$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa File: 5938b922-fbd7-3252-8de4-f85dd5b529d0.roa (raw, json) Hash identifier: 8vGiL+esafxtG6kiP3Gf4IDvp9xP7ao15pyoVE+zkak= Subject key identifier: 0C:F0:A8:9B:F3:4D:D2:87:AA:A7:D3:2C:EF:E9:17:08:8F:00:6A:30 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAB8C53094353EFB8E34A0680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 9009 IP address blocks: 172.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:53:09:43:53:ef:b8:e3:4a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=3e56c11f-2394-45cf-88d9-e4c8f24535e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:44:0c:6b:0b:97:78:49:2a:35:ea:3e:56: f8:e7:1a:d8:b2:a1:0b:d6:2f:7a:87:3d:7a:37:3c: b4:b1:71:2e:db:c6:6c:87:30:60:59:ce:52:c0:bb: 99:74:18:3f:7f:57:3f:53:33:31:35:71:1a:c1:74: 61:d2:fe:2b:00:d1:4d:8c:ae:4e:24:a6:7e:e6:81: 93:e1:0a:55:f9:70:0b:6b:ca:87:5f:23:5c:5d:0d: 84:a3:ae:3a:58:ce:ee:09:21:e4:97:45:68:66:bc: ee:aa:e2:b3:cd:06:0d:b4:50:8f:bb:5a:b6:7d:21: be:a5:21:e8:d9:d0:6b:30:a6:d2:81:d3:45:71:50: 0d:9a:ec:a8:af:8e:e8:69:19:4c:70:ad:3a:2e:5b: bf:8b:fc:21:f7:2d:6c:f3:6d:89:ed:59:77:5e:04: 24:2f:3e:ff:dc:c6:73:d7:69:f0:25:4e:be:a6:a5: 67:ed:67:bc:c6:fe:1e:b3:05:ff:16:b9:e6:07:e9: e1:aa:0f:23:43:5b:0d:9e:4e:c0:d1:c5:4b:fa:33: fa:a5:76:04:f8:12:ca:ed:73:fe:0b:4a:a7:ef:ff: 81:9c:de:74:3b:00:54:86:33:76:34:5e:09:ee:5d: b1:c5:83:ad:ce:ce:a3:a0:6a:d6:2a:87:21:ac:e5: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F0:A8:9B:F3:4D:D2:87:AA:A7:D3:2C:EF:E9:17:08:8F:00:6A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ba:68:62:37:28:2a:45:68:50:e0:90:ae:fd:63:fc:2c:12: 26:2a:49:1c:d6:e5:31:5b:6b:4a:ef:fe:e3:f0:51:f3:b7:54: 14:a5:e9:d7:86:a6:cf:f5:d2:02:8b:42:bf:7c:28:02:e1:12: 83:94:02:a4:c5:26:b1:98:da:ce:66:7c:5f:80:9e:cd:f7:6e: f7:d8:8e:e5:fd:85:88:c7:9c:c4:47:f1:bb:42:bb:2b:1a:e1: 6f:03:b4:0d:d3:a6:3a:24:a2:b3:7a:43:81:ec:87:3e:f8:5f: e7:9d:48:b8:de:12:42:03:3c:0b:6c:7f:44:02:bf:68:71:f3: 6c:31:09:99:cb:b7:c1:df:a9:3d:1c:aa:50:12:86:84:bb:01: d7:17:ab:b7:a0:49:ff:1d:a4:e2:53:42:56:be:b4:4f:f6:29: 06:3e:9e:5d:b0:3d:32:95:4b:bf:b5:41:c0:da:66:10:cf:66: fe:c1:cf:37:09:8e:0f:f4:5f:b9:b9:3d:2a:63:4f:ad:12:4e: f8:e4:da:d3:99:23:83:c5:9b:81:06:c7:1a:5e:25:be:54:7c: c8:55:f0:bb:2b:a0:02:61:76:7d:d2:de:8c:1f:ac:af:78:97: 34:7d:db:11:c0:55:81:c4:9a:8d:f0:75:0e:a4:64:f5:4c:f5: ac:62:86:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjFMJQ1PvuONKBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk M2U1NmMxMWYtMjM5NC00NWNmLTg4ZDktZTRjOGYyNDUzNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWdEDGsLl3hJKjXqPlb45xrYsqEL1i96hz16 Nzy0sXEu28ZshzBgWc5SwLuZdBg/f1c/UzMxNXEawXRh0v4rANFNjK5OJKZ+5oGT 4QpV+XALa8qHXyNcXQ2Eo646WM7uCSHkl0VoZrzuquKzzQYNtFCPu1q2fSG+pSHo 2dBrMKbSgdNFcVANmuyor47oaRlMcK06Llu/i/wh9y1s822J7Vl3XgQkLz7/3MZz 12nwJU6+pqVn7We8xv4eswX/FrnmB+nhqg8jQ1sNnk7A0cVL+jP6pXYE+BLK7XP+ C0qn7/+BnN50OwBUhjN2NF4J7l2xxYOtzs6joGrWKochrOWQnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzwqJvzTdKHqqfTLO/pFwiPAGowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTkzOGI5MjItZmJkNy0z MjUyLThkZTQtZjg1ZGQ1YjUyOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi6aGI3KCpFaFDgkK79Y/wsEiYqSRzW5TFba0rv/uPwUfO3VBSl6deG ps/10gKLQr98KALhEoOUAqTFJrGY2s5mfF+Ans33bvfYjuX9hYjHnMRH8btCuysa 4W8DtA3TpjokorN6Q4Hshz74X+edSLjeEkIDPAtsf0QCv2hx82wxCZnLt8HfqT0c qlAShoS7AdcXq7egSf8dpOJTQla+tE/2KQY+nl2wPTKVS7+1QcDaZhDPZv7BzzcJ jg/0X7m5PSpjT60STvjk2tOZI4PFm4EGxxpeJb5UfMhV8LsroAJhdn3S3owfrK94 lzR92xHAVYHEmo3wdQ6kZPVM9axihgU= -----END CERTIFICATE-----Generated at Mon Mar 2 20:16:07 2026 by rpki-client