$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa File: 2dd78db9-6d0c-3114-a64a-769cedc85549.roa (raw, json) Hash identifier: agFfK+sRAxADnrybdHwDOZz5FCfCiciq33J44BR/6JM= Subject key identifier: A0:EF:90:C0:2C:FE:76:21:BD:A1:B3:6C:B5:DE:14:75:49:FD:46:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D59EA63C0CA8E862D98B115C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.111.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:63:c0:ca:8e:86:2d:98:b1:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=c3db1813-fdcb-4a7e-9247-57ced7663dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:12:07:a7:41:6d:c0:1a:88:8c:55:5d:13: f3:54:90:3e:cf:fc:38:0a:ec:77:ea:42:87:75:f7: eb:da:dd:0e:fa:0b:88:d7:54:5c:54:cb:b2:fc:fa: b9:8a:d9:b4:31:0c:2a:01:28:14:84:6a:81:2b:45: af:31:99:85:d4:90:65:fb:9d:a9:05:3f:39:e4:12: 4d:71:09:2a:96:5b:71:4c:0a:6e:04:69:d1:cc:58: a7:ec:6e:1a:e5:79:bd:13:5b:9b:29:82:93:57:25: 6a:11:48:9f:21:6c:65:c3:79:09:44:cc:88:2b:2e: d6:aa:09:63:06:a1:a0:fa:7f:da:20:83:df:b7:ab: 01:3f:f7:1e:40:6f:f2:de:40:03:a8:f7:77:22:89: a9:7f:c1:b2:b7:14:95:26:22:f0:95:a1:40:d7:49: c7:96:2c:e5:0d:13:d1:31:1c:37:f7:8e:20:36:db: c4:0f:71:29:f6:ef:73:bd:9b:76:6f:2c:79:0e:88: 65:b3:e9:4a:60:20:29:53:be:a9:50:51:73:57:27: 74:b8:d0:20:36:6a:b0:bf:5d:22:d0:86:e1:03:ce: 27:65:94:11:bd:a0:4a:ee:8e:77:e0:10:8c:7e:43: 5f:d5:91:e2:04:9e:3f:1c:1b:fb:60:63:b5:72:13: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EF:90:C0:2C:FE:76:21:BD:A1:B3:6C:B5:DE:14:75:49:FD:46:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3d:a9:48:93:70:38:af:93:dc:86:45:33:5e:49:a6:10:14: f7:10:69:55:e4:a8:3d:bd:48:9a:3f:5b:d5:c5:19:1b:6b:86: 27:5a:b3:65:16:1a:75:51:ad:5c:57:74:a7:10:2e:db:b4:b8: c5:57:81:1a:4c:ac:26:98:1e:86:73:03:8e:16:be:1e:87:6b: 69:94:96:8b:58:93:77:6b:00:80:de:a9:f2:aa:2b:90:54:c8: 02:99:28:5a:9b:c1:28:87:27:e6:33:e6:78:52:5b:3d:57:6f: 5d:dc:bf:9d:b5:08:6a:c4:25:ae:b7:f6:53:63:7e:79:8b:bc: a4:51:db:1e:95:08:4d:9e:86:d7:e9:7b:b5:ab:62:3f:a2:b1: 2c:0a:eb:62:a8:6a:c2:5b:c2:90:85:6d:3c:a4:11:e1:ec:0b: 92:d6:80:ef:5b:e3:72:ab:8a:d4:8a:52:7a:f4:81:f1:ea:d4: 76:ab:db:55:4c:e8:3b:ba:cd:42:96:b6:30:4b:15:1a:cc:82: 5a:80:e4:e0:e0:2d:b4:7e:31:ca:4d:51:83:f6:73:d8:6a:3c: 74:7a:f7:ba:3d:e3:49:d4:2a:21:6d:4d:59:f4:8c:18:a1:85: 99:34:81:f4:df:df:a3:67:56:fc:be:9e:dc:db:ee:39:82:07: b4:5b:ad:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mPAyo6GLZixFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YzNkYjE4MTMtZmRjYi00YTdlLTkyNDctNTdjZWQ3NjYzZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybcSB6dBbcAaiIxVXRPzVJA+z/w4Cux36kKH dffr2t0O+guI11RcVMuy/Pq5itm0MQwqASgUhGqBK0WvMZmF1JBl+52pBT855BJN cQkqlltxTApuBGnRzFin7G4a5Xm9E1ubKYKTVyVqEUifIWxlw3kJRMyIKy7Wqglj BqGg+n/aIIPft6sBP/ceQG/y3kADqPd3Iompf8GytxSVJiLwlaFA10nHlizlDRPR MRw3944gNtvED3Ep9u9zvZt2byx5Dohls+lKYCApU76pUFFzVyd0uNAgNmqwv10i 0IbhA84nZZQRvaBK7o534BCMfkNf1ZHiBJ4/HBv7YGO1chMKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDvkMAs/nYhvaGzbLXeFHVJ/UYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmRkNzhkYjktNmQwYy0z MTE0LWE2NGEtNzY5Y2VkYzg1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC49qUiTcDivk9yGRTNeSaYQFPcQaVXkqD29SJo/W9XFGRtrhidas2UW GnVRrVxXdKcQLtu0uMVXgRpMrCaYHoZzA44Wvh6Ha2mUlotYk3drAIDeqfKqK5BU yAKZKFqbwSiHJ+Yz5nhSWz1Xb13cv521CGrEJa639lNjfnmLvKRR2x6VCE2ehtfp e7WrYj+isSwK62KoasJbwpCFbTykEeHsC5LWgO9b43KritSKUnr0gfHq1Har21VM 6Du6zUKWtjBLFRrMglqA5ODgLbR+McpNUYP2c9hqPHR697o940nUKiFtTVn0jBih hZk0gfTf36NnVvy+ntzb7jmCB7RbrdM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:39:05 2026 by rpki-client