$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa File: 28baacda-6a68-3c8f-b393-d75be1456004.roa (raw, json) Hash identifier: 3WuZAdYD4UAvRRdlkKFF98DDfP/MEraEjwwMDf317Go= Subject key identifier: A8:34:60:BE:CF:48:35:29:11:42:38:2C:F0:AF:D4:21:30:DF:99:B2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB121CB079B627AB58EA08F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 212238 IP address blocks: 172.111.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cb:07:9b:62:7a:b5:8e:a0:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=da746b7d-8b09-4004-9a4f-d64e7bca8683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:44:ce:30:a2:f9:22:af:d2:6a:34:d1:49: d7:f0:f7:f1:4c:ee:dc:be:88:72:ae:71:43:2b:e8: 4c:8b:85:da:47:05:75:83:8e:2f:da:77:d1:ae:d7: ee:39:8d:8f:d1:05:fa:45:61:5d:64:94:c1:fd:69: 86:b5:76:b0:51:82:71:df:19:d0:6a:2a:00:f9:1e: 04:5c:51:07:be:1a:a7:9f:ca:fd:64:05:7a:d7:98: 83:30:2d:2d:67:e5:8a:97:b2:54:c7:9d:1c:35:57: 36:ae:80:d9:37:d6:2e:c7:53:cb:38:61:36:96:4a: 80:f2:1a:23:40:ad:e8:9c:df:07:7e:6e:e1:00:b4: 16:d3:48:5c:e9:c6:54:e4:f4:63:a5:10:e3:08:14: b2:6b:76:a8:ea:1c:30:e4:bc:61:84:c4:b3:f2:92: 0e:1b:da:26:04:fa:12:f9:50:c2:9d:c3:14:73:8c: 47:b3:36:3d:0e:1d:b1:9d:54:27:b3:8c:95:be:1f: 2c:5d:9f:ff:c5:29:b1:65:0f:e5:9f:8b:0f:f0:12: 60:69:75:5a:d2:87:9f:52:8a:11:a2:c7:fb:be:20: b5:1d:11:9d:84:0e:68:51:bb:7b:a6:f9:76:ad:e7: 97:df:9b:5f:e8:04:20:08:37:7f:a1:a4:48:d3:8e: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:34:60:BE:CF:48:35:29:11:42:38:2C:F0:AF:D4:21:30:DF:99:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:18:31:02:56:f5:31:5f:68:52:09:82:d3:e6:e7:e4:5c:83: e1:09:bb:6f:30:93:a9:f1:c0:66:f8:23:1e:37:0c:85:e5:e7: 88:86:a9:ac:fa:9b:19:6e:95:8a:40:54:52:70:a3:c4:ff:f0: e3:8d:77:9d:23:31:2b:1f:34:22:4d:34:ea:a1:f0:c1:7d:60: be:33:f2:25:b0:20:ab:74:5d:73:7c:70:08:68:6a:fd:46:38: 6a:2b:71:71:ce:46:74:f6:d7:28:64:56:52:d2:04:58:b8:52: 20:0e:db:6a:75:77:e7:1d:44:ad:9f:be:2c:64:6c:3f:51:8c: 82:0d:03:4b:97:57:50:7d:1b:b0:6d:27:bf:8b:6d:40:ee:d0: ae:90:5f:fb:a9:ce:73:de:55:0c:ec:d3:56:fb:7a:1e:4f:4d: 6e:ad:30:55:ab:95:35:f3:fc:b5:5f:b9:4e:79:38:18:59:ff: 4a:90:53:26:e0:f0:ab:54:e4:24:05:f5:63:fd:c4:fe:3d:14: c4:a8:b0:2e:5d:df:d6:87:c8:28:03:75:d8:8b:65:9f:a1:54: 1b:28:02:a7:ad:d4:ab:01:35:d7:f2:19:36:6a:00:70:81:1f: 65:c5:b9:79:2b:a7:1e:b7:53:88:d3:1a:ea:9c:90:e5:2d:76: 1c:69:b7:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcsHm2J6tY6gj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGE3NDZiN2QtOGIwOS00MDA0LTlhNGYtZDY0ZTdiY2E4NjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9lEzjCi+SKv0mo00UnX8PfxTO7cvohyrnFD K+hMi4XaRwV1g44v2nfRrtfuOY2P0QX6RWFdZJTB/WmGtXawUYJx3xnQaioA+R4E XFEHvhqnn8r9ZAV615iDMC0tZ+WKl7JUx50cNVc2roDZN9Yux1PLOGE2lkqA8hoj QK3onN8Hfm7hALQW00hc6cZU5PRjpRDjCBSya3ao6hww5LxhhMSz8pIOG9omBPoS +VDCncMUc4xHszY9Dh2xnVQns4yVvh8sXZ//xSmxZQ/ln4sP8BJgaXVa0oefUooR osf7viC1HRGdhA5oUbt7pvl2reeX35tf6AQgCDd/oaRI046EnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg0YL7PSDUpEUI4LPCv1CEw35myMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjhiYWFjZGEtNmE2OC0z YzhmLWIzOTMtZDc1YmUxNDU2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAYMQJW9TFfaFIJgtPm5+Rcg+EJu28wk6nxwGb4Ix43DIXl54iGqaz6 mxlulYpAVFJwo8T/8OONd50jMSsfNCJNNOqh8MF9YL4z8iWwIKt0XXN8cAhoav1G OGorcXHORnT21yhkVlLSBFi4UiAO22p1d+cdRK2fvixkbD9RjIINA0uXV1B9G7Bt J7+LbUDu0K6QX/upznPeVQzs01b7eh5PTW6tMFWrlTXz/LVfuU55OBhZ/0qQUybg 8KtU5CQF9WP9xP49FMSosC5d39aHyCgDddiLZZ+hVBsoAqet1KsBNdfyGTZqAHCB H2XFuXkrpx63U4jTGuqckOUtdhxptwg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:55:36 2026 by rpki-client