$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa File: af0dac47-6e29-35db-80a1-859bd697b5d9.roa (raw, json) Hash identifier: xPfux+VM4UlTSQFfyjficYoEUztgF3/vHdFdClxNNLg= Subject key identifier: 1E:16:FF:C7:A1:4D:E9:BE:CE:A8:EA:F0:91:ED:F2:64:D2:A9:A0:6A Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584D40CB9D378FD40E8E72597FA0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 398395 IP address blocks: 172.111.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9d:37:8f:d4:0e:8e:72:59:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=c68203fa-0377-4c25-8475-a165db9695ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b6:22:e7:ad:a6:3b:8d:2f:9d:b8:dc:66:01: 17:14:1c:01:b8:dc:43:b5:49:60:cd:28:40:de:9b: 7e:30:0c:04:0d:c4:ca:2d:0a:6d:ca:d5:72:ce:db: dd:32:55:7a:bc:13:be:45:a1:ba:9a:95:dc:15:81: 32:be:3c:d8:a7:4b:34:0f:63:0f:06:20:b4:b5:de: a2:16:d1:16:12:2f:45:6c:32:84:12:5a:66:55:c5: cf:89:f2:3a:d4:0d:61:a8:31:09:b8:41:17:18:fe: 74:ae:91:d0:e6:31:fe:9d:ab:37:ac:a0:a2:ec:85: 94:c7:89:2f:47:bc:84:a4:e4:dc:20:28:8e:c1:64: 8c:ab:b0:9c:21:80:9e:27:27:87:90:c2:27:01:12: ac:0a:f5:93:2e:53:e2:38:c6:ef:29:94:f4:3c:8e: 89:5f:e2:b4:3e:fb:5d:fb:5b:a2:30:eb:d6:91:fe: db:77:4f:d3:c8:a8:1f:43:0a:7b:a2:12:f7:02:fb: 50:2c:99:73:57:e2:2f:01:e7:01:30:16:89:23:d7: 5c:5c:9d:d2:d1:1b:39:9e:b7:fa:90:3f:dd:dd:b8: 0f:c2:d8:66:7c:6c:f4:b0:7c:a8:5a:c7:a6:4d:ae: 75:54:1c:61:c0:78:17:3b:58:a4:14:57:b6:12:21: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:16:FF:C7:A1:4D:E9:BE:CE:A8:EA:F0:91:ED:F2:64:D2:A9:A0:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6e:f8:61:da:9f:1c:d7:d3:d1:f5:7f:d5:df:4c:f1:2b:ea: e6:bd:21:e2:4c:00:1f:07:49:d1:8c:92:b7:df:36:92:02:a6: c4:f3:b3:cc:ae:51:91:0d:9f:3c:fa:ee:be:42:82:be:e8:2a: 7b:a4:07:15:3c:f0:97:c3:a8:d6:bf:b6:df:99:64:0a:23:a5: c3:82:58:b0:78:ae:91:53:e4:24:75:a2:eb:d8:47:5c:3a:26: 19:93:38:14:ef:0a:bd:c4:e1:ca:3a:48:9c:8f:b9:d3:30:8e: 5f:3c:ab:f5:d7:c4:1c:e1:a7:45:e5:28:0b:33:21:a4:6d:d6: 18:d1:71:9f:ab:af:30:16:98:43:e4:f8:1f:7a:44:1a:5d:35: 7c:be:76:59:08:99:45:d1:36:dd:a6:64:23:2a:14:d7:3d:9f: 14:9b:0e:07:b9:3f:86:2c:b9:e0:58:8d:5c:a2:1a:21:30:01: 33:69:2d:8b:e6:93:94:99:a3:b3:8a:12:72:7b:42:9b:ae:92: b4:77:6d:c6:f4:ba:2c:38:c3:87:c5:0b:ee:9d:76:ed:97:92: 63:ec:3e:1e:da:da:61:c3:81:7c:75:2e:a0:cb:88:5a:bc:54: da:30:55:71:64:70:96:25:26:11:05:9a:2f:65:a9:84:dc:1a: f6:97:e4:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay503j9QOjnJZf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YzY4MjAzZmEtMDM3Ny00YzI1LTg0NzUtYTE2NWRiOTY5NWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbYi562mO40vnbjcZgEXFBwBuNxDtUlgzShA 3pt+MAwEDcTKLQptytVyztvdMlV6vBO+RaG6mpXcFYEyvjzYp0s0D2MPBiC0td6i FtEWEi9FbDKEElpmVcXPifI61A1hqDEJuEEXGP50rpHQ5jH+nas3rKCi7IWUx4kv R7yEpOTcICiOwWSMq7CcIYCeJyeHkMInARKsCvWTLlPiOMbvKZT0PI6JX+K0Pvtd +1uiMOvWkf7bd0/TyKgfQwp7ohL3AvtQLJlzV+IvAecBMBaJI9dcXJ3S0Rs5nrf6 kD/d3bgPwthmfGz0sHyoWsemTa51VBxhwHgXO1ikFFe2EiGncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4W/8ehTem+zqjq8JHt8mTSqaBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYWYwZGFjNDctNmUyOS0z NWRiLTgwYTEtODU5YmQ2OTdiNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZu+GHanxzX09H1f9XfTPEr6ua9IeJMAB8HSdGMkrffNpICpsTzs8yu UZENnzz67r5Cgr7oKnukBxU88JfDqNa/tt+ZZAojpcOCWLB4rpFT5CR1ouvYR1w6 JhmTOBTvCr3E4co6SJyPudMwjl88q/XXxBzhp0XlKAszIaRt1hjRcZ+rrzAWmEPk +B96RBpdNXy+dlkImUXRNt2mZCMqFNc9nxSbDge5P4YsueBYjVyiGiEwATNpLYvm k5SZo7OKEnJ7QpuukrR3bcb0uiw4w4fFC+6ddu2XkmPsPh7a2mHDgXx1LqDLiFq8 VNowVXFkcJYlJhEFmi9lqYTcGvaX5AA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:30 2026 by rpki-client