$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa File: 4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa (raw, json) Hash identifier: T//xXIxoEDh//g/dWo80O+OLhKk/mMagEnxY/1GBfNk= Subject key identifier: 5F:34:AE:10:59:40:39:C2:58:FC:2E:B5:C1:F9:3A:25:8B:34:ED:ED Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAE5EC0951E7479CA8E21D0C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 9009 IP address blocks: 172.111.211.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c0:95:1e:74:79:ca:8e:21:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=791f33db-7f55-4cb4-9a92-a003810b85e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:e9:5e:d9:6b:c9:ca:4f:47:8a:02:96:2d: b7:06:d0:7c:fd:17:9b:fd:f7:7d:eb:ad:12:16:4e: 02:9b:bb:40:c9:54:0d:dc:81:4e:41:d4:fb:31:29: 86:2d:97:a8:b0:e3:aa:51:3e:a5:f5:aa:0c:64:7e: 22:fd:a0:84:98:39:6c:9d:22:c1:cf:1b:b3:3d:13: cc:39:54:c3:61:e6:64:06:62:e2:be:2f:01:1e:ed: 31:b9:9f:e3:df:6c:31:4e:f5:d6:5f:0c:13:18:a7: 40:93:ed:ab:25:82:98:03:7d:35:06:7f:cd:a0:71: 70:92:09:6f:90:16:8d:4f:a8:a8:29:f8:ca:e0:e5: f2:fe:7b:6f:50:49:31:fb:95:71:da:a5:99:df:ca: b3:1b:ec:e6:ff:24:a7:13:b6:78:db:a6:a0:17:d3: bc:b8:f3:af:3e:12:7a:ae:21:ae:c7:d1:0c:d0:7d: 54:c5:76:1a:64:f4:6b:b5:ac:e9:6e:17:07:c8:1d: 41:23:c4:d6:95:7a:12:7f:56:83:94:5a:8c:8b:f5: ff:5e:41:b7:d1:f4:82:0d:c8:51:25:47:5f:84:f1: 34:01:9e:37:44:b6:ec:ff:5b:50:ba:cb:46:98:01: 4b:7e:4e:0e:b0:84:f3:e3:bb:4a:d3:ab:88:20:fd: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:34:AE:10:59:40:39:C2:58:FC:2E:B5:C1:F9:3A:25:8B:34:ED:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:15:f7:a8:d7:87:2f:7c:d8:76:b7:84:0e:bd:02:f2:44:ba: f2:b2:5e:78:51:d0:b7:20:aa:0c:57:0c:87:8f:ec:55:6c:22: ea:cf:87:6c:f3:3d:b8:21:d8:68:f0:c7:52:66:6a:e8:0c:8a: 50:7b:c9:44:75:ae:3a:e9:4f:f4:ba:15:35:42:5c:91:a2:87: 3d:88:66:a6:dc:ac:9d:fd:fb:b1:4e:b3:56:03:46:1b:24:dc: 07:66:ab:25:e0:bd:6e:e5:1c:10:17:cc:91:f4:04:5e:97:28: f3:80:50:0b:5a:ed:80:f8:9d:e4:13:3a:fc:8a:9a:3b:0e:3d: f7:08:19:ef:40:c0:a6:be:e4:02:5d:a5:56:7b:a8:85:00:b1: 71:8e:ce:4a:84:4c:c7:cf:41:73:16:89:c3:e1:6e:18:de:81: 43:48:fc:70:b0:d8:ef:d3:d9:67:a2:9e:c7:ab:2e:89:9a:b2: ac:5c:5e:ba:9e:54:37:f5:9e:bd:c7:de:cf:10:42:a2:71:85: 94:e0:43:eb:a8:b9:2a:e1:1b:a1:93:75:0a:41:fe:58:84:e9: cf:b1:03:03:3c:3a:f6:b3:b2:68:9c:17:e3:67:0d:d3:e6:85: 52:c5:06:fc:db:9c:23:6f:3f:9b:38:f0:82:00:7e:a6:2e:c8: 2e:d3:aa:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyuXsCVHnR5yo4h0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzkxZjMzZGItN2Y1NS00Y2I0LTlhOTItYTAwMzgxMGI4NWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9fpXtlrycpPR4oCli23BtB8/Reb/fd9660S Fk4Cm7tAyVQN3IFOQdT7MSmGLZeosOOqUT6l9aoMZH4i/aCEmDlsnSLBzxuzPRPM OVTDYeZkBmLivi8BHu0xuZ/j32wxTvXWXwwTGKdAk+2rJYKYA301Bn/NoHFwkglv kBaNT6ioKfjK4OXy/ntvUEkx+5Vx2qWZ38qzG+zm/ySnE7Z426agF9O8uPOvPhJ6 riGux9EM0H1UxXYaZPRrtazpbhcHyB1BI8TWlXoSf1aDlFqMi/X/XkG30fSCDchR JUdfhPE0AZ43RLbs/1tQustGmAFLfk4OsITz47tK06uIIP1iIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF80rhBZQDnCWPwutcH5OiWLNO3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGJiMzdhNmMtODYwZC0z YjBlLTg0YzYtNTE4NDdkMmNjMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG/TADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlFfeo14cvfNh2t4QOvQLyRLrysl54UdC3IKoMVwyHj+xVbCLqz4ds 8z24Idho8MdSZmroDIpQe8lEda466U/0uhU1QlyRooc9iGam3Kyd/fuxTrNWA0Yb JNwHZqsl4L1u5RwQF8yR9ARelyjzgFALWu2A+J3kEzr8ipo7Dj33CBnvQMCmvuQC XaVWe6iFALFxjs5KhEzHz0FzFonD4W4Y3oFDSPxwsNjv09lnop7Hqy6JmrKsXF66 nlQ39Z69x97PEEKicYWU4EPrqLkq4Ruhk3UKQf5YhOnPsQMDPDr2s7JonBfjZw3T 5oVSxQb825wjbz+bOPCCAH6mLsgu06qY -----END CERTIFICATE-----Generated at Sun Mar 1 20:38:35 2026 by rpki-client