$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json) Hash identifier: pYtmLsKmJsTxWeZPyU6uV1XxTAskIV8vn1if1GcxCN8= Subject key identifier: B2:7A:E2:61:D5:05:B7:54:17:5A:89:76:B7:BE:74:20:FE:A8:9A:3F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAB8C4FCABDC2593A62493F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 9009 IP address blocks: 172.111.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:4f:ca:bd:c2:59:3a:62:49:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=ae037e5b-8e13-4ea7-bc7f-d368cc0b8784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:32:3c:28:e5:f5:7f:b3:b0:41:45:83:ca: bc:f3:ed:ca:a1:87:4b:c8:00:ea:b5:f3:18:fb:b6: 6a:2f:34:59:08:9d:0c:cb:9d:b8:9e:83:d8:e7:d3: 1e:a7:70:c8:91:63:b9:b1:33:d9:d4:fb:d1:f5:a6: 6e:f3:7f:3b:3b:23:c1:28:d3:89:a6:52:9e:fc:eb: 5b:da:66:35:0f:3c:35:f3:b5:9a:24:26:8e:ac:f0: 30:35:cb:2d:a5:22:58:13:aa:7d:eb:ee:a9:1a:57: e1:4e:92:f9:2f:dc:7c:26:a1:a3:35:96:79:a6:cf: ac:e3:26:1e:9b:5d:28:45:5c:86:ee:c2:10:b4:a6: b9:ea:4c:4e:01:89:c1:fb:62:3e:91:97:9c:ca:35: 07:3d:c7:a4:39:ac:86:d7:38:7d:1c:30:62:c9:f0: 04:eb:05:42:6e:cd:3f:9a:d7:0e:40:d2:63:32:43: 1e:66:13:7f:50:a7:ae:31:7a:41:2c:86:0c:09:fd: 89:a9:9c:72:38:f2:4d:78:1c:21:61:ee:37:06:8f: 89:7a:b4:fa:d6:a1:f0:e0:52:0b:26:90:46:28:02: 12:80:c5:af:3e:89:15:6b:ad:35:23:06:fa:e9:f3: 80:0c:c8:74:0f:36:d9:50:50:e8:43:86:b3:b3:1e: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7A:E2:61:D5:05:B7:54:17:5A:89:76:B7:BE:74:20:FE:A8:9A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4d:96:5d:2b:89:11:6d:19:ff:e7:2e:bd:65:2f:de:53:a1: 66:65:1f:e6:e4:af:fc:e7:67:79:02:1a:a7:1e:62:21:94:96: cd:7d:6d:13:af:46:2c:a6:55:30:a6:68:65:eb:c7:dd:54:9f: 9f:9b:55:76:bb:46:24:54:e5:c0:ad:25:6a:b2:ed:17:a1:3e: fc:f3:6d:49:da:a3:74:68:90:b6:8e:92:23:31:b3:9b:4f:9b: c5:72:7a:5f:9d:e5:de:9a:5d:21:d0:57:4f:a6:20:93:d5:bd: da:ad:30:dc:19:0f:a1:41:eb:14:e5:13:ff:2b:ce:64:d7:7d: 8b:0e:7c:87:f0:dd:3e:fe:cf:00:d2:c5:42:50:c3:9b:92:66: 88:92:70:49:30:79:f3:77:5b:ad:02:ab:7a:14:58:c2:65:a9: e2:63:af:a2:b7:08:99:51:ec:85:ba:82:00:a1:01:40:e2:95: 9d:28:9a:eb:e3:79:1d:f1:49:91:5f:b6:d6:0c:58:e4:ce:54: aa:51:80:08:64:e2:f4:2b:19:e2:20:20:1e:b1:85:47:0f:25: d1:a7:49:9e:48:7d:68:24:7c:7e:10:f2:1d:8e:2f:c7:9d:21: e3:0f:d3:94:bc:66:08:0f:6a:7e:12:ed:2e:ef:5e:b9:2d:dc: 99:13:99:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjE/KvcJZOmJJP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk YWUwMzdlNWItOGUxMy00ZWE3LWJjN2YtZDM2OGNjMGI4Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDYyPCjl9X+zsEFFg8q88+3KoYdLyADqtfMY +7ZqLzRZCJ0My524noPY59Mep3DIkWO5sTPZ1PvR9aZu8387OyPBKNOJplKe/Otb 2mY1Dzw187WaJCaOrPAwNcstpSJYE6p96+6pGlfhTpL5L9x8JqGjNZZ5ps+s4yYe m10oRVyG7sIQtKa56kxOAYnB+2I+kZecyjUHPcekOayG1zh9HDBiyfAE6wVCbs0/ mtcOQNJjMkMeZhN/UKeuMXpBLIYMCf2JqZxyOPJNeBwhYe43Bo+JerT61qHw4FIL JpBGKAISgMWvPokVa601Iwb66fOADMh0DzbZUFDoQ4azsx6auwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ64mHVBbdUF1qJdre+dCD+qJo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzNhMGZmMzItYmFiZS0z YmRmLTg0NDEtYmIxZTgxYjBhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlNll0riRFtGf/nLr1lL95ToWZlH+bkr/znZ3kCGqceYiGUls19bROv RiymVTCmaGXrx91Un5+bVXa7RiRU5cCtJWqy7RehPvzzbUnao3RokLaOkiMxs5tP m8Vyel+d5d6aXSHQV0+mIJPVvdqtMNwZD6FB6xTlE/8rzmTXfYsOfIfw3T7+zwDS xUJQw5uSZoiScEkwefN3W60Cq3oUWMJlqeJjr6K3CJlR7IW6ggChAUDilZ0omuvj eR3xSZFfttYMWOTOVKpRgAhk4vQrGeIgIB6xhUcPJdGnSZ5IfWgkfH4Q8h2OL8ed IeMP05S8ZggPan4S7S7vXrkt3JkTmeQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:11:50 2026 by rpki-client