$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: jyGNF/rjze69jmQilfbFTeLBgISJR9QLHeCuITHB6EA= Subject key identifier: 64:2F:94:05:84:FB:9A:44:6D:1A:60:E7:E4:30:57:8F:09:62:9C:05 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB121CB633469C431908DC280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cb:63:34:69:c4:31:90:8d:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=f8977685-c5c0-4d14-a117-16673d0949a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:38:27:9c:1d:6b:19:68:bb:b8:12:9b:ea: 7d:10:a1:41:be:de:0e:f2:b0:22:68:46:de:34:4b: 25:99:bd:77:25:ae:e9:36:c0:20:9e:b5:fd:d9:53: 8e:65:ba:f1:ba:6d:d4:35:1f:f9:c3:81:93:2c:94: c7:bb:0f:ce:6c:24:4d:6c:7b:d0:97:b0:ba:11:8e: 82:dd:9b:c9:9b:c1:12:82:c4:de:c9:93:e5:0c:48: 5a:7f:54:0e:0e:e0:4d:88:1d:93:98:eb:f7:3d:4e: bc:cb:06:db:e7:91:e4:a3:54:d8:1c:97:c5:9a:09: bf:8c:9f:8f:86:c9:d2:a6:ef:ba:67:3e:68:34:cf: 70:5d:7e:88:62:25:01:e5:0b:33:e9:23:bf:8d:6c: 2f:2f:8a:70:db:74:49:20:5b:3c:48:68:8a:5a:0e: f7:69:54:47:56:b5:3b:46:07:de:92:f6:8b:f7:88: a8:f3:e3:c6:76:99:14:07:4f:ac:55:3f:66:5d:27: 0b:a0:c4:7e:47:1b:0e:7d:e2:85:c3:3d:0d:1d:85: 6c:23:f4:49:83:4c:fa:2d:53:e1:9a:6b:ee:b4:a3: 9d:42:82:ec:2d:1d:6f:1f:5b:67:7c:a7:2a:6e:fa: 23:5a:3d:87:49:79:7b:3f:88:70:64:a4:9d:8f:a1: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2F:94:05:84:FB:9A:44:6D:1A:60:E7:E4:30:57:8F:09:62:9C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7c:34:d4:99:bf:94:58:1e:8b:88:8a:fe:c7:61:f4:88:a3: 90:a6:c0:a4:f0:87:cf:1c:21:ee:88:36:0f:2c:08:d9:06:ba: 0a:d3:7b:b0:43:08:4a:42:fa:87:ec:73:2a:e2:53:fb:00:39: 47:02:e1:44:dc:08:aa:df:44:49:7f:48:98:a4:44:4a:4d:de: e0:9d:16:0e:4d:db:4b:2c:48:e7:77:5b:da:00:d3:50:be:45: e4:87:7c:d3:0c:23:86:94:a2:77:c4:8f:9f:b0:35:ec:b4:fa: bf:dc:69:b4:56:69:80:11:d2:e0:23:4d:b8:cc:54:99:3b:e0: 9c:f9:15:14:e9:4a:3b:8d:9c:8c:a4:1d:07:a1:35:a6:b3:16: a5:55:e5:15:b3:1e:90:02:05:fe:23:40:28:3d:d9:37:1f:b6: 5f:01:59:cb:fa:4c:75:91:39:ee:1f:38:b4:b5:b4:16:7b:d0: e5:34:f6:17:0b:54:4a:30:8c:4e:d8:37:f4:ef:b0:fb:d0:46: cc:21:fa:f0:88:59:a1:0b:db:f5:9f:3e:94:00:c5:39:62:bb: d3:8d:4d:3a:07:88:f2:79:b8:b9:5f:15:50:10:d0:c8:74:f9: f2:e3:eb:1a:57:f1:3d:4b:e5:bd:44:23:1e:6d:f9:17:4d:67: 04:23:cf:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIctjNGnEMZCNwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk Zjg5Nzc2ODUtYzVjMC00ZDE0LWExMTctMTY2NzNkMDk0OWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPU4J5wdaxlou7gSm+p9EKFBvt4O8rAiaEbe NEslmb13Ja7pNsAgnrX92VOOZbrxum3UNR/5w4GTLJTHuw/ObCRNbHvQl7C6EY6C 3ZvJm8ESgsTeyZPlDEhaf1QODuBNiB2TmOv3PU68ywbb55Hko1TYHJfFmgm/jJ+P hsnSpu+6Zz5oNM9wXX6IYiUB5Qsz6SO/jWwvL4pw23RJIFs8SGiKWg73aVRHVrU7 RgfekvaL94io8+PGdpkUB0+sVT9mXScLoMR+RxsOfeKFwz0NHYVsI/RJg0z6LVPh mmvutKOdQoLsLR1vH1tnfKcqbvojWj2HSXl7P4hwZKSdj6FFvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQvlAWE+5pEbRpg5+QwV48JYpwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV8NNSZv5RYHouIiv7HYfSIo5CmwKTwh88cIe6INg8sCNkGugrTe7BD CEpC+ofscyriU/sAOUcC4UTcCKrfREl/SJikREpN3uCdFg5N20ssSOd3W9oA01C+ ReSHfNMMI4aUonfEj5+wNey0+r/cabRWaYAR0uAjTbjMVJk74Jz5FRTpSjuNnIyk HQehNaazFqVV5RWzHpACBf4jQCg92Tcftl8BWcv6THWROe4fOLS1tBZ70OU09hcL VEowjE7YN/TvsPvQRswh+vCIWaEL2/WfPpQAxTliu9ONTToHiPJ5uLlfFVAQ0Mh0 +fLj6xpX8T1L5b1EIx5t+RdNZwQjzxY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:44 2026 by rpki-client