$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa File: a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa (raw, json) Hash identifier: WLGsnJzkPMHaK+qeXhyLmKRounY49wOw5jnSDv/6a24= Subject key identifier: 5D:29:FA:11:F4:59:97:F5:73:56:BF:E9:4F:FD:71:EA:2D:5E:A0:8C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D60E50FCED8D782E194C1BE40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 329007 IP address blocks: 172.111.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0f:ce:d8:d7:82:e1:94:c1:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=1f2778bb-bb74-43f7-9ad1-1350b7515df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:88:11:38:d9:ab:b5:95:8a:aa:1e:f0:d8: c8:13:b2:aa:a4:56:54:e5:51:01:d8:21:3f:04:56: 55:e9:75:c1:7a:84:4f:fd:7d:1f:8d:c8:5f:35:6e: 70:d4:11:7e:42:f5:4c:d6:c7:24:9e:b1:b3:9f:a3: 84:b2:5f:2e:42:c8:9c:0c:9c:58:e9:e0:87:f9:f2: 12:78:7d:40:41:bf:a1:ff:0e:fe:d9:11:03:0f:68: a1:ed:a3:ad:c1:dc:80:f5:a2:74:41:99:61:6e:65: d6:f7:b6:d0:8f:24:b6:a8:55:e7:b7:f3:8f:39:f5: be:ce:57:ca:f9:8e:4c:66:2a:94:07:cb:9e:a8:7c: e4:9f:1e:2f:89:4c:bb:00:9e:2c:f8:f5:38:08:44: 2e:72:32:af:ce:b5:5c:b3:c3:35:f4:5a:c7:c3:db: 48:76:e1:00:f1:41:83:1d:9c:93:17:4a:c6:83:62: 8c:27:8d:e2:fa:93:30:e0:d0:2a:1a:cb:6a:97:c4: 28:49:55:42:a1:23:a5:ef:e0:98:92:49:d3:8b:ca: 41:ea:c0:af:de:a2:f9:2a:2d:99:6f:0c:1b:6d:a5: bb:f2:66:06:60:63:cc:60:b2:2e:c6:ae:a8:7b:16: 00:09:49:41:7a:ea:c6:01:6a:14:77:7c:a9:94:5c: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:FA:11:F4:59:97:F5:73:56:BF:E9:4F:FD:71:EA:2D:5E:A0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:00:6f:ea:b0:f5:ab:77:4a:f3:4f:9a:d8:ce:3f:db:be:43: 6b:c3:fe:44:84:0d:f7:a8:58:0a:fe:48:61:66:73:03:6c:0c: 87:bb:d0:5e:68:51:34:52:48:97:fb:29:b0:ee:34:2a:c1:69: 5e:83:14:25:75:db:68:41:eb:c3:d7:5e:cd:e5:87:dd:0e:2f: cc:fd:03:1b:45:31:77:90:d8:bc:0b:05:7c:77:80:40:01:eb: 95:ae:7d:4b:1a:f0:de:d8:4c:f8:00:e5:45:d7:4e:3b:f2:c7: ea:ca:28:b0:bb:13:5c:c0:d3:c3:4e:b1:3a:e9:17:95:bc:59: b6:1b:76:08:cf:5e:81:24:b7:e4:31:88:44:dd:0b:dc:ce:ee: 6b:c7:d5:de:f5:67:27:86:56:9a:ff:b9:4f:96:6e:61:91:87: c1:be:55:bd:69:4d:01:12:07:3b:5f:3f:51:56:be:2a:dd:d5: be:8a:ab:8e:5b:17:e5:80:f6:f0:09:b4:75:12:e9:69:43:4c: 52:62:e8:1a:ed:fe:77:be:69:6f:65:90:61:ac:68:b6:37:5d: 69:45:d9:18:6f:f6:ea:b4:fa:e7:67:b8:b0:4c:57:70:e5:ac: c6:91:dc:73:7a:c7:10:af:3d:b6:6a:8f:71:8a:e3:4b:7c:de: 07:9e:c6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q/O2NeC4ZTBvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MWYyNzc4YmItYmI3NC00M2Y3LTlhZDEtMTM1MGI3NTE1ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHCIETjZq7WViqoe8NjIE7KqpFZU5VEB2CE/ BFZV6XXBeoRP/X0fjchfNW5w1BF+QvVM1scknrGzn6OEsl8uQsicDJxY6eCH+fIS eH1AQb+h/w7+2REDD2ih7aOtwdyA9aJ0QZlhbmXW97bQjyS2qFXnt/OPOfW+zlfK +Y5MZiqUB8ueqHzknx4viUy7AJ4s+PU4CEQucjKvzrVcs8M19FrHw9tIduEA8UGD HZyTF0rGg2KMJ43i+pMw4NAqGstql8QoSVVCoSOl7+CYkknTi8pB6sCv3qL5Ki2Z bwwbbaW78mYGYGPMYLIuxq6oexYACUlBeurGAWoUd3yplFwNcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0p+hH0WZf1c1a/6U/9ceotXqCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTVmYWRjMjUtMGRkOS0z NzNiLTkzYmItOGQ0MWMwZGE0N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcAb+qw9at3SvNPmtjOP9u+Q2vD/kSEDfeoWAr+SGFmcwNsDIe70F5o UTRSSJf7KbDuNCrBaV6DFCV122hB68PXXs3lh90OL8z9AxtFMXeQ2LwLBXx3gEAB 65WufUsa8N7YTPgA5UXXTjvyx+rKKLC7E1zA08NOsTrpF5W8WbYbdgjPXoEkt+Qx iETdC9zO7mvH1d71ZyeGVpr/uU+WbmGRh8G+Vb1pTQESBztfP1FWvird1b6Kq45b F+WA9vAJtHUS6WlDTFJi6Brt/ne+aW9lkGGsaLY3XWlF2Rhv9uq0+udnuLBMV3Dl rMaR3HN6xxCvPbZqj3GK40t83geexs4= -----END CERTIFICATE-----Generated at Fri Apr 17 09:59:19 2026 by rpki-client