$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa File: 0b9309e3-07db-3044-81aa-b836a369a052.roa (raw, json) Hash identifier: R1yn5Vu4b9iJFgxLbSKxKrM0+DmMwAaeu7s+Az7/4xQ= Subject key identifier: 15:0D:2E:62:7C:B6:1E:F8:29:99:36:9D:5E:2D:B0:8B:D9:CC:CF:A3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB121CC30AE6F702952BD7780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 212238 IP address blocks: 172.111.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cc:30:ae:6f:70:29:52:bd:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=f9f12c9e-e357-4434-96bc-bcdd604a1895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a9:ed:d0:ce:72:5e:8f:bd:d0:e5:4e:7d:3c: 03:54:de:b1:99:1b:fa:d6:43:6b:34:3e:fa:39:44: a0:c0:8b:2d:26:12:e4:52:b7:85:5d:6a:05:3d:de: 8d:68:e5:91:8d:f2:41:f0:24:25:3d:31:88:23:06: 31:ea:18:1e:a1:9c:a5:dc:4c:00:11:b1:fd:2b:01: 4a:7d:e1:d2:6a:eb:3c:e6:43:22:9d:8d:0b:c7:56: 34:3c:4b:8e:1a:79:01:c7:9e:b8:17:90:2a:1f:8c: 8a:87:b0:8b:71:32:89:a9:9a:6a:f4:16:85:b4:f0: 05:8c:88:76:aa:51:28:05:6f:ab:bd:5d:2a:82:8b: af:88:bc:d7:1a:b2:05:c4:27:b0:d5:22:05:05:1b: 1c:1d:7b:52:2c:29:81:e1:ba:a5:54:15:f3:fb:4c: b0:5a:48:8f:e0:1b:11:57:c0:14:db:56:d2:6f:57: f0:70:2e:72:a9:16:18:fb:25:c9:80:f8:f9:10:5f: 52:6c:5f:8f:64:c1:cb:e4:2c:28:ff:73:49:55:cc: 05:4b:98:77:8b:e6:dc:6b:3d:03:ea:4f:07:4b:62: 9a:a0:d9:7f:e9:a1:0c:ac:21:16:8f:fa:1f:3c:06: b5:40:34:db:25:d7:a3:ac:2e:ca:9b:81:43:41:af: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0D:2E:62:7C:B6:1E:F8:29:99:36:9D:5E:2D:B0:8B:D9:CC:CF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:38:52:e5:61:87:0b:08:ac:a4:1a:04:00:ba:4a:f3:ca:9f: 13:44:20:77:07:ab:03:c7:e3:82:75:df:91:75:63:af:b8:86: a6:f9:1b:f5:7a:03:ba:cc:6a:0f:57:e1:75:fb:08:27:21:07: 3b:f0:17:16:fe:3b:7e:9a:0b:21:93:f0:82:c1:13:6a:85:7c: 06:67:60:e4:0b:30:ab:1e:fe:31:5b:5f:2a:91:2f:85:f3:98: be:8a:8c:c1:94:4a:44:1b:de:98:e7:e6:d3:b9:90:8c:fb:55: 0c:df:f8:f6:2b:61:e8:90:f4:7d:a2:21:58:89:df:18:b7:8b: 55:92:ee:67:d7:d8:92:44:2d:9b:6d:71:84:4c:73:f1:bd:82: 85:c9:84:2d:da:ac:70:5a:72:e7:f7:bd:1b:c5:e3:88:d4:5a: e9:b7:88:af:db:20:b8:60:c4:d8:01:a6:2a:c8:a2:05:c0:99: 62:1a:aa:20:37:82:38:2f:d3:63:33:2e:18:5d:68:29:8c:66: 17:bd:f0:6b:6a:da:f4:33:aa:60:36:8d:cc:79:43:c6:2b:f6: 25:ed:9f:ef:76:dd:2a:6e:0a:8a:0f:4e:f9:06:39:93:03:3a: 23:a9:a1:b2:9c:fc:df:e9:6f:11:9c:be:ad:a3:67:7d:0e:f4: 2f:d4:1a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcwwrm9wKVK9d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjlmMTJjOWUtZTM1Ny00NDM0LTk2YmMtYmNkZDYwNGExODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ant0M5yXo+90OVOfTwDVN6xmRv61kNrND76 OUSgwIstJhLkUreFXWoFPd6NaOWRjfJB8CQlPTGIIwYx6hgeoZyl3EwAEbH9KwFK feHSaus85kMinY0Lx1Y0PEuOGnkBx564F5AqH4yKh7CLcTKJqZpq9BaFtPAFjIh2 qlEoBW+rvV0qgouviLzXGrIFxCew1SIFBRscHXtSLCmB4bqlVBXz+0ywWkiP4BsR V8AU21bSb1fwcC5yqRYY+yXJgPj5EF9SbF+PZMHL5Cwo/3NJVcwFS5h3i+bcaz0D 6k8HS2KaoNl/6aEMrCEWj/ofPAa1QDTbJdejrC7Km4FDQa8SGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUNLmJ8th74KZk2nV4tsIvZzM+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGI5MzA5ZTMtMDdkYi0z MDQ0LTgxYWEtYjgzNmEzNjlhMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH04UuVhhwsIrKQaBAC6SvPKnxNEIHcHqwPH44J135F1Y6+4hqb5G/V6 A7rMag9X4XX7CCchBzvwFxb+O36aCyGT8ILBE2qFfAZnYOQLMKse/jFbXyqRL4Xz mL6KjMGUSkQb3pjn5tO5kIz7VQzf+PYrYeiQ9H2iIViJ3xi3i1WS7mfX2JJELZtt cYRMc/G9goXJhC3arHBacuf3vRvF44jUWum3iK/bILhgxNgBpirIogXAmWIaqiA3 gjgv02MzLhhdaCmMZhe98Gtq2vQzqmA2jcx5Q8Yr9iXtn+923SpuCooPTvkGOZMD OiOpobKc/N/pbxGcvq2jZ30O9C/UGpQ= -----END CERTIFICATE-----Generated at Mon Mar 2 01:15:01 2026 by rpki-client