$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa File: 5ced4112-3f87-3644-b991-99ff69b18b89.roa (raw, json) Hash identifier: A+D7YYdoIU5K3AOkbEb/1mpthYs4WKM47iu7OWOcaKU= Subject key identifier: C0:24:96:57:F7:B1:F7:AB:2C:CA:E0:42:42:BD:B0:47:F5:6E:DF:88 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CF6ECE185D52C9A8CA02A0060 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 9009 IP address blocks: 172.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:e1:85:d5:2c:9a:8c:a0:2a:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=8b24d6a7-099f-4d2d-a8c0-59cd9abcd48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:57:62:f1:68:ec:73:a0:5d:47:6f:d6:60:c4: 76:73:47:c8:85:0c:8c:e7:9d:87:0e:a6:a5:52:c9: ed:c6:85:76:67:b1:82:06:d1:ac:73:34:63:6b:4d: 67:16:ea:e2:8a:d9:fe:40:68:29:61:4e:64:36:8e: ad:27:d8:e8:0b:7b:5f:c1:4c:fa:32:dd:83:40:5c: 4f:f2:e9:91:78:ff:d7:fe:09:73:c6:f6:d2:1a:a4: 21:63:27:4f:92:a7:af:d8:9c:f6:b3:2a:b9:3a:64: ee:73:47:6d:20:e8:bf:b4:65:79:9c:f0:1e:38:c4: 22:80:31:72:ef:5b:b7:4b:7e:f5:b6:c3:87:e2:ce: 69:46:d0:d5:8e:19:48:7f:93:32:be:9f:59:9b:56: af:46:03:c1:ef:06:8c:5f:72:3f:0e:e4:f6:33:da: 4b:20:1e:e2:f3:0f:f2:89:71:5a:b5:2a:0d:55:cc: 4d:31:39:53:c7:49:3d:5e:a4:3a:ee:fb:21:0d:3f: 77:b6:78:fd:52:86:05:95:04:63:e4:7b:8c:e0:6a: ea:5e:c7:26:35:05:d4:11:36:77:94:39:fc:4d:e6: a0:28:4e:e7:fd:a6:ea:66:d5:dd:e0:04:c3:23:72: d2:74:0b:d8:23:fd:44:2c:57:f2:7c:92:78:85:f3: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:24:96:57:F7:B1:F7:AB:2C:CA:E0:42:42:BD:B0:47:F5:6E:DF:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8f:8a:c8:18:51:c5:91:1b:28:53:ea:fd:60:f5:de:a6:53: af:4f:bf:3d:15:46:1d:f6:e8:90:92:42:40:f3:ff:65:39:d3: a8:3c:fe:85:90:e9:78:70:4f:89:25:65:b6:fb:80:41:96:b0: 2e:51:9e:2b:b6:27:2b:0d:01:ff:0a:70:04:ec:c4:bd:e7:52: 35:b7:69:3b:3a:7a:c4:5c:e6:90:5a:93:1b:86:88:60:7d:57: c3:fd:3b:c8:b5:68:71:8b:e4:0c:1f:63:1f:26:b6:47:1f:3d: 48:a5:55:b6:a3:8f:34:a3:51:9e:56:d9:96:cc:65:a7:f8:0c: 36:44:5a:b1:49:97:4f:c3:f6:8b:52:c6:63:49:c2:3c:77:f3: 6d:25:82:d0:5a:56:93:fd:02:64:4b:51:00:7d:6b:82:72:b7: ec:6a:da:2e:f6:82:a0:1f:a8:ea:4b:0c:78:89:49:03:40:13: a9:09:36:63:05:f7:90:b0:4f:1c:ae:dd:ee:a3:41:b4:da:23: 93:a7:b4:2f:9b:ca:72:85:74:5a:36:5b:12:d4:30:6b:5a:db: 2f:27:0c:61:8a:e1:5c:58:05:ef:ee:a3:f5:f8:b1:53:0f:9b: ea:b9:7b:1f:b2:34:f4:76:0d:56:7c:86:c4:89:4a:74:db:ee: 7c:6c:8a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27OGF1SyajKAqAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk OGIyNGQ2YTctMDk5Zi00ZDJkLWE4YzAtNTljZDlhYmNkNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFdi8Wjsc6BdR2/WYMR2c0fIhQyM552HDqal UsntxoV2Z7GCBtGsczRja01nFuriitn+QGgpYU5kNo6tJ9joC3tfwUz6Mt2DQFxP 8umReP/X/glzxvbSGqQhYydPkqev2Jz2syq5OmTuc0dtIOi/tGV5nPAeOMQigDFy 71u3S371tsOH4s5pRtDVjhlIf5Myvp9Zm1avRgPB7waMX3I/DuT2M9pLIB7i8w/y iXFatSoNVcxNMTlTx0k9XqQ67vshDT93tnj9UoYFlQRj5HuM4GrqXscmNQXUETZ3 lDn8TeagKE7n/abqZtXd4ATDI3LSdAvYI/1ELFfyfJJ4hfM6CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAkllf3sferLMrgQkK9sEf1bt+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWNlZDQxMTItM2Y4Ny0z NjQ0LWI5OTEtOTlmZjY5YjE4Yjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmPisgYUcWRGyhT6v1g9d6mU69Pvz0VRh326JCSQkDz/2U506g8/oWQ 6XhwT4klZbb7gEGWsC5Rniu2JysNAf8KcATsxL3nUjW3aTs6esRc5pBakxuGiGB9 V8P9O8i1aHGL5AwfYx8mtkcfPUilVbajjzSjUZ5W2ZbMZaf4DDZEWrFJl0/D9otS xmNJwjx3820lgtBaVpP9AmRLUQB9a4Jyt+xq2i72gqAfqOpLDHiJSQNAE6kJNmMF 95CwTxyu3e6jQbTaI5OntC+bynKFdFo2WxLUMGta2y8nDGGK4VxYBe/uo/X4sVMP m+q5ex+yNPR2DVZ8hsSJSnTb7nxsik4= -----END CERTIFICATE-----Generated at Sun Mar 1 20:42:40 2026 by rpki-client