$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json) Hash identifier: 5oGuDqr5UMpyhiG9/u7jfi+fQljHaEnf4tFwyiTc1bo= Subject key identifier: 28:74:88:2B:E5:84:43:1C:AC:66:77:75:66:E7:56:17:02:47:F6:4F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CCA41F71BE452AF380E744C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 9009 IP address blocks: 172.111.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:f7:1b:e4:52:af:38:0e:74:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=102ab107-ec9f-4011-b8c6-d70217a61b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:be:a9:5c:2d:46:1e:5d:35:0d:32:c5:4b: d6:90:02:fc:50:fa:be:f8:f7:b7:33:73:e2:2b:e5: e9:0a:2d:ee:5b:95:0b:fa:b1:f0:99:cb:77:7f:73: 00:74:d2:55:8c:aa:d1:eb:d3:8d:bb:92:b9:12:55: c8:13:b3:f4:1e:4b:58:65:39:de:56:23:ad:5f:a0: 87:9d:5a:cb:f2:7c:f3:15:f1:b0:88:ed:1f:34:70: 45:01:c8:61:ba:67:da:22:b5:92:ad:5c:49:0e:5d: 0e:a5:01:b2:72:b8:0f:89:b3:30:c3:0c:e9:1e:0d: 72:65:70:cc:d4:c9:5b:d9:8a:b8:d4:52:a2:2f:08: 70:fe:63:2b:0a:ca:fd:25:a9:a9:04:1a:90:c6:be: 8e:4d:3e:0c:de:6d:8e:fb:7f:ef:9a:bd:88:0d:91: 49:1d:cd:57:a7:27:da:12:02:c6:fe:6e:2d:45:30: 3a:1d:a9:0c:04:11:d5:91:fa:3a:e6:8c:68:99:4d: 37:c4:11:0f:c4:27:10:72:61:ee:c8:0a:06:99:b5: 07:84:fb:64:95:9d:90:34:7b:53:b7:1a:21:95:19: 5a:85:8f:80:21:b5:65:b5:cb:8c:c4:7b:d4:ce:6b: fb:6f:94:f2:a2:9d:61:08:ef:4e:67:be:53:b6:e2: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:88:2B:E5:84:43:1C:AC:66:77:75:66:E7:56:17:02:47:F6:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b7:f4:6a:ab:cb:28:ea:21:20:c1:3f:d0:23:91:6d:90:4d: b3:f1:eb:3d:cd:d7:7e:39:b0:91:65:c5:51:22:e3:e6:e3:53: b1:c7:b5:61:6f:b7:14:06:80:a6:c1:60:de:5a:80:d7:f7:a1: 50:2d:0a:df:f1:80:db:be:10:60:81:a5:19:62:a7:75:b7:25: f1:14:b1:c8:f2:da:15:2d:e6:4b:4a:0e:6e:2b:cb:64:ca:07: 51:18:53:ec:53:56:c1:3b:af:33:f9:23:82:ba:b6:48:9d:a0: 78:b1:49:fa:05:9c:af:47:d7:b5:ac:14:09:f8:62:56:cd:8d: 5e:f6:98:bd:b3:ce:cd:3b:b8:66:ae:51:fd:b2:fa:d5:a2:09: 2f:b8:f0:11:d9:3c:af:7a:c6:4c:79:b8:30:fd:18:dd:5f:ff: fe:78:9a:0c:6f:4d:92:5d:45:06:1c:cf:14:c4:c2:d3:d6:3d: 44:43:a2:bf:a4:a4:24:78:77:e3:1e:5a:6c:3b:53:8a:be:50: 30:2a:43:dc:66:5a:41:04:c1:72:05:3b:10:c7:fd:76:61:78: 6d:2d:b4:c1:8b:09:b6:54:fa:70:45:09:3a:ca:2e:4f:45:d5: 90:9c:d5:b4:04:dc:f6:23:48:93:9b:a2:6e:5e:7c:cb:17:aa: 31:4d:cd:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQfcb5FKvOA50TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk MTAyYWIxMDctZWM5Zi00MDExLWI4YzYtZDcwMjE3YTYxYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfu+qVwtRh5dNQ0yxUvWkAL8UPq++Pe3M3Pi K+XpCi3uW5UL+rHwmct3f3MAdNJVjKrR69ONu5K5ElXIE7P0HktYZTneViOtX6CH nVrL8nzzFfGwiO0fNHBFAchhumfaIrWSrVxJDl0OpQGycrgPibMwwwzpHg1yZXDM 1Mlb2Yq41FKiLwhw/mMrCsr9JampBBqQxr6OTT4M3m2O+3/vmr2IDZFJHc1Xpyfa EgLG/m4tRTA6HakMBBHVkfo65oxomU03xBEPxCcQcmHuyAoGmbUHhPtklZ2QNHtT txohlRlahY+AIbVltcuMxHvUzmv7b5Tyop1hCO9OZ75TtuLPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh0iCvlhEMcrGZ3dWbnVhcCR/ZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ0MzVmNDktOWRjZC0z MjczLTkxNGEtODllNjZiOGExZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe39GqryyjqISDBP9AjkW2QTbPx6z3N1345sJFlxVEi4+bjU7HHtWFv txQGgKbBYN5agNf3oVAtCt/xgNu+EGCBpRlip3W3JfEUscjy2hUt5ktKDm4ry2TK B1EYU+xTVsE7rzP5I4K6tkidoHixSfoFnK9H17WsFAn4YlbNjV72mL2zzs07uGau Uf2y+tWiCS+48BHZPK96xkx5uDD9GN1f//54mgxvTZJdRQYczxTEwtPWPURDor+k pCR4d+MeWmw7U4q+UDAqQ9xmWkEEwXIFOxDH/XZheG0ttMGLCbZU+nBFCTrKLk9F 1ZCc1bQE3PYjSJObom5efMsXqjFNzeU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:30:49 2026 by rpki-client