$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa File: d718e811-5d3b-3e92-94a4-9ad6d104b712.roa (raw, json) Hash identifier: E7x8/58KdSq5JicsQWt5rEA0WePI0RBcoKY08h9ZJVk= Subject key identifier: DC:5F:4F:8B:32:72:50:F9:6A:E5:B9:AC:FE:92:6A:71:0D:FE:0B:B8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D316F7029768158CB89868680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 6939 IP address blocks: 172.111.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:70:29:76:81:58:cb:89:86:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=f705cd6e-8fc1-4cb1-aeed-4fd9e94460f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:8f:dd:49:26:f3:16:05:98:ac:76:5f:da: fb:a4:87:02:de:33:87:02:3f:54:19:8a:a8:fb:7e: 61:f6:b7:24:47:bb:41:cb:36:dd:0a:48:18:45:1e: 42:6d:b5:48:86:96:5d:29:c5:d7:fc:7a:f2:b5:23: dd:30:61:bf:a4:6a:09:05:9f:f4:d0:70:b7:98:7e: 5a:a9:91:a2:fa:d3:13:e7:6a:f9:f2:d1:a6:33:51: ce:8e:69:d0:ba:73:d7:78:ec:02:80:51:7d:7c:65: 51:04:53:43:ea:a0:3a:a5:e0:09:25:4c:ff:8d:21: 12:e3:0a:ab:a3:14:48:bc:a2:88:4a:a2:6d:e1:c5: 13:cf:2a:80:26:2a:df:92:bb:1a:55:80:9f:c1:50: 4e:cc:34:cb:8a:9d:ff:32:bc:07:b2:af:f2:00:02: 24:c7:c1:a4:96:2e:38:df:b1:4e:3a:54:07:9b:4c: 36:7c:c8:5c:7e:5b:ea:9a:b0:40:c8:29:e4:e8:fa: 0f:4d:f9:fe:22:f9:d8:fe:ff:2e:32:f4:2f:af:d6: 97:2d:4f:02:69:0f:37:13:e8:92:fd:22:a0:54:91: ce:61:5f:45:f1:bb:e7:6e:0a:5c:9c:d4:0e:43:44: 8f:38:48:e0:06:bb:97:9e:ca:31:15:5d:24:e0:85: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5F:4F:8B:32:72:50:F9:6A:E5:B9:AC:FE:92:6A:71:0D:FE:0B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:85:f9:0e:93:4c:58:3d:44:8c:71:95:1d:ff:c4:38:67:5d: c0:72:be:54:de:76:16:1a:da:f9:9c:1c:35:c6:da:0c:74:61: 5e:9f:85:af:2e:59:8a:99:fb:06:3a:23:24:78:63:d1:aa:02: 24:e0:fc:fe:c5:0f:bc:a6:2e:db:7e:41:e2:c8:27:2d:1f:66: b6:64:4f:26:0a:48:1d:a9:c3:11:bc:0b:b2:b4:bc:d4:36:ae: 1c:36:5c:65:a5:9c:09:d9:94:74:e9:cd:75:fb:56:84:07:80: ba:e3:f5:c5:11:62:0a:c9:89:76:98:55:b8:90:ef:50:4d:62: 8e:fd:a0:32:6a:fd:2e:3b:3b:3f:dc:f1:0d:39:da:e7:79:2b: d3:0c:41:5e:5f:a8:46:44:1f:aa:9e:1e:30:3b:8e:a0:03:b4: af:42:6a:cf:3b:b8:c4:a9:07:4d:4d:89:24:63:1f:d9:39:b4: 4d:a3:14:e9:ee:30:e3:bc:92:cb:92:b4:87:17:ef:53:a1:3c: 84:09:9c:1e:61:0c:03:a8:28:ee:9d:18:61:2c:c2:a6:6d:d3: dc:54:c1:f8:41:db:69:e7:e5:82:70:45:c6:b1:48:8c:c3:33: ab:e1:74:e1:81:b2:3c:05:3e:5a:17:97:25:cf:21:ab:d8:95: 80:ae:c2:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3ApdoFYy4mGhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk ZjcwNWNkNmUtOGZjMS00Y2IxLWFlZWQtNGZkOWU5NDQ2MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h2P3Ukm8xYFmKx2X9r7pIcC3jOHAj9UGYqo +35h9rckR7tByzbdCkgYRR5CbbVIhpZdKcXX/HrytSPdMGG/pGoJBZ/00HC3mH5a qZGi+tMT52r58tGmM1HOjmnQunPXeOwCgFF9fGVRBFND6qA6peAJJUz/jSES4wqr oxRIvKKISqJt4cUTzyqAJirfkrsaVYCfwVBOzDTLip3/MrwHsq/yAAIkx8Gkli44 37FOOlQHm0w2fMhcflvqmrBAyCnk6PoPTfn+IvnY/v8uMvQvr9aXLU8CaQ83E+iS /SKgVJHOYV9F8bvnbgpcnNQOQ0SPOEjgBruXnsoxFV0k4IXXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxfT4syclD5auW5rP6SanEN/gu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDcxOGU4MTEtNWQzYi0z ZTkyLTk0YTQtOWFkNmQxMDRiNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeF+Q6TTFg9RIxxlR3/xDhnXcByvlTedhYa2vmcHDXG2gx0YV6fha8u WYqZ+wY6IyR4Y9GqAiTg/P7FD7ymLtt+QeLIJy0fZrZkTyYKSB2pwxG8C7K0vNQ2 rhw2XGWlnAnZlHTpzXX7VoQHgLrj9cURYgrJiXaYVbiQ71BNYo79oDJq/S47Oz/c 8Q052ud5K9MMQV5fqEZEH6qeHjA7jqADtK9Cas87uMSpB01NiSRjH9k5tE2jFOnu MOO8ksuStIcX71OhPIQJnB5hDAOoKO6dGGEswqZt09xUwfhB22nn5YJwRcaxSIzD M6vhdOGBsjwFPloXlyXPIavYlYCuwg0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:52:14 2026 by rpki-client