$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/433c24b6-7739-3f50-af12-25249e9fc52d.roa File: 433c24b6-7739-3f50-af12-25249e9fc52d.roa (raw, json) Hash identifier: Vyk+9w5t0MtpmMEr1Jistc7zexQoWBpj5Dteh2hsFJE= Subject key identifier: E7:56:E8:14:77:AA:94:2F:3A:CC:2E:7A:5D:04:91:86:12:13:BD:7D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D4EBF9DBADEE4ED0028326258 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/433c24b6-7739-3f50-af12-25249e9fc52d.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 132372 IP address blocks: 172.111.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:9d:ba:de:e4:ed:00:28:32:62:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=3eba66b6-c9c0-44ef-aeac-0276bd46cbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:72:2c:95:14:da:bd:db:f4:9e:22:04:a4: 82:2b:cc:cd:ff:63:df:3c:5f:ca:da:c2:1e:98:a4: 57:0d:57:de:0c:5c:6b:14:a6:32:27:7d:e6:3c:a3: 47:69:f4:4b:33:4b:d8:4c:fe:90:e8:c7:53:57:20: 9a:93:3a:a6:85:43:7b:88:4a:08:94:8e:60:8c:d7: 58:14:23:4a:09:a1:b0:94:2e:a0:66:6e:1f:b8:59: 9f:df:db:a0:41:97:30:c4:49:f7:84:e8:61:aa:85: 45:b6:84:99:73:d6:92:39:de:60:6b:e3:22:eb:74: f2:0a:2e:90:43:a0:00:70:e9:41:8f:bf:9d:21:ce: 0e:31:84:c4:82:5b:55:9d:80:ea:65:60:30:97:d4: 17:fb:04:8f:0b:90:3c:8e:57:ef:85:d4:8b:e8:72: 15:a6:8a:e0:c1:3e:39:83:22:ed:3e:cc:4b:2d:32: e9:43:68:a2:fb:76:b9:06:06:6d:98:3e:11:c1:61: 51:39:d7:8a:7e:49:ad:ef:c8:e8:8c:09:a4:7a:03: 5a:a2:2e:72:27:19:44:1e:d1:de:17:ab:24:b0:39: 9f:8a:13:75:e0:81:ea:d1:98:eb:28:51:b3:23:74: 2a:11:5d:e4:6b:3e:c2:4c:60:3d:3c:a3:8c:95:7f: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:56:E8:14:77:AA:94:2F:3A:CC:2E:7A:5D:04:91:86:12:13:BD:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/433c24b6-7739-3f50-af12-25249e9fc52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4d:2c:43:de:bf:45:70:3d:ea:53:5e:db:90:dd:2b:02:25: 2c:8a:84:f3:e3:8b:c3:f7:80:d1:ae:8a:d4:15:a2:97:d2:ed: 42:fa:27:ce:1b:cc:b7:26:d2:83:99:a5:22:5c:0d:f3:f0:9b: 5b:9e:8a:f6:a8:26:da:34:91:9f:65:07:d7:a8:d8:c2:1f:fa: 4f:fe:98:ae:4e:80:d2:80:86:fd:e8:03:fd:87:0e:28:69:d7: 9f:1b:cc:eb:9a:82:3b:ff:0a:2d:3d:07:17:e0:b6:b3:8b:65: 29:c2:1a:b2:61:9e:9e:22:a1:5f:e6:f2:ee:d6:7c:3d:e5:f4: e8:85:cd:3c:05:8e:a5:35:be:46:0e:1e:84:6a:be:c0:bb:ca: 5a:8b:70:e8:04:1b:77:5f:44:b7:c4:70:aa:99:5b:e6:61:fe: 4c:00:f5:a8:64:f1:51:d3:09:ee:07:55:c7:80:3a:0a:4c:08: be:3b:bc:04:1d:c3:9d:de:53:3c:73:5b:d9:30:3a:d2:26:43: 9b:df:f8:a5:b8:ef:2c:11:ff:8d:70:9b:40:ab:9d:d5:04:56: c2:7c:ea:0d:98:70:75:ca:61:15:8b:18:cd:b7:40:54:3b:49: 6e:7c:29:6c:fb:71:59:72:08:9b:f6:7b:d4:22:27:9e:ad:ef: 39:4e:fe:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov5263uTtACgyYlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk M2ViYTY2YjYtYzljMC00NGVmLWFlYWMtMDI3NmJkNDZjYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZlyLJUU2r3b9J4iBKSCK8zN/2PfPF/K2sIe mKRXDVfeDFxrFKYyJ33mPKNHafRLM0vYTP6Q6MdTVyCakzqmhUN7iEoIlI5gjNdY FCNKCaGwlC6gZm4fuFmf39ugQZcwxEn3hOhhqoVFtoSZc9aSOd5ga+Mi63TyCi6Q Q6AAcOlBj7+dIc4OMYTEgltVnYDqZWAwl9QX+wSPC5A8jlfvhdSL6HIVporgwT45 gyLtPsxLLTLpQ2ii+3a5BgZtmD4RwWFROdeKfkmt78jojAmkegNaoi5yJxlEHtHe F6sksDmfihN14IHq0ZjrKFGzI3QqEV3kaz7CTGA9PKOMlX9ztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdW6BR3qpQvOswuel0EkYYSE719MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDMzYzI0YjYtNzczOS0z ZjUwLWFmMTItMjUyNDllOWZjNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNNLEPev0VwPepTXtuQ3SsCJSyKhPPji8P3gNGuitQVopfS7UL6J84b zLcm0oOZpSJcDfPwm1ueivaoJto0kZ9lB9eo2MIf+k/+mK5OgNKAhv3oA/2HDihp 158bzOuagjv/Ci09BxfgtrOLZSnCGrJhnp4ioV/m8u7WfD3l9OiFzTwFjqU1vkYO HoRqvsC7ylqLcOgEG3dfRLfEcKqZW+Zh/kwA9ahk8VHTCe4HVceAOgpMCL47vAQd w53eUzxzW9kwOtImQ5vf+KW47ywR/41wm0CrndUEVsJ86g2YcHXKYRWLGM23QFQ7 SW58KWz7cVlyCJv2e9QiJ56t7zlO/sM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:21:54 2026 by rpki-client