$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json) Hash identifier: BF5bojGtCfEU+v9vnLI8d9Ei6U98WKc4yOzflTS5IJI= Subject key identifier: 75:7D:9F:F2:56:D4:6A:38:10:19:45:6A:17:AD:D3:3B:40:F6:56:D7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D5E1A612AF83D8C9F4A38D040 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 3223 IP address blocks: 172.111.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:61:2a:f8:3d:8c:9f:4a:38:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=bf9bd04e-2c0e-437c-8e1a-ae87e4b91fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:35:26:54:2d:70:ad:2c:17:d0:68:66:89: 1b:f7:6f:25:7c:79:e8:79:44:f7:75:0f:52:9f:ed: eb:12:0b:ae:05:6b:6b:ad:d7:63:ea:56:64:5f:69: 8f:41:4a:2c:75:f1:ff:27:a6:33:92:76:93:0c:e9: 6f:47:af:37:a8:aa:02:25:ac:17:81:84:1c:14:cc: 0f:94:26:9c:33:a5:51:d2:9d:f5:ff:1b:95:17:df: a0:df:89:d2:d8:a9:85:ac:1d:f5:10:cd:53:43:4f: 3f:2a:f7:5d:1f:0e:61:e4:23:ce:bf:c9:b1:8c:4c: 6a:3e:93:7b:55:4f:4d:b8:4c:f9:40:f1:e3:ee:34: 18:26:25:53:a3:3d:61:57:80:58:f5:5b:75:b7:fb: 57:9d:5a:1e:0e:88:3f:05:0a:00:15:e0:97:b5:75: 00:61:2e:88:41:17:63:e9:20:6a:c1:b9:e3:39:40: 95:10:b2:5c:06:0b:71:41:83:68:1e:91:9e:9b:06: 79:76:88:fb:7e:a7:41:30:b9:4b:11:54:56:5a:d7: ea:a4:42:64:7b:5a:aa:1f:f4:d0:93:78:65:9d:11: 86:96:fe:6b:cc:56:8f:08:b0:1c:dc:18:c4:09:79: 30:82:7e:86:39:20:9d:7a:71:12:96:a8:ce:10:39: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7D:9F:F2:56:D4:6A:38:10:19:45:6A:17:AD:D3:3B:40:F6:56:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:32:64:0b:14:69:58:eb:ba:4b:a2:5e:04:e8:22:5d:5e:42: f1:de:e8:72:6d:7d:53:b4:be:87:95:ba:6a:c7:12:65:dc:12: 7a:78:3a:84:5c:06:9f:58:95:bb:b5:a5:7c:e5:b3:db:61:c6: 48:81:33:6b:bb:86:80:a0:1c:01:5f:cc:3e:4b:c0:d4:15:8c: a4:23:f9:39:69:40:f9:de:89:ca:f7:28:3f:c7:fd:64:6c:ea: e5:49:f6:6b:a6:60:7f:93:15:ff:92:58:8b:e7:e3:84:07:24: c5:44:9c:07:5c:f9:95:b6:76:57:ce:5f:38:f6:62:27:e9:5e: 16:8c:da:80:c9:8a:7a:90:8b:d0:6a:1d:a1:d0:fe:8f:dc:00: 6b:65:8d:0d:86:01:2c:16:a2:70:a5:34:7f:86:5d:8f:2c:28: 38:fa:d0:6f:14:25:9b:a8:d6:ae:a9:b8:97:27:d7:63:37:e6: ff:11:99:d7:e6:2c:dd:06:d3:42:f0:fa:36:03:00:4f:fe:7f: bb:d1:bc:73:e5:86:76:c7:f3:9e:17:c6:4e:f6:35:a0:7f:02: ee:09:3f:48:ed:a8:e4:d8:45:d5:22:ce:6b:59:eb:e7:de:6a: dd:1a:e6:d2:9c:b3:30:1d:4d:87:8f:bf:2b:44:bc:13:2c:4f: 17:6c:cf:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmEq+D2Mn0o40EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YmY5YmQwNGUtMmMwZS00MzdjLThlMWEtYWU4N2U0YjkxZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIs1JlQtcK0sF9BoZokb928lfHnoeUT3dQ9S n+3rEguuBWtrrddj6lZkX2mPQUosdfH/J6YzknaTDOlvR683qKoCJawXgYQcFMwP lCacM6VR0p31/xuVF9+g34nS2KmFrB31EM1TQ08/KvddHw5h5CPOv8mxjExqPpN7 VU9NuEz5QPHj7jQYJiVToz1hV4BY9Vt1t/tXnVoeDog/BQoAFeCXtXUAYS6IQRdj 6SBqwbnjOUCVELJcBgtxQYNoHpGemwZ5doj7fqdBMLlLEVRWWtfqpEJke1qqH/TQ k3hlnRGGlv5rzFaPCLAc3BjECXkwgn6GOSCdenESlqjOEDmK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV9n/JW1Go4EBlFahet0ztA9lbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWE3ZTBkZWYtODBjNi0z MGQ0LTliMzctMDdhZTBiNDhiZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoyZAsUaVjrukuiXgToIl1eQvHe6HJtfVO0voeVumrHEmXcEnp4OoRc Bp9Ylbu1pXzls9thxkiBM2u7hoCgHAFfzD5LwNQVjKQj+TlpQPneicr3KD/H/WRs 6uVJ9mumYH+TFf+SWIvn44QHJMVEnAdc+ZW2dlfOXzj2YifpXhaM2oDJinqQi9Bq HaHQ/o/cAGtljQ2GASwWonClNH+GXY8sKDj60G8UJZuo1q6puJcn12M35v8Rmdfm LN0G00Lw+jYDAE/+f7vRvHPlhnbH854Xxk72NaB/Au4JP0jtqOTYRdUizmtZ6+fe at0a5tKcszAdTYePvytEvBMsTxdszzI= -----END CERTIFICATE-----Generated at Fri Apr 17 06:52:45 2026 by rpki-client