$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39302ab9-19a5-39d1-945c-659d3e27e590.roa File: 39302ab9-19a5-39d1-945c-659d3e27e590.roa (raw, json) Hash identifier: 8bnP+5Ixg/OvdIIkFluIUQ3Un5zApyTOQMuXP4yPON0= Subject key identifier: 1F:8F:61:AA:8C:B5:2E:1E:1F:EB:D8:B6:F1:7D:6D:88:59:FB:90:AC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAE5EC20DE20333B9BD65A500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39302ab9-19a5-39d1-945c-659d3e27e590.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 9009 IP address blocks: 172.111.147.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c2:0d:e2:03:33:b9:bd:65:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8555eb84-03a4-4365-93ca-1545e4f71100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:40:bc:69:ec:e6:1e:59:69:6c:64:87:e0: 67:a2:ac:e8:12:f0:c7:2b:e4:98:ea:e1:b9:45:2f: da:51:4c:2e:ac:a8:eb:92:2d:46:d6:38:1b:16:97: 4a:89:f7:db:20:c0:77:e4:c0:56:31:2d:59:f6:4c: 7e:40:56:fe:24:71:b7:64:7e:1e:8e:7a:c8:5b:bf: b7:ca:4d:2b:91:50:2c:fd:8c:00:1a:25:da:bd:2f: c0:be:64:60:04:61:ea:50:cd:eb:c7:52:1c:ff:e4: 6c:9a:67:ad:f5:03:6e:1a:df:be:f3:a3:41:58:21: 52:f7:38:7f:9d:68:27:f8:50:d5:c4:ec:c9:ae:99: 42:76:1f:24:29:65:d3:8d:8d:f0:a5:f4:3a:d6:e0: 2d:e1:06:ab:9e:77:a2:d8:ab:7d:ad:c9:02:2c:7e: de:5e:86:6d:6d:e7:23:2f:49:74:aa:50:57:e4:2e: 6d:b8:81:b0:3f:72:68:63:02:a6:ef:30:e7:13:e4: 79:cb:4e:23:bd:da:9a:93:49:20:2b:96:cc:a1:11: e7:2d:9c:6a:4e:a3:59:da:63:70:bf:49:5a:cc:ca: 32:cc:47:63:95:0f:de:6b:7f:b6:e7:d0:9f:f9:08: e4:fe:64:29:bf:18:19:91:eb:78:77:2d:7b:e2:99: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8F:61:AA:8C:B5:2E:1E:1F:EB:D8:B6:F1:7D:6D:88:59:FB:90:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39302ab9-19a5-39d1-945c-659d3e27e590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f3:50:ab:5e:eb:27:ce:21:70:0e:40:f8:d6:5e:b3:3c:69: e4:04:03:76:43:9b:83:29:70:11:3b:44:cb:cf:a5:f8:2e:b4: 61:9d:24:37:72:d5:c9:95:d7:08:1d:ef:f9:27:de:ae:d2:5f: 9f:d6:e2:61:40:3f:dd:ac:b5:5f:c3:31:00:6f:3a:17:21:a2: 58:3a:50:0a:81:18:71:91:98:f3:15:5d:1f:72:5a:77:ea:1e: 0c:c5:c0:9f:38:69:33:f8:32:21:cc:28:0a:d7:32:2c:cc:fe: 34:ee:0f:ae:90:f4:1d:15:b6:b4:7f:20:c3:f4:3c:38:fd:29: 45:48:bc:c5:88:d0:22:71:9b:ce:23:96:f2:1a:78:c7:15:69: 23:9b:fb:0f:de:9e:8d:eb:12:88:f5:63:30:f7:fe:db:4e:37: 67:87:60:1d:58:d0:b5:ac:b9:cb:84:27:b1:95:d0:c3:1d:cd: 58:11:38:28:0e:42:6a:8d:62:9e:75:51:4c:73:b2:bb:29:0d: ac:17:24:b7:36:96:31:06:3c:32:d3:ca:37:3e:41:93:50:1e: ff:2d:9f:32:84:9f:f2:d6:d2:98:62:4d:34:0a:48:07:cf:ba: 61:0e:1b:b4:d2:34:f1:cf:cd:f8:2a:e0:18:ef:35:7d:de:2b: 3d:15:68:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyuXsIN4gMzub1lpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODU1NWViODQtMDNhNC00MzY1LTkzY2EtMTU0NWU0ZjcxMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArutAvGns5h5ZaWxkh+BnoqzoEvDHK+SY6uG5 RS/aUUwurKjrki1G1jgbFpdKiffbIMB35MBWMS1Z9kx+QFb+JHG3ZH4ejnrIW7+3 yk0rkVAs/YwAGiXavS/AvmRgBGHqUM3rx1Ic/+Rsmmet9QNuGt++86NBWCFS9zh/ nWgn+FDVxOzJrplCdh8kKWXTjY3wpfQ61uAt4Qarnnei2Kt9rckCLH7eXoZtbecj L0l0qlBX5C5tuIGwP3JoYwKm7zDnE+R5y04jvdqak0kgK5bMoRHnLZxqTqNZ2mNw v0lazMoyzEdjlQ/ea3+259Cf+Qjk/mQpvxgZket4dy174pk3GQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB+PYaqMtS4eH+vYtvF9bYhZ+5CsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzkzMDJhYjktMTlhNS0z OWQxLTk0NWMtNjU5ZDNlMjdlNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG+TADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA381CrXusnziFwDkD41l6zPGnkBAN2Q5uDKXARO0TLz6X4LrRhnSQ3 ctXJldcIHe/5J96u0l+f1uJhQD/drLVfwzEAbzoXIaJYOlAKgRhxkZjzFV0fclp3 6h4MxcCfOGkz+DIhzCgK1zIszP407g+ukPQdFba0fyDD9Dw4/SlFSLzFiNAicZvO I5byGnjHFWkjm/sP3p6N6xKI9WMw9/7bTjdnh2AdWNC1rLnLhCexldDDHc1YETgo DkJqjWKedVFMc7K7KQ2sFyS3NpYxBjwy08o3PkGTUB7/LZ8yhJ/y1tKYYk00CkgH z7phDhu00jTxz834KuAY7zV93is9FWgn -----END CERTIFICATE-----Generated at Sun Mar 1 20:45:15 2026 by rpki-client