$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa File: f3a11e3c-29b8-3899-a1d3-970745a11a14.roa (raw, json) Hash identifier: kqHPB43oBvi7qOC/ZqROd3c1vzvy5uPUYvMU3nlZJGA= Subject key identifier: C9:D3:E0:C5:36:6C:1E:6D:78:2B:7B:E9:CF:60:0C:6F:E9:93:ED:A5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D2A74EBD87D9D351E23154080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 172.111.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:eb:d8:7d:9d:35:1e:23:15:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=723d9232-efd6-4c96-bb36-a7d513f113e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:33:0c:69:c2:32:03:e7:47:e5:f7:46:77: 30:aa:a2:6f:b6:6d:ae:ce:39:b5:71:e0:b4:85:ad: f3:42:9f:f2:f2:21:b6:e5:b8:93:c9:6f:7b:3f:6d: e8:ca:a4:08:23:df:eb:3c:52:c9:b2:40:c2:2b:76: 3e:6b:ab:83:e5:6c:43:c2:9f:64:fc:6b:85:06:e4: 8e:d0:1e:22:a0:fc:98:7f:dc:b3:fd:76:16:12:c8: c7:48:40:d2:0d:7f:42:b3:7a:fb:60:61:b4:03:36: b4:a6:f7:e5:ed:62:5d:c5:db:dc:5e:84:28:3c:9a: ec:4b:80:bd:8c:cb:ee:ba:f8:47:ca:6a:4f:ad:59: 4d:f3:4f:bf:7d:05:51:52:0d:15:63:5b:b0:e1:56: a7:ab:e6:58:6d:46:bd:ac:9c:32:db:55:30:b5:33: fe:c5:24:da:aa:7d:57:93:02:d7:5d:2d:c8:ce:90: 75:34:48:e9:46:52:8d:56:a6:61:9a:dc:61:fd:4d: 97:f8:37:64:b7:4f:0e:f9:86:d6:1a:a3:9f:7f:fd: a7:7d:cd:29:b7:63:1e:30:24:cf:64:70:b4:8f:9e: 37:47:7b:8f:91:d9:36:7b:b7:e3:14:a3:65:a6:8b: ae:fd:eb:22:dd:29:8e:37:fe:22:6a:7f:f7:ba:7e: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D3:E0:C5:36:6C:1E:6D:78:2B:7B:E9:CF:60:0C:6F:E9:93:ED:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fd:78:57:e1:f3:40:f0:7c:11:95:e4:ce:ba:16:39:58:33: b6:b2:0e:1f:69:1d:14:ff:f5:70:86:eb:62:73:6c:05:89:e0: 63:cf:94:5c:d6:50:9c:60:ce:f9:b7:8d:79:4d:16:39:fa:23: 38:0d:2f:7e:41:fe:77:e2:1e:17:5f:4d:61:ce:ad:02:ec:6f: a5:b6:d0:16:15:da:70:de:74:d2:c8:cc:1c:28:1d:6f:64:bf: a6:76:fc:bf:f3:89:7e:b0:6b:1a:23:64:25:e6:cf:e8:24:ba: 9b:75:ce:a0:f7:cb:5f:22:46:9b:b6:11:df:97:87:81:dc:45: 40:b7:cd:41:64:aa:0a:42:a5:13:4e:48:c3:6c:92:d8:48:df: bd:01:d5:0a:ec:5c:63:68:15:21:da:c3:16:11:0c:61:36:83: e8:25:56:08:1d:6a:5d:3f:30:8a:ad:9a:01:22:a7:bc:1f:41: 2d:8e:12:fa:62:d2:14:f4:e7:3c:3d:5a:18:37:39:da:fb:05: ed:73:c3:cb:81:2d:eb:ab:e1:b8:3a:30:e4:d4:ee:27:6c:32: 2e:8b:58:ff:f6:c2:9e:70:69:16:eb:c4:be:db:9a:9b:f5:14: e5:9a:60:43:db:f0:01:d1:eb:a4:79:8c:29:2b:ae:66:f9:12: 9a:37:b7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOvYfZ01HiMVQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NzIzZDkyMzItZWZkNi00Yzk2LWJiMzYtYTdkNTEzZjExM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnAzDGnCMgPnR+X3RncwqqJvtm2uzjm1ceC0 ha3zQp/y8iG25biTyW97P23oyqQII9/rPFLJskDCK3Y+a6uD5WxDwp9k/GuFBuSO 0B4ioPyYf9yz/XYWEsjHSEDSDX9Cs3r7YGG0Aza0pvfl7WJdxdvcXoQoPJrsS4C9 jMvuuvhHympPrVlN80+/fQVRUg0VY1uw4Vanq+ZYbUa9rJwy21UwtTP+xSTaqn1X kwLXXS3IzpB1NEjpRlKNVqZhmtxh/U2X+Ddkt08O+YbWGqOff/2nfc0pt2MeMCTP ZHC0j543R3uPkdk2e7fjFKNlpouu/esi3SmON/4ian/3un5ewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnT4MU2bB5teCt76c9gDG/pk+2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjNhMTFlM2MtMjliOC0z ODk5LWExZDMtOTcwNzQ1YTExYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv9eFfh80DwfBGV5M66FjlYM7ayDh9pHRT/9XCG62JzbAWJ4GPPlFzW UJxgzvm3jXlNFjn6IzgNL35B/nfiHhdfTWHOrQLsb6W20BYV2nDedNLIzBwoHW9k v6Z2/L/ziX6waxojZCXmz+gkupt1zqD3y18iRpu2Ed+Xh4HcRUC3zUFkqgpCpRNO SMNskthI370B1QrsXGNoFSHawxYRDGE2g+glVggdal0/MIqtmgEip7wfQS2OEvpi 0hT05zw9Whg3Odr7Be1zw8uBLeur4bg6MOTU7idsMi6LWP/2wp5waRbrxL7bmpv1 FOWaYEPb8AHR66R5jCkrrmb5Epo3t9A= -----END CERTIFICATE-----Generated at Thu Mar 26 03:43:58 2026 by rpki-client