$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa File: 5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa (raw, json) Hash identifier: IMHGhecYsXUI0B+NTL/+KS3xKdrSTQ7UJBMyNM9xJO0= Subject key identifier: 5B:0D:DC:09:AF:CA:0D:C0:8A:35:80:E4:EC:E5:79:B9:E1:D8:39:E8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D59EA70D6F9F043E2EA9B6240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 9009 IP address blocks: 172.111.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:70:d6:f9:f0:43:e2:ea:9b:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=dc3bb5da-0526-4c5f-b7a5-f3ef25c45275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:8d:24:67:0f:7e:86:3e:09:00:8f:69:c4: 49:61:44:b1:26:ae:a1:18:34:79:3a:3a:db:35:b3: f1:ee:e6:57:9f:81:a1:81:9f:b7:6d:fe:dd:a8:52: fe:f1:7d:3b:6e:a7:4f:25:48:98:27:8c:06:12:eb: f3:8a:39:49:51:c6:59:e5:53:3e:03:19:81:e9:48: a3:03:f4:c3:f5:f8:6d:02:12:fb:e7:61:d8:7f:0a: 81:ec:3c:18:8a:57:89:ac:85:27:c2:e0:e7:0a:7c: 34:10:bb:40:d1:dc:2f:68:eb:f6:33:99:2a:71:4d: f0:1b:1d:19:da:ff:4d:51:4d:57:64:bc:a9:b2:b4: 31:82:11:28:b1:5b:74:1f:71:04:f5:f9:ec:c3:f7: f2:be:59:c0:5a:93:43:63:eb:0b:cd:f7:f1:76:04: 90:cb:80:67:c3:1b:94:29:fc:f5:bb:e4:90:39:8d: 68:35:f8:16:15:e7:10:3d:c8:4d:21:87:de:7f:50: 2e:59:77:a3:de:92:53:0c:6b:15:d3:83:83:86:70: 0a:32:23:c5:1b:ca:7d:15:ac:fd:5f:ec:e9:bc:7f: 78:3e:4c:df:fb:f6:69:7a:36:44:76:3d:dc:9c:b1: c2:47:18:6d:f2:6b:99:d2:cd:9a:ed:d7:d1:09:99: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0D:DC:09:AF:CA:0D:C0:8A:35:80:E4:EC:E5:79:B9:E1:D8:39:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6f:c9:c6:8f:c0:63:cd:c3:f2:83:25:ba:7a:9b:66:2d:d9: 52:ca:5d:ae:60:03:85:67:eb:94:67:fc:81:4f:a5:ab:af:25: 61:d8:fd:a4:93:7b:eb:c2:75:ff:4f:8c:a0:d0:52:38:cd:3f: 0f:b4:32:75:c1:96:45:79:b4:83:65:1c:e7:af:99:99:a6:9b: 0f:ca:da:7c:f1:a1:ca:c2:ee:f1:6b:5e:a0:29:62:43:cf:82: 49:af:7e:e9:6c:0b:a9:31:3b:ec:8b:6b:6a:65:61:51:28:60: 9e:2e:ee:1c:73:80:30:4d:7c:2b:f1:40:ff:b2:08:ea:e1:88: c2:86:88:10:39:ce:5a:00:1c:b8:65:e5:b6:6b:60:7d:26:be: 66:dc:3a:a3:ef:f8:84:d7:f3:f3:28:8b:f0:44:dd:46:e6:69: 16:59:89:22:34:fb:20:c5:c9:bd:04:0d:a2:c9:be:93:d2:3e: d7:cd:84:ca:dd:2c:d2:84:8d:82:18:70:ef:ed:6b:73:d3:af: c4:29:63:14:75:06:d6:a5:f7:a7:7b:34:83:d1:fe:2f:6e:a8: 6f:5e:95:9d:58:56:17:d5:4f:8d:f6:71:af:6a:6c:06:18:0a: 13:99:a4:84:b1:e8:81:57:80:a1:28:29:5a:e5:fb:31:2c:c4: f3:a5:17:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nDW+fBD4uqbYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGMzYmI1ZGEtMDUyNi00YzVmLWI3YTUtZjNlZjI1YzQ1Mjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt6NJGcPfoY+CQCPacRJYUSxJq6hGDR5Ojrb NbPx7uZXn4GhgZ+3bf7dqFL+8X07bqdPJUiYJ4wGEuvzijlJUcZZ5VM+AxmB6Uij A/TD9fhtAhL752HYfwqB7DwYileJrIUnwuDnCnw0ELtA0dwvaOv2M5kqcU3wGx0Z 2v9NUU1XZLypsrQxghEosVt0H3EE9fnsw/fyvlnAWpNDY+sLzffxdgSQy4BnwxuU Kfz1u+SQOY1oNfgWFecQPchNIYfef1AuWXej3pJTDGsV04ODhnAKMiPFG8p9Faz9 X+zpvH94Pkzf+/ZpejZEdj3cnLHCRxht8muZ0s2a7dfRCZlZzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsN3Amvyg3AijWA5Ozlebnh2DnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWExZWFkMmItYjVkMi0z ODY4LWI3MjUtOTgzY2UyNGQ5ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRvycaPwGPNw/KDJbp6m2Yt2VLKXa5gA4Vn65Rn/IFPpauvJWHY/aST e+vCdf9PjKDQUjjNPw+0MnXBlkV5tINlHOevmZmmmw/K2nzxocrC7vFrXqApYkPP gkmvfulsC6kxO+yLa2plYVEoYJ4u7hxzgDBNfCvxQP+yCOrhiMKGiBA5zloAHLhl 5bZrYH0mvmbcOqPv+ITX8/Moi/BE3UbmaRZZiSI0+yDFyb0EDaLJvpPSPtfNhMrd LNKEjYIYcO/ta3PTr8QpYxR1Btal96d7NIPR/i9uqG9elZ1YVhfVT432ca9qbAYY ChOZpISx6IFXgKEoKVrl+zEsxPOlFxc= -----END CERTIFICATE-----Generated at Fri Apr 17 05:06:05 2026 by rpki-client