$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa File: 4c52d1c0-771e-385b-af85-88ec944d16c2.roa (raw, json) Hash identifier: mDcPB4cHheG98+KnEsTwulZKOePPRjIhcZ0rVAzy4tU= Subject key identifier: A5:68:9D:80:58:8D:99:E9:CD:E4:B6:8C:B0:74:F9:EF:A8:84:4F:16 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D3F64D2FA675770B096EB9580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 172.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d2:fa:67:57:70:b0:96:eb:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=5ea68abf-b0fa-4af3-9206-a549100b8354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:8d:26:0a:07:13:f1:09:2d:d7:ab:a0:21: 50:e7:b0:bf:58:82:2a:30:70:df:fa:4b:dc:4a:9f: 4e:d6:c3:92:55:61:68:c1:91:f7:ac:b9:00:82:0b: 8a:cc:6e:b7:05:bb:37:81:36:f6:b2:54:00:15:8f: f5:b0:d6:30:f3:15:13:73:30:e8:c4:d8:e8:40:67: 43:77:a4:54:97:cf:b5:77:42:72:ce:3b:64:c9:84: a6:7a:11:5e:af:0c:25:7b:44:cf:f3:4f:80:d4:9d: 38:ca:d7:95:0c:27:c8:d7:1b:8c:aa:8f:36:3a:a6: 38:2c:fa:2f:92:b2:1d:c1:42:df:7a:d9:c7:a8:16: ee:58:7f:04:9b:a6:42:19:e6:5f:5d:8d:58:d1:28: 5b:53:dd:ef:62:ac:12:d6:a1:32:fc:2c:c5:02:d0: 75:69:3c:51:38:e2:c1:f0:14:8c:9a:76:59:ea:40: cd:4c:19:80:1b:f5:2b:f5:f2:c6:06:d6:49:5c:37: 46:3c:a7:29:28:49:16:ed:c8:f0:d1:14:ad:e2:f3: eb:f5:90:04:2d:0a:0c:83:97:d3:8e:58:34:4b:c6: 22:2a:51:4e:49:66:b2:66:7d:35:e6:c7:57:8c:bd: f0:31:90:29:77:11:fd:f3:9a:29:58:86:3e:6b:ce: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:68:9D:80:58:8D:99:E9:CD:E4:B6:8C:B0:74:F9:EF:A8:84:4F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c52d1c0-771e-385b-af85-88ec944d16c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:17:ec:57:dc:ca:77:99:05:56:44:d6:04:6e:26:80:41:77: 7c:c5:a4:e1:1a:8a:d0:f4:66:c3:6c:01:e3:2c:68:c1:e9:3f: 04:8f:42:a7:79:8e:b8:64:5b:04:60:89:25:7a:c7:e9:b9:c8: 57:db:f5:b2:3e:d1:11:e4:2f:13:5e:37:e8:9c:46:a2:75:47: 38:8d:a8:37:fe:c0:08:54:cc:97:00:f9:a7:31:6b:95:5c:c5: 84:7c:cc:1f:e6:2b:66:7a:7c:16:8b:81:bd:ba:1d:0a:d4:8c: 02:26:3d:3a:21:b2:9e:c4:3a:55:71:07:01:34:8b:7d:a9:f6: 46:11:7b:9d:d3:d4:6b:b4:80:74:70:a9:6b:82:fc:db:4b:37: 27:dd:63:07:46:0e:18:8e:09:41:f9:dc:85:0e:70:0e:41:6d: f0:39:5f:2a:e3:7f:7b:e1:42:a0:82:e8:30:ef:78:03:94:19: 8b:b1:ea:14:1f:7b:72:e7:dd:35:7a:be:34:6a:88:b9:10:a5: 19:21:61:e5:45:c7:47:50:87:24:68:82:ee:3d:9c:8d:20:ce: a2:66:1e:4c:8d:f8:16:9d:6c:4d:a0:f2:90:88:da:6d:eb:6a: c5:55:da:4b:5b:72:d0:76:73:e6:dc:58:7e:62:09:56:1d:99: 42:19:70:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNL6Z1dwsJbrlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NWVhNjhhYmYtYjBmYS00YWYzLTkyMDYtYTU0OTEwMGI4MzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2qNJgoHE/EJLderoCFQ57C/WIIqMHDf+kvc Sp9O1sOSVWFowZH3rLkAgguKzG63Bbs3gTb2slQAFY/1sNYw8xUTczDoxNjoQGdD d6RUl8+1d0JyzjtkyYSmehFerwwle0TP80+A1J04yteVDCfI1xuMqo82OqY4LPov krIdwULfetnHqBbuWH8Em6ZCGeZfXY1Y0ShbU93vYqwS1qEy/CzFAtB1aTxROOLB 8BSMmnZZ6kDNTBmAG/Ur9fLGBtZJXDdGPKcpKEkW7cjw0RSt4vPr9ZAELQoMg5fT jlg0S8YiKlFOSWayZn015sdXjL3wMZApdxH985opWIY+a87epwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVonYBYjZnpzeS2jLB0+e+ohE8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGM1MmQxYzAtNzcxZS0z ODViLWFmODUtODhlYzk0NGQxNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcX7FfcyneZBVZE1gRuJoBBd3zFpOEaitD0ZsNsAeMsaMHpPwSPQqd5 jrhkWwRgiSV6x+m5yFfb9bI+0RHkLxNeN+icRqJ1RziNqDf+wAhUzJcA+acxa5Vc xYR8zB/mK2Z6fBaLgb26HQrUjAImPTohsp7EOlVxBwE0i32p9kYRe53T1Gu0gHRw qWuC/NtLNyfdYwdGDhiOCUH53IUOcA5BbfA5Xyrjf3vhQqCC6DDveAOUGYux6hQf e3Ln3TV6vjRqiLkQpRkhYeVFx0dQhyRogu49nI0gzqJmHkyN+BadbE2g8pCI2m3r asVV2ktbctB2c+bcWH5iCVYdmUIZcHs= -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:00 2026 by rpki-client