$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa File: 08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa (raw, json) Hash identifier: flsZEa2N3xI2B5AxocZV0E7Wa3X4yzNcKbT3wkb7yQ4= Subject key identifier: C9:B9:C4:BE:23:9B:DD:9F:5C:F9:62:5B:8F:32:CD:B8:1C:60:4A:02 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D2A74EB9F8465A496F9C0ED20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 172.111.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:eb:9f:84:65:a4:96:f9:c0:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=48643c17-b0c8-457d-86eb-9e1d4b143614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:39:0c:d7:44:39:2c:4f:e7:db:de:f0:82:b9: 8b:b5:11:d3:5b:43:8f:cc:01:5b:bf:2e:f5:59:b4: c4:5a:1d:16:b1:05:10:33:f1:36:35:b0:af:f3:53: 7e:14:21:f2:69:42:f4:43:b8:9d:0b:c6:92:76:06: 19:f4:4f:70:42:fa:5c:d6:18:d5:e7:61:95:c8:e9: 0c:32:87:dd:a0:e8:61:fd:b8:c7:53:89:fb:d6:f7: cc:cc:2e:ec:e9:14:ca:1a:a8:a6:fb:be:d5:3e:3c: 6f:a1:53:1c:82:d3:f7:59:a3:a7:2e:13:8f:aa:ac: c9:4c:c5:cc:50:69:c6:4d:fe:c1:82:cf:61:5b:f3: 59:28:23:16:0a:42:a0:4a:81:f9:db:06:cd:40:bb: c4:5f:d5:ac:be:08:a0:2f:93:d6:7b:84:8b:ce:ad: bc:d4:a6:82:75:06:f0:2b:98:d4:89:f6:8f:1a:b2: d5:49:0d:9c:d6:fe:18:df:d9:5f:49:1b:e4:88:da: 12:77:3f:4a:b3:0a:6e:3f:4c:7b:09:b0:07:f9:66: 25:5a:e7:39:76:bb:1b:7b:94:92:b1:fd:de:f7:c3: 1a:e8:77:f5:58:db:c8:9c:a4:73:c0:08:2e:81:87: 10:de:54:90:2d:52:dd:4b:b3:e1:88:ec:ed:8e:1b: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B9:C4:BE:23:9B:DD:9F:5C:F9:62:5B:8F:32:CD:B8:1C:60:4A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:20:26:1f:a6:94:1d:a5:e1:ab:62:f7:c3:21:00:c6:7f:0e: d9:f9:73:53:12:0d:c7:15:41:96:b6:2b:d4:65:5d:f0:ea:fe: e6:59:f3:2d:45:dc:89:b6:ae:53:d6:10:0a:1c:be:f4:59:8d: 5d:1f:af:b0:6d:ed:7f:8d:91:4a:96:ea:80:3b:09:33:ef:bc: 3d:6a:9f:49:5f:7a:31:8a:7b:b0:3e:20:a0:21:b2:87:7c:a7: 67:68:7d:6a:8c:c3:45:01:e4:0a:40:d3:7f:ea:6a:94:e2:0c: 0d:a0:ed:a7:cc:54:4b:81:c3:a7:ee:8b:51:7c:bb:dd:95:bf: 94:59:8c:54:db:f9:dc:49:10:dc:8e:9f:02:6a:1d:c5:43:85: 2d:5f:e7:a7:e5:b6:99:f9:c2:95:1b:8e:1e:eb:62:f7:fb:5d: 6f:8e:bb:0c:a6:dc:7e:d5:91:59:00:93:00:03:7b:e6:83:af: 94:e0:d9:b2:92:d8:cd:31:2f:64:86:64:ff:a5:25:3e:9f:7a: fd:de:40:70:66:66:94:83:38:3d:31:69:28:a4:45:d5:06:da: bd:3b:43:c0:fc:dd:ad:fa:f0:ac:f1:2e:6f:0d:a8:50:93:00: 2f:29:e6:f3:bb:3e:6e:4d:7e:cb:c2:d4:5f:d0:24:65:08:33: e8:d2:d9:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOufhGWklvnA7SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDg2NDNjMTctYjBjOC00NTdkLTg2ZWItOWUxZDRiMTQzNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTkM10Q5LE/n297wgrmLtRHTW0OPzAFbvy71 WbTEWh0WsQUQM/E2NbCv81N+FCHyaUL0Q7idC8aSdgYZ9E9wQvpc1hjV52GVyOkM MofdoOhh/bjHU4n71vfMzC7s6RTKGqim+77VPjxvoVMcgtP3WaOnLhOPqqzJTMXM UGnGTf7Bgs9hW/NZKCMWCkKgSoH52wbNQLvEX9WsvgigL5PWe4SLzq281KaCdQbw K5jUifaPGrLVSQ2c1v4Y39lfSRvkiNoSdz9KswpuP0x7CbAH+WYlWuc5drsbe5SS sf3e98Ma6Hf1WNvInKRzwAgugYcQ3lSQLVLdS7PhiOztjhssNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm5xL4jm92fXPliW48yzbgcYEoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDhlMzI5NTItZmZiNy0z ZDlhLWI0ZmQtNzVlNThiOTk3NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8gJh+mlB2l4ati98MhAMZ/Dtn5c1MSDccVQZa2K9RlXfDq/uZZ8y1F 3Im2rlPWEAocvvRZjV0fr7Bt7X+NkUqW6oA7CTPvvD1qn0lfejGKe7A+IKAhsod8 p2dofWqMw0UB5ApA03/qapTiDA2g7afMVEuBw6fui1F8u92Vv5RZjFTb+dxJENyO nwJqHcVDhS1f56fltpn5wpUbjh7rYvf7XW+Ouwym3H7VkVkAkwADe+aDr5Tg2bKS 2M0xL2SGZP+lJT6fev3eQHBmZpSDOD0xaSikRdUG2r07Q8D83a368KzxLm8NqFCT AC8p5vO7Pm5NfsvC1F/QJGUIM+jS2U0= -----END CERTIFICATE-----Generated at Thu Mar 26 03:32:59 2026 by rpki-client