$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa File: 7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa (raw, json) Hash identifier: N7XjX3MJN0mO1sH6M/kkgb+KeD+PiYcwMfEA0mK93k0= Subject key identifier: 39:FA:7C:56:60:AA:9A:88:E8:4B:7D:1C:09:A0:1D:8E:BC:02:DD:45 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584D40CBA064BBDF74A5CD697080 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 398395 IP address blocks: 172.111.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:a0:64:bb:df:74:a5:cd:69:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7c3be059-145b-4514-b343-e3e5f21af44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a9:9a:fa:63:c6:69:0c:c1:4d:a1:1d:e5:f7: 4d:60:44:6a:1c:de:af:62:e3:a3:2d:83:36:a7:a4: be:50:2c:2d:4a:e1:41:84:34:9a:55:7e:71:65:56: 82:63:65:a5:5c:ef:bd:2c:e3:84:94:37:30:9b:85: 52:49:70:50:6f:3e:26:a8:0f:70:c2:aa:71:65:35: 0d:2c:8e:bf:58:d1:2e:3a:56:b1:2f:fc:56:3b:94: 44:74:9a:86:15:c4:32:78:5e:48:ae:77:e2:d4:2e: 27:0f:d6:c6:8b:65:61:15:da:2d:c5:13:f4:56:ce: 5b:ce:05:3a:7a:af:87:13:9a:cd:a8:70:70:b5:23: 5f:65:e1:33:b3:44:5b:87:f2:75:c5:74:c4:40:38: cf:ea:df:ed:cb:7e:bc:7f:8b:a9:28:d5:73:cc:99: 92:6b:86:dc:4f:49:d4:62:1f:af:f7:f1:1b:c7:2a: 33:2f:79:b1:1a:9c:3e:95:e9:1e:b2:d6:db:ef:d1: dc:72:b9:70:6f:a8:81:df:48:f0:53:23:d3:b5:6b: 1d:2e:8d:d2:ff:8d:f4:ba:2a:cd:18:1b:72:96:4e: e2:e5:28:92:03:24:c8:57:39:b2:3c:cf:76:0e:6c: e2:14:f5:f5:d9:f9:7a:b3:85:3f:ff:df:2e:d9:23: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:7C:56:60:AA:9A:88:E8:4B:7D:1C:09:A0:1D:8E:BC:02:DD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7276e94b-0f8e-3c2f-b583-7b517bacdde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5e:a8:9a:00:37:89:2f:0a:e1:b8:82:9b:46:30:35:9c:c1: c5:2b:03:a0:4a:85:61:ed:c7:14:01:07:fb:96:ce:77:69:32: 6b:73:d4:ec:79:0c:99:3b:f9:32:26:73:23:72:a1:5d:b2:8c: cf:cd:3c:74:29:8c:1b:0f:91:fe:f4:3c:2e:3f:3e:0c:dc:96: 54:99:a5:d3:d0:d8:8b:b5:d9:61:bf:2d:c1:a2:da:d6:c6:27: a9:a4:24:f6:72:a4:b4:19:18:aa:53:39:cd:01:92:21:03:89: a2:51:77:d4:85:92:b1:60:91:18:a8:6d:d2:64:bd:85:06:b0: fe:e9:7d:bb:6e:44:8d:08:68:d2:4b:f0:97:5b:d5:30:de:58: be:87:ef:de:63:26:77:08:0f:88:cf:d5:d2:77:ec:c9:db:57: 91:85:7c:4b:70:8d:8f:3c:85:50:d9:73:3e:d4:f7:8b:b0:01: 1b:ca:04:c0:d8:d6:f7:6a:de:52:d1:d5:cf:76:98:83:41:86: 9c:37:03:5b:d4:a3:99:05:a3:ce:f0:d8:6b:31:0d:b2:91:b8: a1:3c:ed:02:c8:b3:54:54:4a:4b:bf:dc:82:72:d9:92:f4:ad: 4f:91:c1:51:07:8e:b4:11:b1:58:9f:f3:5b:64:e6:37:a4:a5: 7c:0b:7b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay6Bku990pc1pcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk N2MzYmUwNTktMTQ1Yi00NTE0LWIzNDMtZTNlNWYyMWFmNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKma+mPGaQzBTaEd5fdNYERqHN6vYuOjLYM2 p6S+UCwtSuFBhDSaVX5xZVaCY2WlXO+9LOOElDcwm4VSSXBQbz4mqA9wwqpxZTUN LI6/WNEuOlaxL/xWO5REdJqGFcQyeF5Irnfi1C4nD9bGi2VhFdotxRP0Vs5bzgU6 eq+HE5rNqHBwtSNfZeEzs0Rbh/J1xXTEQDjP6t/ty368f4upKNVzzJmSa4bcT0nU Yh+v9/EbxyozL3mxGpw+lekestbb79Hccrlwb6iB30jwUyPTtWsdLo3S/430uirN GBtylk7i5SiSAyTIVzmyPM92DmziFPX12fl6s4U//98u2SO+/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn6fFZgqpqI6Et9HAmgHY68At1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNzI3NmU5NGItMGY4ZS0z YzJmLWI1ODMtN2I1MTdiYWNkZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExeqJoAN4kvCuG4gptGMDWcwcUrA6BKhWHtxxQBB/uWzndpMmtz1Ox5 DJk7+TImcyNyoV2yjM/NPHQpjBsPkf70PC4/PgzcllSZpdPQ2Iu12WG/LcGi2tbG J6mkJPZypLQZGKpTOc0BkiEDiaJRd9SFkrFgkRiobdJkvYUGsP7pfbtuRI0IaNJL 8Jdb1TDeWL6H795jJncID4jP1dJ37MnbV5GFfEtwjY88hVDZcz7U94uwARvKBMDY 1vdq3lLR1c92mINBhpw3A1vUo5kFo87w2GsxDbKRuKE87QLIs1RUSku/3IJy2ZL0 rU+RwVEHjrQRsVif81tk5jekpXwLe8I= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:01 2026 by rpki-client