$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa File: ba814287-b53d-31fc-b52d-a3923ba8d46c.roa (raw, json) Hash identifier: zpfv6FhV4oSgqvMxiEweiH/YxOOuXqdSO/hFeHzrScA= Subject key identifier: 22:EA:04:54:BB:98:C4:84:9E:DE:26:60:D7:1B:E9:D8:0A:66:51:B8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D2A74EC4B66B0830709C5C480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 172.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ec:4b:66:b0:83:07:09:c5:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d12d4530-7721-402d-ac56-d666824f3ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:dd:e0:37:6e:79:dc:73:ba:a0:03:c0:82: 89:b4:2e:d7:ee:3c:23:c2:6c:09:ca:84:8f:11:42: 37:e1:b2:12:6e:57:f3:79:52:1d:3a:be:b7:64:8e: b6:81:c9:3e:f1:72:db:4e:05:0a:20:1d:54:e9:fd: a9:e3:60:32:d3:0c:ae:ab:93:85:9b:e4:9f:ed:61: 0c:90:31:84:9c:1c:8c:9f:48:da:24:d1:5d:2d:d0: 29:ae:d9:22:ba:83:07:4d:f2:17:0d:55:d6:86:e2: ad:64:67:6f:7c:5c:c3:ef:99:1f:9e:3c:68:b6:2e: a7:e8:e5:62:d6:9b:32:c0:29:c2:d7:80:0f:7e:c7: ec:dc:c3:8b:cf:1c:e4:4a:1f:b1:9b:2a:76:57:83: 21:55:f9:ff:35:5d:36:8b:96:61:78:76:91:77:ea: c2:9d:58:a6:80:3f:2d:7c:e6:18:a9:76:9c:8b:fb: df:de:a1:44:02:91:6d:95:00:90:31:fb:39:fe:2d: 12:0e:86:0b:47:f9:f2:f5:28:3b:02:4d:06:59:e0: 19:c1:3e:93:3e:c4:2a:85:fd:e2:c9:63:a3:b3:f3: 20:d1:96:b9:19:0f:5f:1c:5c:44:23:0c:08:5b:25: 8b:f0:a0:ce:df:3a:35:e3:76:32:ce:eb:0d:4c:b5: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EA:04:54:BB:98:C4:84:9E:DE:26:60:D7:1B:E9:D8:0A:66:51:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a6:1e:90:6f:0a:32:ff:00:c2:05:38:e5:c2:d8:65:b6:92: d4:c2:88:da:e7:68:96:18:54:69:d9:20:58:61:75:59:8c:b8: 1d:ae:19:d4:0f:0c:14:b5:7c:60:f6:39:35:1d:ce:fb:63:87: 99:9d:8b:b4:4b:0f:ae:5c:c3:15:b1:e9:72:66:7a:67:c0:1d: 56:6d:78:7e:ec:fa:cd:62:ca:cf:6d:64:e4:bc:e8:78:63:e2: 2c:5a:d4:bc:5d:e7:42:e7:70:c6:76:0d:1f:e2:3f:07:0a:6f: 84:2d:48:98:3c:df:bf:cb:11:dc:05:2c:e2:25:1d:ca:c9:3b: a2:49:3e:00:f3:88:4a:78:00:29:6c:b0:7e:90:6e:fa:8a:93: 35:64:e1:32:64:33:3c:1a:aa:f1:c5:0f:35:9a:82:da:d1:e7: 99:27:96:7d:72:54:64:28:e9:63:ba:95:d9:43:60:05:f0:0d: a7:bb:30:c9:74:2a:58:c7:1e:a0:2c:1d:20:e2:66:e3:8b:52: 2e:e2:ce:b3:bc:54:43:0c:50:fc:c7:93:25:07:cf:22:71:c4: ff:32:4c:c9:5c:2f:fc:a1:24:5c:5c:37:99:14:e1:3d:0c:7c: e0:10:47:84:a0:56:d6:ea:03:f4:b9:97:c1:f0:f3:40:ef:de: b9:3c:b0:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOxLZrCDBwnFxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDEyZDQ1MzAtNzcyMS00MDJkLWFjNTYtZDY2NjgyNGYzYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5jd4DduedxzuqADwIKJtC7X7jwjwmwJyoSP EUI34bISblfzeVIdOr63ZI62gck+8XLbTgUKIB1U6f2p42Ay0wyuq5OFm+Sf7WEM kDGEnByMn0jaJNFdLdAprtkiuoMHTfIXDVXWhuKtZGdvfFzD75kfnjxoti6n6OVi 1psywCnC14APfsfs3MOLzxzkSh+xmyp2V4MhVfn/NV02i5ZheHaRd+rCnVimgD8t fOYYqXaci/vf3qFEApFtlQCQMfs5/i0SDoYLR/ny9Sg7Ak0GWeAZwT6TPsQqhf3i yWOjs/Mg0Za5GQ9fHFxEIwwIWyWL8KDO3zo143YyzusNTLUkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLqBFS7mMSEnt4mYNcb6dgKZlG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmE4MTQyODctYjUzZC0z MWZjLWI1MmQtYTM5MjNiYThkNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIamHpBvCjL/AMIFOOXC2GW2ktTCiNrnaJYYVGnZIFhhdVmMuB2uGdQP DBS1fGD2OTUdzvtjh5mdi7RLD65cwxWx6XJmemfAHVZteH7s+s1iys9tZOS86Hhj 4ixa1Lxd50LncMZ2DR/iPwcKb4QtSJg837/LEdwFLOIlHcrJO6JJPgDziEp4ACls sH6QbvqKkzVk4TJkMzwaqvHFDzWagtrR55knln1yVGQo6WO6ldlDYAXwDae7MMl0 KljHHqAsHSDiZuOLUi7izrO8VEMMUPzHkyUHzyJxxP8yTMlcL/yhJFxcN5kU4T0M fOAQR4SgVtbqA/S5l8Hw80Dv3rk8sJM= -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:52 2026 by rpki-client