$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa File: af0dac47-6e29-35db-80a1-859bd697b5d9.roa (raw, json) Hash identifier: it8tlxPH74eq7yzr1C3GJMvBbwAEK2uIqNvV9oAlYYw= Subject key identifier: 04:C2:F2:CD:68:53:E8:24:BD:37:DB:71:31:EB:16:84:96:FC:84:61 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584E210FDA14E6BD3533E6B0C880 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 398395 IP address blocks: 172.111.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0f:da:14:e6:bd:35:33:e6:b0:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=0d9280c4-a84a-47d9-a320-11e4834665eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:a7:84:2c:64:5f:c7:7c:37:e7:34:c2:7e: 11:15:b0:76:00:f1:67:10:6b:cd:37:a9:de:e2:65: 6f:d2:48:e8:ce:7a:11:9b:20:bb:95:2b:b6:30:58: 09:6b:5d:5b:9f:2d:67:92:ff:88:83:eb:32:0f:c3: 2f:5f:2a:5d:b3:e7:aa:f0:02:ad:af:7d:e2:42:a7: e7:02:a5:a7:e3:20:dc:1a:ae:0e:e0:3a:0f:47:7d: 06:f0:6e:64:3f:a4:c6:4f:f1:06:27:6a:1b:21:62: d0:68:2a:92:01:20:94:49:c1:5d:22:7b:bf:b4:64: 9c:08:f0:85:50:11:6b:f9:3d:f1:f5:62:de:ad:db: 03:b7:24:68:41:52:4b:95:77:50:05:bb:7b:9f:ce: 85:82:c5:47:91:8a:d9:52:a2:28:20:af:00:6d:9a: 89:0a:ec:f3:53:ab:cd:4e:33:ca:47:f9:3d:38:db: cd:80:d4:62:b2:93:eb:d4:54:a6:7f:a9:55:6f:e9: e4:a1:d3:cf:c6:ae:69:e4:de:af:28:6c:50:c4:79: 7d:fd:95:8f:e4:1d:46:08:1c:b1:da:6b:fb:8d:11: c4:a9:34:c3:51:13:f1:6b:02:6b:a5:f8:86:9d:36: df:81:47:75:18:db:25:c5:84:cc:43:9b:7b:1d:1a: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C2:F2:CD:68:53:E8:24:BD:37:DB:71:31:EB:16:84:96:FC:84:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5b:76:17:b0:f9:c6:de:ec:7f:c4:65:3a:4c:a5:78:c9:c1: 14:b0:83:4e:fd:8a:1b:00:d5:b7:26:f9:8b:e3:92:97:44:42: bc:b3:72:02:89:c3:79:2e:9a:22:19:57:ec:ef:53:01:e6:fd: a2:93:b5:5f:61:1f:27:18:bd:63:3f:ee:ac:08:8d:6f:6b:77: 9a:71:3b:4f:9a:75:9a:6c:23:5e:16:18:69:d0:a8:31:dd:34: 9c:a4:7f:93:58:a8:8b:15:13:be:1a:d7:8c:ef:0d:4c:d8:9f: e8:14:bd:03:bb:7a:35:83:1e:a4:12:e1:ee:67:6d:b2:5a:c8: 87:2e:ca:a1:19:d5:f8:ac:6e:13:f8:92:f0:25:ae:43:44:53: cc:2d:5a:11:39:a1:a0:6a:73:e0:a3:89:12:e7:55:9e:fc:f9: b9:fa:55:94:c7:d1:d0:0e:ab:99:4b:16:3e:73:a9:06:1b:33: d1:1e:8d:eb:bf:41:e8:dc:6a:f3:c5:69:97:93:2f:ec:b3:94: 9f:50:9a:8a:69:0e:cc:72:13:64:34:b1:ab:b9:b7:4f:1a:b3: f3:d2:47:5b:49:cf:2b:e2:8a:c1:03:ad:01:74:86:52:73:97: 11:90:e8:e6:ec:a5:c6:13:03:a2:5d:c4:6d:85:f4:42:d2:71: 0d:20:4f:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD9oU5r01M+awyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk MGQ5MjgwYzQtYTg0YS00N2Q5LWEzMjAtMTFlNDgzNDY2NWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqSnhCxkX8d8N+c0wn4RFbB2APFnEGvNN6ne 4mVv0kjoznoRmyC7lSu2MFgJa11bny1nkv+Ig+syD8MvXypds+eq8AKtr33iQqfn AqWn4yDcGq4O4DoPR30G8G5kP6TGT/EGJ2obIWLQaCqSASCUScFdInu/tGScCPCF UBFr+T3x9WLerdsDtyRoQVJLlXdQBbt7n86FgsVHkYrZUqIoIK8AbZqJCuzzU6vN TjPKR/k9ONvNgNRispPr1FSmf6lVb+nkodPPxq5p5N6vKGxQxHl9/ZWP5B1GCByx 2mv7jRHEqTTDURPxawJrpfiGnTbfgUd1GNslxYTMQ5t7HRpYhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATC8s1oU+gkvTfbcTHrFoSW/IRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYWYwZGFjNDctNmUyOS0z NWRiLTgwYTEtODU5YmQ2OTdiNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxbdhew+cbe7H/EZTpMpXjJwRSwg079ihsA1bcm+YvjkpdEQryzcgKJ w3kumiIZV+zvUwHm/aKTtV9hHycYvWM/7qwIjW9rd5pxO0+adZpsI14WGGnQqDHd NJykf5NYqIsVE74a14zvDUzYn+gUvQO7ejWDHqQS4e5nbbJayIcuyqEZ1fisbhP4 kvAlrkNEU8wtWhE5oaBqc+CjiRLnVZ78+bn6VZTH0dAOq5lLFj5zqQYbM9Eejeu/ QejcavPFaZeTL+yzlJ9QmoppDsxyE2Q0sau5t08as/PSR1tJzyviisEDrQF0hlJz lxGQ6ObspcYTA6JdxG2F9ELScQ0gT4U= -----END CERTIFICATE-----Generated at Sat Jun 13 14:01:37 2026 by rpki-client