$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa File: 1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa (raw, json) Hash identifier: dEI8lH2KU7qLUsU9IF8HEo4IgrhePh5GrMScu32u9hM= Subject key identifier: 3A:51:11:84:B8:A9:DF:FB:72:ED:9E:D3:EB:33:C1:C5:1C:3C:4C:1C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D2A74EC1640472FBBB6A76560 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 172.111.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ec:16:40:47:2f:bb:b6:a7:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=8fb3b633-18c2-4d98-be47-6169c36895a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:3f:ec:c0:40:34:34:56:0b:8a:6c:bb:15: bf:6e:61:02:22:e1:79:ad:6a:69:91:28:d1:6b:23: 9c:a8:69:f4:24:53:a4:bc:25:69:af:a0:d0:65:ba: f2:a3:38:4b:38:33:fe:61:82:47:9f:59:a5:7e:28: f0:e1:f4:7b:67:a2:e9:08:dc:e9:86:6e:8a:23:b0: 1c:fb:6f:56:b9:4b:f2:36:1e:b1:a7:fa:9c:67:a8: dd:a8:eb:f9:67:0a:72:e0:07:04:f5:11:36:bd:4d: ee:33:0b:38:00:d3:f1:7c:72:d1:68:b1:79:03:3d: 4b:ba:f4:33:2a:ae:69:75:95:c0:7e:ad:79:e9:46: ea:7a:5a:83:f4:7c:a9:47:9d:38:48:6d:a6:0e:9f: df:c7:2d:13:39:43:0c:cd:27:1d:3f:7e:24:62:1f: 8e:1e:b7:c6:bb:a0:24:b3:eb:d7:43:d7:88:83:e7: 9b:24:8f:12:b9:41:29:e2:59:9d:ef:58:aa:37:8b: 18:9e:04:d8:f0:89:dc:57:81:46:5f:86:e6:07:30: 32:90:05:72:01:af:b1:4a:8e:3c:a8:25:a3:ce:9c: 71:1d:f8:e8:a5:03:f0:f2:f6:00:21:49:1f:72:fb: a1:61:14:ee:f9:64:43:f8:9c:30:bd:df:76:6d:16: aa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:51:11:84:B8:A9:DF:FB:72:ED:9E:D3:EB:33:C1:C5:1C:3C:4C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:aa:bf:de:1c:86:bb:6d:53:c8:99:48:c1:ba:b6:c1:96:bb: 16:12:4e:a6:d8:bf:7e:46:86:f3:b3:62:e7:64:f9:a9:26:f1: 35:c5:99:53:fa:84:14:65:55:6f:a8:68:f7:b2:62:e1:67:57: c7:54:5e:a6:77:04:0e:55:cf:9f:99:10:09:99:dc:4e:6a:56: 14:14:25:4b:a2:0e:b3:c0:c7:0e:2e:c0:45:b8:fd:04:1a:8d: a3:ba:84:9e:17:25:58:b6:11:b3:5b:77:96:64:ea:54:b0:2c: 28:07:b6:71:24:7b:e4:43:27:ea:71:bb:26:3d:6e:b2:34:80: 00:07:48:6c:45:b5:cc:fa:e7:9d:53:09:c7:6e:32:21:18:2c: 2d:b5:a9:75:6f:bf:7d:a7:6c:ff:f5:e9:ae:85:3e:f3:5b:03: 62:46:2c:ae:12:4e:7e:d5:41:8b:2c:1e:f6:ec:b2:7d:8d:f2: 26:a0:f1:f1:cc:71:8d:c8:b0:02:89:8b:4e:e7:5a:94:99:1f: 2c:72:26:d8:27:29:75:4c:0b:66:4b:c4:0f:82:1d:4b:85:ad: 97:e3:7e:71:85:4a:e2:9a:ac:a7:9f:32:7b:06:26:50:31:62: 3b:6b:18:29:bb:04:31:24:03:f4:f8:80:7f:82:9a:71:f0:e9: c3:3c:ee:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOwWQEcvu7anZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OGZiM2I2MzMtMThjMi00ZDk4LWJlNDctNjE2OWMzNjg5NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g0/7MBANDRWC4psuxW/bmECIuF5rWppkSjR ayOcqGn0JFOkvCVpr6DQZbryozhLODP+YYJHn1mlfijw4fR7Z6LpCNzphm6KI7Ac +29WuUvyNh6xp/qcZ6jdqOv5Zwpy4AcE9RE2vU3uMws4ANPxfHLRaLF5Az1LuvQz Kq5pdZXAfq156UbqelqD9HypR504SG2mDp/fxy0TOUMMzScdP34kYh+OHrfGu6Ak s+vXQ9eIg+ebJI8SuUEp4lmd71iqN4sYngTY8IncV4FGX4bmBzAykAVyAa+xSo48 qCWjzpxxHfjopQPw8vYAIUkfcvuhYRTu+WRD+Jwwvd92bRaqnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpREYS4qd/7cu2e0+szwcUcPEwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTA3OWE4YmItNjBhYS0z NDZlLTgzZTAtMjJhOWJhMzRjZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiqv94chrttU8iZSMG6tsGWuxYSTqbYv35GhvOzYudk+akm8TXFmVP6 hBRlVW+oaPeyYuFnV8dUXqZ3BA5Vz5+ZEAmZ3E5qVhQUJUuiDrPAxw4uwEW4/QQa jaO6hJ4XJVi2EbNbd5Zk6lSwLCgHtnEke+RDJ+pxuyY9brI0gAAHSGxFtcz6551T CcduMiEYLC21qXVvv32nbP/16a6FPvNbA2JGLK4STn7VQYssHvbssn2N8iag8fHM cY3IsAKJi07nWpSZHyxyJtgnKXVMC2ZLxA+CHUuFrZfjfnGFSuKarKefMnsGJlAx YjtrGCm7BDEkA/T4gH+CmnHw6cM87rs= -----END CERTIFICATE-----Generated at Thu Mar 26 03:38:42 2026 by rpki-client