$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json) Hash identifier: zZC7qkTm8xUAiRcNmnBgI6suwl4zHiwK81eQLECGiN8= Subject key identifier: 46:2B:5F:A7:79:22:59:CD:E6:43:2B:55:C0:83:66:96:A2:89:20:2E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB121CC1C12CB324B044F52C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 212238 IP address blocks: 172.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cc:1c:12:cb:32:4b:04:4f:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=69e7169f-4574-46d1-b763-7d9b44ac7259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:86:a9:f9:8a:a8:c8:4c:a8:d3:be:d6:1a: c0:63:37:ff:b5:41:41:9e:45:3a:20:04:61:cc:a2: c0:c6:f1:6e:f9:1a:3c:9a:89:f2:28:3e:5e:3f:4d: 88:cc:90:f1:06:ff:05:01:74:e3:07:52:f4:7f:24: 6c:f1:b3:19:c2:00:8a:c5:54:9e:03:71:5d:3d:ab: b5:dd:29:87:ac:6a:4c:73:cb:9b:cc:e6:3a:4a:a5: 47:8c:29:18:54:11:f7:2f:61:50:03:bc:61:a5:ac: c8:98:a8:99:3f:a3:f1:33:6e:cf:0a:d3:4f:11:09: 7e:75:cb:93:12:0c:a4:f2:6a:39:bc:6e:55:6f:1b: 5b:9b:2c:51:8a:c3:64:fc:be:46:f0:6d:7b:66:e2: d3:af:31:46:96:a6:f0:33:e6:55:6d:c6:7d:87:09: d6:aa:27:2e:94:81:94:f0:31:47:71:74:91:60:d0: 2f:f9:93:e5:79:9a:df:2f:69:74:7e:61:eb:a7:78: 25:56:b5:d2:aa:f5:c1:77:e7:83:55:bf:22:ef:42: 73:f9:d9:e8:31:c6:49:00:46:77:a1:b8:75:6b:f4: bf:df:07:b2:95:23:96:23:95:c6:7b:6c:7d:09:0a: f5:fe:87:4d:8d:3c:c2:54:0c:fa:2a:fb:99:22:f5: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2B:5F:A7:79:22:59:CD:E6:43:2B:55:C0:83:66:96:A2:89:20:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:eb:37:d2:78:36:46:0a:2f:3b:80:64:36:72:34:47:39:51: 88:27:27:94:f5:ef:c7:0d:2f:fa:ab:df:7d:e8:c6:3f:65:77: 52:91:fd:07:c1:51:f4:59:2f:29:1b:7d:36:0e:a2:f1:e9:56: c6:fb:53:f7:cb:a8:c6:0e:80:eb:39:78:cb:f7:46:e4:cb:61: 64:dd:38:37:4a:37:cb:40:ea:4c:cb:82:31:82:26:7c:89:32: 8f:04:4a:d4:82:fa:cc:a9:00:c3:57:fc:07:09:99:60:41:8d: 70:5a:2a:5e:59:2a:7d:aa:31:63:39:a5:a0:7d:eb:86:4f:96: 05:2f:bd:5e:77:e0:1e:4c:df:5d:6a:87:51:d3:5e:3e:78:b9: 4d:d7:28:8d:66:15:82:57:b6:38:c7:47:5d:9f:be:f9:db:14: 46:55:3c:c4:1f:a5:63:14:c7:6e:4f:13:f0:19:5a:96:08:a1: 5b:0e:2a:0b:ac:3c:c0:75:b6:7e:b5:c5:4b:75:0b:8a:c1:11: 33:e3:d0:da:5f:68:fa:f2:ac:03:ae:33:08:ad:e5:87:dd:08: 93:06:45:3d:45:28:25:32:8d:35:c6:f2:c8:9d:35:6c:3c:5e: 27:53:80:fe:e3:9e:32:d8:2c:97:ae:76:f2:54:5d:ad:e3:b0: 6a:e9:6a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcwcEssySwRPUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjllNzE2OWYtNDU3NC00NmQxLWI3NjMtN2Q5YjQ0YWM3MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjWGqfmKqMhMqNO+1hrAYzf/tUFBnkU6IARh zKLAxvFu+Ro8monyKD5eP02IzJDxBv8FAXTjB1L0fyRs8bMZwgCKxVSeA3FdPau1 3SmHrGpMc8ubzOY6SqVHjCkYVBH3L2FQA7xhpazImKiZP6PxM27PCtNPEQl+dcuT Egyk8mo5vG5VbxtbmyxRisNk/L5G8G17ZuLTrzFGlqbwM+ZVbcZ9hwnWqiculIGU 8DFHcXSRYNAv+ZPleZrfL2l0fmHrp3glVrXSqvXBd+eDVb8i70Jz+dnoMcZJAEZ3 obh1a/S/3weylSOWI5XGe2x9CQr1/odNjTzCVAz6KvuZIvURrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYrX6d5IlnN5kMrVcCDZpaiiSAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzlhMzQ2YjEtZTYwZC0z MjIzLTkxZDQtZTE0YjEzMjZhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzrN9J4NkYKLzuAZDZyNEc5UYgnJ5T178cNL/qr333oxj9ld1KR/QfB UfRZLykbfTYOovHpVsb7U/fLqMYOgOs5eMv3RuTLYWTdODdKN8tA6kzLgjGCJnyJ Mo8EStSC+sypAMNX/AcJmWBBjXBaKl5ZKn2qMWM5paB964ZPlgUvvV534B5M311q h1HTXj54uU3XKI1mFYJXtjjHR12fvvnbFEZVPMQfpWMUx25PE/AZWpYIoVsOKgus PMB1tn61xUt1C4rBETPj0NpfaPryrAOuMwit5YfdCJMGRT1FKCUyjTXG8sidNWw8 XidTgP7jnjLYLJeudvJUXa3jsGrpanQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:54 2026 by rpki-client