$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa File: dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa (raw, json) Hash identifier: zTCPeBoclh3okSrf7lYSxhWAET1NG1dX0HjHeMAQX84= Subject key identifier: 15:4D:76:F8:45:AC:2B:5D:9B:A3:C1:00:9C:EB:8F:68:10:94:DC:C9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D75D54E636069287B6EF66540 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 9009 IP address blocks: 172.111.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:4e:63:60:69:28:7b:6e:f6:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=12d07c75-9f97-4c37-ac1f-ac374e56acf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:1f:cf:ec:56:2f:4a:fc:af:bc:fb:5e:b4: 19:d7:87:52:d8:95:02:1a:05:96:cd:a0:88:98:f6: 17:cd:72:3e:00:43:78:44:a1:36:e3:a4:67:b1:98: ae:3e:28:a2:ab:90:b2:f3:30:c9:6a:ca:91:f1:a4: 32:dd:da:7d:ee:0a:37:85:2c:9f:1d:c5:f4:b4:2c: f4:8f:39:65:53:0a:82:25:33:c5:a3:45:61:df:ef: d4:25:58:03:34:6e:f6:21:00:7b:0c:26:cf:c4:a6: 08:18:b3:c4:09:61:a2:df:38:96:41:00:16:ef:8c: 10:99:c8:8d:22:8f:f2:7b:55:9c:6c:57:a4:86:69: 86:a1:8f:ce:c9:e1:62:b7:ed:6b:8e:d2:0a:ad:d0: b8:dc:41:87:28:e4:15:54:96:29:70:a7:15:65:9b: 1e:41:1a:8d:ca:14:1f:ed:2c:91:a3:8c:06:92:5f: 78:a9:09:6b:76:2a:b0:c9:fe:58:44:d2:15:5c:ef: 83:af:86:1e:12:75:b2:90:8c:d6:8c:86:9f:98:c7: 4a:3b:5c:da:c4:0d:22:fa:bc:73:3f:b2:42:f6:17: 7a:67:de:e3:9d:24:4d:8e:b8:56:c0:6f:d9:8b:dc: 9d:6d:a5:75:fb:1c:34:b0:22:64:7e:d6:a5:23:18: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4D:76:F8:45:AC:2B:5D:9B:A3:C1:00:9C:EB:8F:68:10:94:DC:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b9:2c:4a:3f:0f:f1:c9:ad:36:81:7a:a4:ad:0e:ab:93:1d: 1d:a4:ce:78:d7:f1:6c:92:2c:1e:98:49:b6:8d:40:cf:e0:80: 7f:96:01:ee:99:6a:f9:0d:4f:fe:5c:5b:7a:03:0f:a2:79:39: 86:57:ca:e3:4d:bc:84:5d:89:94:e6:07:63:1f:31:6d:05:80: c5:02:03:10:46:81:e1:3f:be:0c:85:8e:a5:71:89:82:18:c8: 41:82:56:34:f9:66:3c:9d:33:23:5e:32:15:86:57:0d:62:dd: bc:91:d2:59:c9:aa:35:08:b0:98:e2:18:7a:04:45:b6:be:1f: 74:2d:bf:b9:4d:09:2c:82:27:ff:c3:b1:c3:24:0e:2f:fa:13: 0b:d1:04:9a:c3:b5:3b:30:77:fb:3a:e1:23:81:1a:fb:9b:57: a4:f8:e5:60:c6:d4:c9:39:4d:d6:18:61:74:16:48:0c:d2:42: 64:71:6a:33:f8:86:8a:6b:1b:41:58:a1:5e:df:71:1c:9d:1b: eb:bd:be:02:f1:1e:d1:a0:c7:3e:29:fa:78:06:d1:37:f6:93: af:65:fc:f7:ec:e2:3b:ee:8e:ab:fc:45:9f:df:22:af:1b:ba: e7:aa:88:dc:73:09:8b:ab:fb:ef:b6:02:f5:99:4e:50:dc:93: 7e:4c:97:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111U5jYGkoe272ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk MTJkMDdjNzUtOWY5Ny00YzM3LWFjMWYtYWMzNzRlNTZhY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98fz+xWL0r8r7z7XrQZ14dS2JUCGgWWzaCI mPYXzXI+AEN4RKE246RnsZiuPiiiq5Cy8zDJasqR8aQy3dp97go3hSyfHcX0tCz0 jzllUwqCJTPFo0Vh3+/UJVgDNG72IQB7DCbPxKYIGLPECWGi3ziWQQAW74wQmciN Io/ye1WcbFekhmmGoY/OyeFit+1rjtIKrdC43EGHKOQVVJYpcKcVZZseQRqNyhQf 7SyRo4wGkl94qQlrdiqwyf5YRNIVXO+Dr4YeEnWykIzWjIafmMdKO1zaxA0i+rxz P7JC9hd6Z97jnSRNjrhWwG/Zi9ydbaV1+xw0sCJkftalIxiIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVNdvhFrCtdm6PBAJzrj2gQlNzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGM3OWJjNGMtMjI1Yy0z YTdhLWE2NTItY2YzMWYwZTIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi5LEo/D/HJrTaBeqStDquTHR2kznjX8WySLB6YSbaNQM/ggH+WAe6Z avkNT/5cW3oDD6J5OYZXyuNNvIRdiZTmB2MfMW0FgMUCAxBGgeE/vgyFjqVxiYIY yEGCVjT5ZjydMyNeMhWGVw1i3byR0lnJqjUIsJjiGHoERba+H3Qtv7lNCSyCJ//D scMkDi/6EwvRBJrDtTswd/s64SOBGvubV6T45WDG1Mk5TdYYYXQWSAzSQmRxajP4 hoprG0FYoV7fcRydG+u9vgLxHtGgxz4p+ngG0Tf2k69l/Pfs4jvujqv8RZ/fIq8b uueqiNxzCYur+++2AvWZTlDck35Ml3c= -----END CERTIFICATE-----Generated at Fri Apr 17 04:53:36 2026 by rpki-client