneSyKI3xlf/AKDeIFm0ZZRm9DTzMwZkjax2+f2keBcOL6r dCUFdNgsC5Fc1XEUnciQ8VVDg2SE1XOsW1A/Q9tUzg5WYg0o9NIzAxQWzzx4+77f jl0zfzx1Yzp0BAkkQLXcKkCkSJ8o6UM= -----END CERTIFICATE-----Generated at Fri Apr 17 16:40:16 2026 by rpki-client