$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa File: 5619dad0-adc5-36da-98cd-88670a8851eb.roa (raw, json) Hash identifier: nhz0nUwsT9lo4Hxo6e3sEWZAuCAk4wn7Pr88yG57DZY= Subject key identifier: 30:00:CB:98:37:22:34:44:46:C9:59:F5:65:AD:BE:B8:19:AF:93:91 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D40CA59E5F943FC859DE5B180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 9009 IP address blocks: 172.111.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:59:e5:f9:43:fc:85:9d:e5:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=8245bd5a-1f16-41b5-bad4-6ddeba6c88da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a4:5a:1e:ba:22:64:56:20:8e:2b:58:e6:ae: 73:0f:d1:d5:c7:c0:8a:86:f0:27:52:a9:bb:1c:02: 8b:38:39:8d:99:52:f7:eb:46:52:94:20:a4:23:73: cc:5d:b1:ac:2f:9f:22:9e:f4:ef:d7:41:66:c9:a4: d2:c6:8e:e5:01:0a:86:e4:6e:c1:e4:19:61:66:4a: 3e:f0:9c:e3:2d:9b:4f:9e:ae:33:c1:35:b2:f8:f0: 1c:b6:a2:78:6e:81:04:19:e6:5e:1f:9f:9e:eb:21: db:af:17:09:d6:81:8b:a1:60:08:3a:4c:b1:ca:eb: c5:fd:6f:7f:4a:af:f4:68:58:3b:14:34:fe:2a:dd: 23:4a:1e:f1:a0:a3:73:ef:b7:c8:fe:75:04:01:90: 13:78:c3:f5:44:e5:c6:8c:c4:b2:3e:71:97:46:f9: 27:e8:e5:f6:5f:5a:f2:9a:55:94:2e:80:77:18:b8: ad:89:c3:92:86:31:a3:78:ab:11:22:c0:38:ce:15: 77:02:c6:65:b1:97:bb:d5:33:02:ca:1c:2d:51:e2: 0e:a2:2f:7c:85:cb:cc:41:f6:42:f0:2f:e3:bf:10: 41:f6:b1:3a:da:5b:19:28:a3:4c:d0:6a:cc:90:3b: 9a:f1:03:42:29:80:99:3d:d6:32:7b:d2:05:2c:48: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:00:CB:98:37:22:34:44:46:C9:59:F5:65:AD:BE:B8:19:AF:93:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f0:e2:48:c0:80:4a:40:82:99:96:e7:aa:ea:39:e2:45:80: 88:c4:54:ba:7d:b0:4f:17:ae:c0:3b:e4:bf:e2:5a:a0:ee:31: ef:5a:37:3f:32:f1:22:94:c9:e2:bc:4c:b9:4f:24:3f:45:f9: 47:96:7b:5f:71:a5:2e:ea:a5:91:1a:6c:74:aa:a6:f5:43:95: 4a:ba:51:0b:8e:94:a7:d5:47:7c:7b:98:18:03:4c:59:cc:0a: ea:c4:05:bc:33:de:01:8c:16:5a:d1:20:36:5a:5c:ef:47:9a: bc:d6:42:4c:f1:60:c9:55:13:3c:5d:a9:06:7f:c4:71:f6:95: d5:7f:5c:a9:cf:66:8c:0d:4d:85:97:76:1a:07:d9:87:10:f0: 07:a8:54:a4:d3:ec:54:78:31:f8:e3:9b:3b:62:f1:17:36:c6: e9:e8:a1:2a:4d:f6:89:86:39:9d:51:80:65:14:d4:24:77:81: 2a:a4:72:f3:87:30:af:04:c8:01:73:88:7f:b8:aa:df:84:0b: 5a:6e:b2:80:ac:4c:65:3e:58:20:27:aa:ac:22:a5:76:8a:e4: db:88:20:b9:6a:25:4a:d6:9e:06:22:e1:60:3e:6e:53:a2:ee: e8:45:47:9c:d3:b3:bb:c5:bd:e8:70:0c:9a:3f:14:c7:94:70: 21:1f:29:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aylnl+UP8hZ3lsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ODI0NWJkNWEtMWYxNi00MWI1LWJhZDQtNmRkZWJhNmM4OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKRaHroiZFYgjitY5q5zD9HVx8CKhvAnUqm7 HAKLODmNmVL360ZSlCCkI3PMXbGsL58invTv10FmyaTSxo7lAQqG5G7B5BlhZko+ 8JzjLZtPnq4zwTWy+PActqJ4boEEGeZeH5+e6yHbrxcJ1oGLoWAIOkyxyuvF/W9/ Sq/0aFg7FDT+Kt0jSh7xoKNz77fI/nUEAZATeMP1ROXGjMSyPnGXRvkn6OX2X1ry mlWULoB3GLiticOShjGjeKsRIsA4zhV3AsZlsZe71TMCyhwtUeIOoi98hcvMQfZC 8C/jvxBB9rE62lsZKKNM0GrMkDua8QNCKYCZPdYye9IFLEhnoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAAy5g3IjRERslZ9WWtvrgZr5ORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTYxOWRhZDAtYWRjNS0z NmRhLTk4Y2QtODg2NzBhODg1MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALw4kjAgEpAgpmW56rqOeJFgIjEVLp9sE8XrsA75L/iWqDuMe9aNz8y 8SKUyeK8TLlPJD9F+UeWe19xpS7qpZEabHSqpvVDlUq6UQuOlKfVR3x7mBgDTFnM CurEBbwz3gGMFlrRIDZaXO9HmrzWQkzxYMlVEzxdqQZ/xHH2ldV/XKnPZowNTYWX dhoH2YcQ8AeoVKTT7FR4Mfjjmzti8Rc2xunooSpN9omGOZ1RgGUU1CR3gSqkcvOH MK8EyAFziH+4qt+EC1pusoCsTGU+WCAnqqwipXaK5NuIILlqJUrWngYi4WA+blOi 7uhFR5zTs7vFvehwDJo/FMeUcCEfKZw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:08 2026 by rpki-client