$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa File: 81923095-bf2e-3f06-a900-58d9912230b4.roa (raw, json) Hash identifier: 1PSv5i08BXIFHWjuyHm/MRWZpk8t+nAsDS+VffIo0zY= Subject key identifier: C6:F6:42:7E:9C:28:EF:B9:23:3B:8F:31:41:8A:BB:6E:AA:82:FD:1A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D59EA78487DB326ED99126A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 212238 IP address blocks: 172.111.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:78:48:7d:b3:26:ed:99:12:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=afd2b1ba-86dd-457e-9047-7499658e2ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:b0:51:60:c7:97:fd:b2:64:9a:27:ae:fe: e0:e0:9c:87:72:83:be:9e:5b:db:a2:c9:02:8f:ed: c2:ac:28:7e:29:d0:d5:30:d7:71:7f:ed:b5:e2:7a: d4:f5:c4:66:c8:d0:99:f4:7c:03:de:aa:f1:0c:ea: 13:03:ce:b9:c7:65:56:ca:30:b3:05:dc:84:2d:43: d4:56:7f:67:da:68:61:95:49:e3:ad:ee:61:da:cd: f0:c3:14:ea:57:79:4c:df:dd:8f:91:5c:4b:27:3e: 43:fb:62:ab:1a:60:38:63:e8:9e:04:ac:f6:9c:be: 04:12:8c:e3:5c:62:89:4f:cf:b2:45:35:e4:c9:cb: ee:d5:a1:3b:3f:8b:88:1c:7c:9d:c3:b7:26:08:a0: 67:7f:c8:11:fe:87:f0:72:59:fe:e1:1e:5b:e2:d7: 04:d0:60:71:b4:5b:07:a3:66:34:6f:60:20:7f:64: c7:3b:9c:fb:39:12:7e:27:cb:d5:eb:67:35:67:52: c1:33:20:c3:f9:3f:be:f0:8e:39:e2:0f:4f:cc:a7: f9:13:1e:15:29:7f:68:87:8d:f5:59:db:9a:4f:21: 63:81:91:65:42:b1:04:65:d1:40:ad:26:b9:52:27: a4:28:7c:32:41:80:41:c7:f5:cc:34:e6:11:66:86: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F6:42:7E:9C:28:EF:B9:23:3B:8F:31:41:8A:BB:6E:AA:82:FD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:35:3f:bc:9d:86:9e:5b:c7:8c:bb:fc:08:18:a9:65:66:04: 69:61:23:30:b4:f3:0e:db:81:9e:09:d9:47:0e:a2:16:c6:f9: 0a:4e:04:e0:54:c5:56:a9:e3:b8:e8:89:e6:61:48:58:a3:06: 77:af:40:8f:5d:41:d2:14:66:85:c5:f9:98:ab:fa:84:19:a5: 0f:ed:e8:9e:90:35:f3:c7:a3:8f:a8:42:29:bb:8c:34:45:c8: eb:b5:a2:e8:19:11:bd:44:8a:1a:1a:00:3d:dd:27:a0:1d:67: f7:4b:af:a7:ef:da:8f:5d:ce:eb:33:59:42:fe:a6:ae:fc:e0: 4e:0a:fd:6e:77:91:cb:a7:5e:b7:a1:5b:4e:6e:1c:d9:60:8c: 01:ea:e2:03:08:62:4b:f1:c5:01:7e:cf:78:5c:43:cc:18:62: bd:b1:38:c6:20:f7:a9:af:ff:2a:ea:ba:c9:93:26:54:fd:c9: 11:a4:76:52:a0:25:0c:47:2a:af:c9:4d:7c:7d:7d:f5:db:31: b2:cd:5c:4b:00:2d:ba:17:96:e1:2c:a0:57:54:7d:6b:e1:ee: e8:3f:b3:fc:52:0b:2a:d6:f5:5c:87:9d:51:6e:2f:ec:29:da: 10:76:f5:9c:3c:9b:63:98:b0:cf:4a:e8:30:ee:60:dc:06:0e: 6f:c3:dc:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nhIfbMm7ZkSaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YWZkMmIxYmEtODZkZC00NTdlLTkwNDctNzQ5OTY1OGUyYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKWwUWDHl/2yZJonrv7g4JyHcoO+nlvboskC j+3CrCh+KdDVMNdxf+214nrU9cRmyNCZ9HwD3qrxDOoTA865x2VWyjCzBdyELUPU Vn9n2mhhlUnjre5h2s3wwxTqV3lM392PkVxLJz5D+2KrGmA4Y+ieBKz2nL4EEozj XGKJT8+yRTXkycvu1aE7P4uIHHydw7cmCKBnf8gR/ofwcln+4R5b4tcE0GBxtFsH o2Y0b2Agf2THO5z7ORJ+J8vV62c1Z1LBMyDD+T++8I454g9PzKf5Ex4VKX9oh431 WduaTyFjgZFlQrEEZdFArSa5UiekKHwyQYBBx/XMNOYRZobmjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb2Qn6cKO+5IzuPMUGKu26qgv0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODE5MjMwOTUtYmYyZS0z ZjA2LWE5MDAtNThkOTkxMjIzMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo1P7ydhp5bx4y7/AgYqWVmBGlhIzC08w7bgZ4J2UcOohbG+QpOBOBU xVap47joieZhSFijBnevQI9dQdIUZoXF+Zir+oQZpQ/t6J6QNfPHo4+oQim7jDRF yOu1ougZEb1EihoaAD3dJ6AdZ/dLr6fv2o9dzuszWUL+pq784E4K/W53kcunXreh W05uHNlgjAHq4gMIYkvxxQF+z3hcQ8wYYr2xOMYg96mv/yrqusmTJlT9yRGkdlKg JQxHKq/JTXx9ffXbMbLNXEsALboXluEsoFdUfWvh7ug/s/xSCyrW9VyHnVFuL+wp 2hB29Zw8m2OYsM9K6DDuYNwGDm/D3LY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:13:59 2026 by rpki-client