$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa File: 6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa (raw, json) Hash identifier: pRToKc8krMunOBABO0fmjMRUSn6MBpRVT5tdFK4i7j8= Subject key identifier: 5C:E5:E3:07:21:A7:48:5E:E3:87:EB:01:F0:DF:CC:79:2A:C7:AB:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAE5EC721D0B4438FCABE1E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 9009 IP address blocks: 172.111.147.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c7:21:d0:b4:43:8f:ca:be:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=88ab1113-7dd1-4ce3-aea2-4774f2b95f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:8e:80:cc:ca:05:f1:2e:6b:21:9f:b6:21: 1c:4a:d6:ab:bb:fe:12:76:c2:63:dd:c5:95:f7:ec: 0b:05:d5:79:7f:db:be:85:9c:98:19:c5:1f:c4:1c: 44:d9:6c:28:18:c2:89:7c:b0:57:eb:4d:a2:b3:22: dd:da:1d:9c:92:8f:7a:72:b5:81:6d:c8:fc:45:80: 00:28:2e:99:ba:9b:e5:ab:93:83:34:d4:3c:61:c8: 13:ea:63:ce:a2:7c:87:2e:b3:fe:58:45:4c:b8:10: 5f:9b:be:5e:83:ff:fa:29:d8:d7:25:d2:01:b6:81: 97:bc:11:55:12:4e:d3:45:4b:4b:66:3d:7c:6b:0e: 54:c8:19:85:13:12:26:0a:fc:51:47:ef:b4:db:5e: 3d:67:ca:c8:2e:c6:2c:80:a4:25:7d:49:d8:43:62: 9d:01:bb:cc:81:ec:8c:ce:fc:5d:56:46:bf:05:f0: bd:54:3f:59:31:65:21:a4:89:d9:ca:24:85:17:9b: bd:f4:bb:31:7b:78:73:02:b1:53:70:33:42:a9:7a: 63:dd:de:56:d3:b4:c1:24:d0:7f:22:eb:dc:f3:e6: b4:81:ab:0d:2f:f4:4c:b8:7e:9f:5c:ed:e6:d8:fe: 50:db:12:d7:83:b2:f9:59:e7:03:ea:fe:9c:82:34: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:E3:07:21:A7:48:5E:E3:87:EB:01:F0:DF:CC:79:2A:C7:AB:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7b:27:94:8d:55:2e:bc:2b:d3:c8:21:9b:99:ae:32:3b:03: 80:f2:a7:51:52:de:d2:a4:aa:75:fd:0c:43:8f:04:ed:45:1e: 66:e5:4d:39:68:9e:84:c5:9a:ed:c8:2f:66:fd:e1:9f:6f:e6: 75:b4:a6:62:ed:5b:7f:6f:56:94:00:d1:95:fe:87:f5:57:e5: 95:cc:22:1f:24:c8:ea:e5:1d:87:ea:a1:27:6a:b8:37:92:f7: 60:3e:46:20:9b:19:eb:59:fa:6a:78:92:5a:bc:66:9d:a2:cb: db:93:e3:97:5e:16:d0:48:1b:8e:24:4c:b7:35:2c:57:59:cf: 1a:f2:d1:cf:6e:a9:8f:50:8a:9c:58:13:bf:2c:09:72:d4:2b: 5d:68:c7:97:5e:e3:a2:ea:55:85:16:c2:c5:73:4d:9e:7c:d6: 2e:fc:cc:27:c0:f1:79:f0:99:e1:48:33:46:95:5f:99:d7:eb: 0a:8b:62:f1:b8:b4:91:e0:b7:8b:53:aa:ff:e5:69:77:75:1e: 79:f9:b2:84:20:14:a5:0b:ad:0c:bd:e7:7a:05:98:78:88:0f: c9:08:f1:50:00:96:ae:7f:9f:71:10:83:02:08:a8:70:18:29: 50:9a:3c:4b:c4:fb:75:b8:b3:b8:6a:03:28:c9:d1:a3:18:7b: 06:10:58:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyuXsch0LRDj8q+HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODhhYjExMTMtN2RkMS00Y2UzLWFlYTItNDc3NGYyYjk1ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFiOgMzKBfEuayGftiEcStaru/4SdsJj3cWV 9+wLBdV5f9u+hZyYGcUfxBxE2WwoGMKJfLBX602isyLd2h2cko96crWBbcj8RYAA KC6Zupvlq5ODNNQ8YcgT6mPOonyHLrP+WEVMuBBfm75eg//6KdjXJdIBtoGXvBFV Ek7TRUtLZj18aw5UyBmFExImCvxRR++02149Z8rILsYsgKQlfUnYQ2KdAbvMgeyM zvxdVka/BfC9VD9ZMWUhpInZyiSFF5u99Lsxe3hzArFTcDNCqXpj3d5W07TBJNB/ Iuvc8+a0gasNL/RMuH6fXO3m2P5Q2xLXg7L5WecD6v6cgjTTeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFzl4wchp0he44frAfDfzHkqx6u6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjQ4MTY2OWEtYmQ4OS0z ZGI5LWEzYzYtOTk2NjJmN2NmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG+TgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjeyeUjVUuvCvTyCGbma4yOwOA8qdRUt7SpKp1/QxDjwTtRR5m5U05 aJ6ExZrtyC9m/eGfb+Z1tKZi7Vt/b1aUANGV/of1V+WVzCIfJMjq5R2H6qEnarg3 kvdgPkYgmxnrWfpqeJJavGadosvbk+OXXhbQSBuOJEy3NSxXWc8a8tHPbqmPUIqc WBO/LAly1CtdaMeXXuOi6lWFFsLFc02efNYu/MwnwPF58JnhSDNGlV+Z1+sKi2Lx uLSR4LeLU6r/5Wl3dR55+bKEIBSlC60Mved6BZh4iA/JCPFQAJauf59xEIMCCKhw GClQmjxLxPt1uLO4agMoydGjGHsGEFgZ -----END CERTIFICATE-----Generated at Mon Mar 2 00:35:50 2026 by rpki-client