$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4997f418-1a22-3acf-bcdb-48e0337b3854.roa File: 4997f418-1a22-3acf-bcdb-48e0337b3854.roa (raw, json) Hash identifier: FuuQozbCegkBVvVKIzYAbmrmQvnFS4TYyjCQAJZmVfI= Subject key identifier: C1:D6:F5:72:B6:F7:2F:E2:45:A6:58:C6:3C:28:A9:86:F5:0E:1D:C6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D1EC070C0F9B042EE4BCA1900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4997f418-1a22-3acf-bcdb-48e0337b3854.roa Signing time: Tue 10 Mar 2026 08:23:34 +0000 ROA not before: Tue 10 Mar 2026 08:23:34 +0000 ROA not after: Mon 08 Jun 2026 08:23:34 +0000 asID: 132372 IP address blocks: 172.111.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1e:c0:70:c0:f9:b0:42:ee:4b:ca:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 10 08:23:34 2026 GMT Not After : Jun 8 08:23:34 2026 GMT Subject: CN=71a54553-6345-4e6e-96a8-cc3228e5288a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:99:8e:d8:dd:29:6b:87:c1:fe:01:2b:9f: 83:81:e5:52:fa:20:2e:12:ae:e5:d7:e4:f8:99:8a: 9f:f7:6d:1b:9c:71:5f:98:76:3a:3d:0a:a5:96:aa: 79:44:a3:6c:c2:6b:c5:21:92:ae:e8:65:59:9c:16: 0e:63:91:c3:36:87:cb:f2:e0:3b:db:72:f2:27:ff: 42:26:51:6d:f3:48:af:29:a7:6d:54:c9:ac:59:83: 75:5d:68:97:b3:49:f7:be:94:62:92:ea:ce:2f:a8: 21:da:20:b6:6f:62:05:7e:34:74:cb:e9:ee:8e:d3: 4b:91:0a:2e:9e:f7:a0:94:5e:ed:74:e2:02:9d:81: f9:d1:36:7c:fa:b1:46:1e:b4:e5:ff:fc:63:5e:53: f6:b4:9d:fa:f3:75:25:57:b1:5d:64:64:81:dc:30: 8e:e1:74:91:73:3f:9c:08:26:86:01:94:02:8a:cc: f3:6f:fa:1d:23:18:d8:19:e2:aa:a3:c5:87:74:97: 3a:45:2d:5f:28:ee:aa:f3:16:b0:07:26:67:54:cb: 72:57:63:2c:f5:05:f7:1b:5c:a3:4d:d8:74:cd:2c: e4:04:22:e6:3a:1b:19:2b:97:81:5c:d6:d2:38:10: 85:0f:dd:74:1a:30:c8:18:0c:f5:9b:69:48:f0:c9: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D6:F5:72:B6:F7:2F:E2:45:A6:58:C6:3C:28:A9:86:F5:0E:1D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4997f418-1a22-3acf-bcdb-48e0337b3854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:eb:97:13:f0:23:1d:f8:13:05:49:0d:43:16:90:bd:51:a7: 07:3f:b3:9e:67:4f:7e:4e:b6:58:eb:58:36:5e:55:72:eb:06: ae:16:1c:ad:00:db:1a:28:82:82:23:f9:66:00:35:1e:56:9c: 8d:97:73:10:81:ab:91:80:8a:65:da:99:4a:1a:79:57:ac:1d: ad:8b:c5:ce:98:2c:c8:25:f7:aa:c5:6d:48:f3:b1:95:29:dd: f4:7d:00:12:a2:37:2c:53:ca:a6:75:17:a5:98:e0:5b:e4:42: 2a:cf:e2:ba:b0:08:30:2a:c5:bc:7e:12:e9:82:27:7b:3d:60: 25:36:b4:07:64:e7:26:99:51:66:95:05:e2:45:7b:39:a2:cf: 4f:60:1a:4f:ab:da:52:5f:c3:80:f3:d4:52:29:0d:61:16:e2: 35:fd:41:68:f6:f6:83:8d:3f:d9:16:71:a6:38:fe:fd:e7:7a: 0e:43:c6:d6:10:63:37:39:10:83:38:9f:81:a4:35:69:e5:a7: f7:90:36:78:21:9c:d7:ec:a0:95:b2:d8:5b:d9:d6:a0:55:2c: f1:98:5e:6c:87:92:ce:6e:e7:8d:f2:e4:65:c1:bd:9c:4a:b8: 50:02:43:46:bd:da:34:92:75:ce:8b:ab:bb:58:7a:43:33:18: cf:5c:4b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ewHDA+bBC7kvKGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxMDA4MjMzNFoXDTI2MDYwODA4MjMzNFowLzEtMCsGA1UEAxMk NzFhNTQ1NTMtNjM0NS00ZTZlLTk2YTgtY2MzMjI4ZTUyODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcaZjtjdKWuHwf4BK5+DgeVS+iAuEq7l1+T4 mYqf920bnHFfmHY6PQqllqp5RKNswmvFIZKu6GVZnBYOY5HDNofL8uA723LyJ/9C JlFt80ivKadtVMmsWYN1XWiXs0n3vpRikurOL6gh2iC2b2IFfjR0y+nujtNLkQou nveglF7tdOICnYH50TZ8+rFGHrTl//xjXlP2tJ3683UlV7FdZGSB3DCO4XSRcz+c CCaGAZQCiszzb/odIxjYGeKqo8WHdJc6RS1fKO6q8xawByZnVMtyV2Ms9QX3G1yj Tdh0zSzkBCLmOhsZK5eBXNbSOBCFD910GjDIGAz1m2lI8MndtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHW9XK29y/iRaZYxjwoqYb1Dh3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDk5N2Y0MTgtMWEyMi0z YWNmLWJjZGItNDhlMDMzN2IzODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3rlxPwIx34EwVJDUMWkL1Rpwc/s55nT35OtljrWDZeVXLrBq4WHK0A 2xoogoIj+WYANR5WnI2XcxCBq5GAimXamUoaeVesHa2Lxc6YLMgl96rFbUjzsZUp 3fR9ABKiNyxTyqZ1F6WY4FvkQirP4rqwCDAqxbx+EumCJ3s9YCU2tAdk5yaZUWaV BeJFezmiz09gGk+r2lJfw4Dz1FIpDWEW4jX9QWj29oONP9kWcaY4/v3neg5DxtYQ Yzc5EIM4n4GkNWnlp/eQNnghnNfsoJWy2FvZ1qBVLPGYXmyHks5u543y5GXBvZxK uFACQ0a92jSSdc6Lq7tYekMzGM9cSz0= -----END CERTIFICATE-----Generated at Thu Mar 26 09:11:47 2026 by rpki-client