$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa File: b604490b-74cd-3e5b-931b-76222655763c.roa (raw, json) Hash identifier: NHO2CtlsI40l4A3MvwBzoCXzZl8Qj46Uk40FZgOJfdc= Subject key identifier: 2D:9A:ED:5A:7B:C1:46:80:1D:5C:B3:B3:3A:AD:73:AB:44:9E:E1:0A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D2A74EC363DCE09813A5D65C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 172.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ec:36:3d:ce:09:81:3a:5d:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=4cf0e3b9-6b19-4095-98d2-dffc7501a185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:e5:a8:14:5b:63:74:e7:e9:6d:cc:41:5e: c7:df:b3:8b:6a:25:b6:56:7f:63:c8:b5:2c:20:d3: ec:17:0b:e9:2b:68:ab:e3:ea:a6:23:e7:87:16:d2: 49:c6:e8:2f:04:c6:0c:70:58:fe:f9:98:26:ed:30: 25:23:12:7f:34:a2:78:a4:09:f9:17:cc:10:eb:f9: 97:8d:58:71:af:16:bf:2a:af:72:00:0a:52:56:bd: 98:24:ff:72:f5:c0:8e:30:d3:4b:21:fb:4c:c8:b8: ee:75:da:a5:e2:82:6f:54:80:e7:88:4e:22:1f:f7: 8e:f8:a4:f1:6f:9b:c2:cf:9b:b2:16:0b:cd:63:e6: 42:e7:8a:6c:50:d3:af:d1:db:8e:8c:db:d0:00:99: d5:31:00:93:02:81:6c:0f:4a:88:e4:5f:34:6f:07: 91:aa:a1:7c:f0:b3:9d:68:57:81:88:4e:fa:17:f7: 42:78:31:54:b2:10:c4:59:d9:b8:79:b9:3c:01:d9: 64:72:f6:47:50:9b:97:29:b6:da:3c:1d:8b:8d:72: a8:4c:22:c0:ca:72:a8:cb:1f:d9:73:b7:e0:ec:51: 3e:fd:2b:60:50:49:2b:60:b3:e3:82:cf:a6:24:fd: b5:b5:cd:52:bb:7f:f1:61:da:47:ee:d4:40:c7:cf: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:ED:5A:7B:C1:46:80:1D:5C:B3:B3:3A:AD:73:AB:44:9E:E1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:31:02:c1:a5:9d:43:54:35:4c:3a:d3:ba:4d:57:07:5d:af: bb:2d:a0:1b:49:be:81:32:86:de:8f:c7:92:79:a7:b8:3a:36: 5c:b8:7b:13:c5:77:4e:02:e2:7b:9a:c4:a5:99:fd:a6:3d:a5: 23:74:96:1a:e7:25:15:71:24:da:a1:8a:31:3d:43:15:fe:d1: 6c:15:72:ba:70:04:98:f7:11:bb:c8:f1:08:26:0b:c3:59:f2: 60:8d:14:0a:f8:3b:31:36:7a:2d:dc:6e:ff:9f:5f:81:31:c9: 18:49:de:86:77:e2:c7:6a:d7:2b:e9:08:25:87:23:88:cd:39: 47:09:92:41:e8:c1:97:0c:77:50:61:0d:f2:27:d7:50:32:89: db:9c:66:d8:e5:59:7c:0b:e5:44:da:18:71:c6:8e:c1:e0:42: ee:0b:eb:e3:6c:d8:e0:53:99:12:4c:f7:e8:86:a8:06:76:5b: 9b:e7:59:51:74:0e:54:a3:7c:06:ce:b9:e7:bb:6d:ff:e3:38: 44:6f:ce:bf:04:68:69:ee:37:08:3d:6e:ce:7b:58:0b:af:f5: 68:dc:fd:06:e1:08:7c:06:69:ba:38:e1:c2:e4:c7:86:cb:09: bd:50:27:d9:33:9b:56:3e:31:6b:e7:5a:40:cf:2b:5f:8e:da: f8:1b:39:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOw2Pc4JgTpdZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NGNmMGUzYjktNmIxOS00MDk1LTk4ZDItZGZmYzc1MDFhMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxjlqBRbY3Tn6W3MQV7H37OLaiW2Vn9jyLUs INPsFwvpK2ir4+qmI+eHFtJJxugvBMYMcFj++Zgm7TAlIxJ/NKJ4pAn5F8wQ6/mX jVhxrxa/Kq9yAApSVr2YJP9y9cCOMNNLIftMyLjuddql4oJvVIDniE4iH/eO+KTx b5vCz5uyFgvNY+ZC54psUNOv0duOjNvQAJnVMQCTAoFsD0qI5F80bweRqqF88LOd aFeBiE76F/dCeDFUshDEWdm4ebk8AdlkcvZHUJuXKbbaPB2LjXKoTCLAynKoyx/Z c7fg7FE+/StgUEkrYLPjgs+mJP21tc1Su3/xYdpH7tRAx89l8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2a7Vp7wUaAHVyzszqtc6tEnuEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjYwNDQ5MGItNzRjZC0z ZTViLTkzMWItNzYyMjI2NTU3NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0xAsGlnUNUNUw607pNVwddr7stoBtJvoEyht6Px5J5p7g6Nly4exPF d04C4nuaxKWZ/aY9pSN0lhrnJRVxJNqhijE9QxX+0WwVcrpwBJj3EbvI8QgmC8NZ 8mCNFAr4OzE2ei3cbv+fX4ExyRhJ3oZ34sdq1yvpCCWHI4jNOUcJkkHowZcMd1Bh DfIn11AyiducZtjlWXwL5UTaGHHGjsHgQu4L6+Ns2OBTmRJM9+iGqAZ2W5vnWVF0 DlSjfAbOuee7bf/jOERvzr8EaGnuNwg9bs57WAuv9Wjc/QbhCHwGabo44cLkx4bL Cb1QJ9kzm1Y+MWvnWkDPK1+O2vgbOTU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:18:59 2026 by rpki-client