$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa File: 02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa (raw, json) Hash identifier: SziiJb+yBHI7q6xN6PUWWbCXF/1XBU46AlvDlOiGuiU= Subject key identifier: BC:B5:EF:F5:0B:32:26:62:EE:5B:12:B1:52:81:5C:BB:D4:BE:39:D5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D2A74EC5B174BEC8FF2A67880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 172.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ec:5b:17:4b:ec:8f:f2:a6:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=2f64c75d-5d71-4cf5-b7a0-bdf766ade5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:71:3f:30:10:0a:69:29:9c:f9:71:a9:03: 0a:8c:79:a4:fb:94:39:66:6f:48:73:70:e9:18:9f: e2:28:2e:6f:03:11:1c:34:de:eb:dc:a7:80:49:7b: 35:58:c1:c6:59:e1:f7:ad:84:e8:56:fa:a4:7b:cd: b1:05:63:e1:60:46:c8:62:09:0d:99:46:54:57:4d: 00:7b:84:e8:29:e0:b1:7f:88:3c:38:1f:80:a1:cc: 1d:0f:72:6e:d8:97:5a:b1:2d:40:b4:13:41:68:4d: 1b:07:ed:b3:13:f7:dd:5e:e5:ce:ca:b8:33:82:69: 46:00:50:20:62:d7:19:08:a5:a5:d2:47:f3:f2:b6: 5b:8a:c3:ac:99:a1:f2:46:cf:a0:56:9e:36:43:44: 70:1d:df:ce:5e:05:ef:b6:8f:2c:77:12:4d:5f:39: 6b:6a:9e:00:a8:13:0d:fa:59:ed:2a:dc:04:3c:e2: 4c:44:9f:b4:67:e4:28:74:11:14:cd:8b:d9:28:5d: d6:3e:c1:48:fa:81:fd:c6:aa:be:d1:98:e9:18:9f: 78:0c:59:f8:52:39:2c:10:fc:d3:42:00:24:43:cc: 3b:15:7c:82:50:7a:d7:64:64:ea:da:c4:40:a6:a9: 19:88:b2:b1:80:8c:4e:9e:0e:e5:40:55:d7:8a:88: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B5:EF:F5:0B:32:26:62:EE:5B:12:B1:52:81:5C:BB:D4:BE:39:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a5:d3:cd:d2:2e:5b:98:d6:41:82:89:17:0f:80:7a:43:1f: 17:5c:8c:e9:93:4b:bc:f4:9c:ab:5c:f9:bb:3b:0b:8d:cd:8d: 4c:7c:2d:ff:91:f3:01:da:79:38:24:d0:37:79:a9:36:01:24: 20:ea:bd:a8:67:03:16:35:00:6b:e1:7a:9b:86:b9:8a:5b:5b: a8:d6:bb:85:e8:eb:e0:34:22:3b:fa:f4:59:fd:23:63:1c:23: a4:6c:05:7f:6e:cc:16:10:c1:f5:79:90:dd:aa:47:9b:53:c3: 1b:2d:d6:6c:f5:3d:8b:7c:52:00:a0:f7:1e:29:42:8a:78:35: 9b:41:cd:62:8c:15:c0:a9:b3:4b:fc:9d:6c:d9:93:60:2d:c3: a9:f4:15:ad:ab:e2:62:04:f1:3d:77:4d:3d:ca:13:84:47:7b: 2b:1b:2e:50:25:ef:57:da:a7:d7:cb:de:85:ee:88:eb:1e:19: 95:49:f3:b2:31:b5:c8:05:48:ff:a7:e4:ec:37:47:1f:bb:58: 35:5f:df:f4:b4:ee:b1:16:33:b2:0c:5e:a8:6a:ea:1b:a7:7b: f0:cd:8c:46:7b:bc:ec:1f:e5:5a:2f:94:ed:d3:f2:c7:aa:72: 39:62:c2:8c:de:ea:28:80:62:0e:cf:9b:5c:5d:83:c4:08:3f: 17:99:34:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOxbF0vsj/KmeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MmY2NGM3NWQtNWQ3MS00Y2Y1LWI3YTAtYmRmNzY2YWRlNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b5xPzAQCmkpnPlxqQMKjHmk+5Q5Zm9Ic3Dp GJ/iKC5vAxEcNN7r3KeASXs1WMHGWeH3rYToVvqke82xBWPhYEbIYgkNmUZUV00A e4ToKeCxf4g8OB+AocwdD3Ju2JdasS1AtBNBaE0bB+2zE/fdXuXOyrgzgmlGAFAg YtcZCKWl0kfz8rZbisOsmaHyRs+gVp42Q0RwHd/OXgXvto8sdxJNXzlrap4AqBMN +lntKtwEPOJMRJ+0Z+QodBEUzYvZKF3WPsFI+oH9xqq+0ZjpGJ94DFn4UjksEPzT QgAkQ8w7FXyCUHrXZGTq2sRApqkZiLKxgIxOng7lQFXXiogxhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy17/ULMiZi7lsSsVKBXLvUvjnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDJjOTEzN2EtM2ZhYS0z ZGNkLWI1ZGYtNGYxNTczZGQ1YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGl083SLluY1kGCiRcPgHpDHxdcjOmTS7z0nKtc+bs7C43NjUx8Lf+R 8wHaeTgk0Dd5qTYBJCDqvahnAxY1AGvhepuGuYpbW6jWu4Xo6+A0Ijv69Fn9I2Mc I6RsBX9uzBYQwfV5kN2qR5tTwxst1mz1PYt8UgCg9x4pQop4NZtBzWKMFcCps0v8 nWzZk2Atw6n0Fa2r4mIE8T13TT3KE4RHeysbLlAl71fap9fL3oXuiOseGZVJ87Ix tcgFSP+n5Ow3Rx+7WDVf3/S07rEWM7IMXqhq6hune/DNjEZ7vOwf5VovlO3T8seq cjliwoze6iiAYg7Pm1xdg8QIPxeZNG4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:00:54 2026 by rpki-client