$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa File: 4ff77275-cd8b-34d5-a0d2-6469a112947f.roa (raw, json) Hash identifier: kQ70zk9ucP8kSMfDOlLKTtkxiSKHTAu0ie5HymA/FC8= Subject key identifier: 08:A9:11:72:CE:39:30:24:6B:83:E8:5C:5A:46:73:23:EA:CD:2B:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D2A74EBE71EF49635EC6E3980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 172.111.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:eb:e7:1e:f4:96:35:ec:6e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=05339d1e-fb58-4c7f-b507-3c1a872987c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:af:16:75:e4:c0:a1:35:34:1c:7c:35:26: 77:44:3d:f2:6d:ed:d7:ed:3c:a1:91:5f:d8:23:4f: 03:f9:33:f0:a1:6d:32:40:cf:79:53:85:38:ca:68: 19:60:af:36:73:4c:15:ac:48:ac:a8:dd:d2:82:e7: 35:09:f0:33:8f:b9:2b:62:c0:65:19:67:a8:39:82: 6c:c6:49:82:c0:b8:c6:3f:53:c7:18:47:13:1c:fd: 37:ee:cc:ae:cd:a5:23:89:b0:99:7f:5b:9c:87:24: 46:ba:1b:83:be:2d:ed:ed:97:6b:3a:b2:c1:72:8d: 11:dc:c3:54:b6:6b:05:5f:02:e2:00:6b:66:7b:df: 30:cb:3c:57:e1:3a:1c:3c:59:70:79:78:d7:bb:c5: fb:98:91:0e:ea:94:9b:05:81:b4:51:fc:97:ca:6e: 33:69:3d:43:21:5c:a4:31:f8:63:1e:c5:f9:91:cf: 98:fa:55:6b:e1:0e:5d:b7:31:3b:1e:67:e7:1c:3b: 88:b2:0e:2e:a4:be:bb:33:6e:ac:7e:58:8c:bb:1d: 70:dd:2d:03:d7:bb:43:7c:a6:23:23:cc:3c:4c:4f: 2a:5a:c9:db:2d:b2:2d:ec:06:d7:f0:75:41:c5:4d: 0c:67:70:8f:70:7c:bc:30:9b:33:50:88:50:11:03: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A9:11:72:CE:39:30:24:6B:83:E8:5C:5A:46:73:23:EA:CD:2B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a8:e7:aa:2c:34:a5:0f:c2:ea:10:b0:54:2e:93:d3:22:56: 35:9d:46:f8:ca:96:55:52:4c:af:0a:29:bc:2e:6e:9e:53:10: 6d:0a:5e:70:d1:e4:68:29:b2:61:fc:4e:59:63:8a:6f:0a:e3: b1:1b:21:b6:9e:c3:ff:da:b8:87:78:f2:d7:84:9c:ed:37:37: 7f:08:ff:dd:95:50:6f:09:23:a1:30:43:93:ef:a4:c2:cf:d7: 56:f8:6d:4e:74:96:c4:5f:d0:91:50:6f:f7:ea:ae:49:67:19: c2:7f:8e:02:44:3f:9b:00:c4:21:aa:fc:74:cd:df:ce:07:0c: 0b:be:aa:e4:9b:b5:8e:cc:b0:51:fb:53:c5:46:27:66:15:68: 11:6d:96:9a:fd:bb:81:75:a9:f4:89:a0:89:71:5d:92:94:73: fe:75:50:5f:d3:91:71:19:5d:06:a9:8d:45:4f:7c:ed:f5:5f: ff:cc:d9:0e:a4:c3:1b:cf:a2:2f:67:e0:0a:01:9d:90:3e:47: 56:27:6c:f6:ef:02:84:5d:e9:c7:17:97:87:3a:cc:b3:2b:43: 1b:12:f2:9b:90:4a:5e:1f:d4:ac:d8:13:24:43:ef:46:fa:7b: 90:07:b2:c3:07:79:c2:01:2c:8d:5b:d4:78:06:e4:95:02:2b: 39:55:d3:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOvnHvSWNexuOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MDUzMzlkMWUtZmI1OC00YzdmLWI1MDctM2MxYTg3Mjk4N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsumvFnXkwKE1NBx8NSZ3RD3ybe3X7TyhkV/Y I08D+TPwoW0yQM95U4U4ymgZYK82c0wVrEisqN3Sguc1CfAzj7krYsBlGWeoOYJs xkmCwLjGP1PHGEcTHP037syuzaUjibCZf1uchyRGuhuDvi3t7ZdrOrLBco0R3MNU tmsFXwLiAGtme98wyzxX4TocPFlweXjXu8X7mJEO6pSbBYG0UfyXym4zaT1DIVyk MfhjHsX5kc+Y+lVr4Q5dtzE7HmfnHDuIsg4upL67M26sfliMux1w3S0D17tDfKYj I8w8TE8qWsnbLbIt7AbX8HVBxU0MZ3CPcHy8MJszUIhQEQPB+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAipEXLOOTAka4PoXFpGcyPqzSsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGZmNzcyNzUtY2Q4Yi0z NGQ1LWEwZDItNjQ2OWExMTI5NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASo56osNKUPwuoQsFQuk9MiVjWdRvjKllVSTK8KKbwubp5TEG0KXnDR 5GgpsmH8Tlljim8K47EbIbaew//auId48teEnO03N38I/92VUG8JI6EwQ5PvpMLP 11b4bU50lsRf0JFQb/fqrklnGcJ/jgJEP5sAxCGq/HTN384HDAu+quSbtY7MsFH7 U8VGJ2YVaBFtlpr9u4F1qfSJoIlxXZKUc/51UF/TkXEZXQapjUVPfO31X//M2Q6k wxvPoi9n4AoBnZA+R1YnbPbvAoRd6ccXl4c6zLMrQxsS8puQSl4f1KzYEyRD70b6 e5AHssMHecIBLI1b1HgG5JUCKzlV08o= -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:07 2026 by rpki-client