$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa File: e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa (raw, json) Hash identifier: oB3hcpWUD8AoMJRSeTiaMZKpqi70fpf2fLHHHG2OD1o= Subject key identifier: 97:A2:EE:FD:B6:33:3B:76:BF:7C:5B:65:AC:87:5D:43:FF:3F:AF:4D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CB121CB8C6D7B4E8870095A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 212238 IP address blocks: 172.111.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cb:8c:6d:7b:4e:88:70:09:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=c12a033e-925b-4764-8aa9-2d6580551d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:9b:20:b1:79:c2:69:35:b3:86:82:31:35: 4d:ab:58:f5:77:4c:b3:1f:37:94:ac:26:ac:10:93: bd:ac:09:ad:92:b1:c7:9f:4f:83:cc:66:28:c6:0b: c9:07:07:8e:7e:4c:f2:09:db:66:36:cf:ba:47:fd: 90:84:14:e8:7d:54:7b:87:39:31:5d:2a:0e:be:33: 12:41:24:13:9c:bf:77:55:03:de:a0:1b:20:1e:69: 69:1e:96:df:b9:d9:52:6b:05:f8:74:c4:76:5d:99: ba:14:c6:4c:8c:2e:ed:1b:99:ac:ae:fd:91:c5:df: 68:4e:33:52:70:4a:ae:af:ed:55:35:1d:96:95:66: 08:95:dd:b6:25:26:1c:d8:dd:3c:c3:74:86:f5:17: 15:9c:0e:3c:56:aa:dd:05:2d:58:60:b3:58:71:d5: 89:cd:b6:e3:91:a4:97:8b:94:fa:fe:b9:7c:40:03: d0:37:25:9d:46:94:ef:99:0c:09:90:bb:16:37:fc: ec:fc:80:1d:2d:b0:66:74:74:b4:59:2e:71:a6:91: 7c:2e:88:e3:2e:4c:08:1c:93:54:d6:fe:93:d6:6b: ec:e9:08:d6:ca:f1:36:26:b2:11:1e:9a:85:09:0e: eb:b1:bd:38:5f:97:4e:a3:21:9b:0b:20:d8:99:bb: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:EE:FD:B6:33:3B:76:BF:7C:5B:65:AC:87:5D:43:FF:3F:AF:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3c:ba:50:fc:75:44:32:13:04:51:85:f2:5c:ed:b5:77:69: 6d:9c:8f:36:85:1f:39:bd:bb:01:da:4d:31:fd:4d:5f:14:c5: 93:38:d9:9b:44:40:5f:d3:cd:ee:b6:b8:10:33:c4:ea:de:de: 20:ec:a6:2e:2a:60:6f:e3:97:49:ea:12:93:11:e7:ea:a1:3e: 76:33:13:72:a1:3b:33:dd:5f:2d:fd:55:68:59:2c:21:c1:9f: 74:0f:4c:8c:1c:90:57:80:6d:61:c7:bc:85:29:0c:42:49:fd: 6c:cd:15:10:85:d8:3b:8a:4c:0d:93:a2:a8:4b:35:cb:1a:d4: 99:4d:b4:8d:8f:02:b3:f9:e4:70:11:d9:ec:e0:7e:a7:98:db: 33:2e:42:0a:aa:3b:e3:ff:b4:30:38:5f:b4:a3:dd:fe:45:f5: d2:be:a9:ea:eb:61:e2:92:ca:eb:62:12:0a:be:fb:5d:08:fa: 53:7a:2f:2f:0b:98:77:0d:f4:8d:a0:5c:21:f0:96:a1:56:43: fa:7a:75:3d:6a:90:26:59:3c:b1:af:73:f8:b9:95:8a:47:f4: ad:40:58:aa:e4:56:b9:97:ad:96:c5:63:d7:72:05:6a:5c:f2: 4b:77:09:25:be:d0:2f:83:26:bd:c5:ad:c4:71:17:4d:7d:77: db:e3:46:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcuMbXtOiHAJWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzEyYTAzM2UtOTI1Yi00NzY0LThhYTktMmQ2NTgwNTUxZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c6bILF5wmk1s4aCMTVNq1j1d0yzHzeUrCas EJO9rAmtkrHHn0+DzGYoxgvJBweOfkzyCdtmNs+6R/2QhBTofVR7hzkxXSoOvjMS QSQTnL93VQPeoBsgHmlpHpbfudlSawX4dMR2XZm6FMZMjC7tG5msrv2Rxd9oTjNS cEqur+1VNR2WlWYIld22JSYc2N08w3SG9RcVnA48VqrdBS1YYLNYcdWJzbbjkaSX i5T6/rl8QAPQNyWdRpTvmQwJkLsWN/zs/IAdLbBmdHS0WS5xppF8LojjLkwIHJNU 1v6T1mvs6QjWyvE2JrIRHpqFCQ7rsb04X5dOoyGbCyDYmbvYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJei7v22Mzt2v3xbZayHXUP/P69NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTg5NmIyYTUtMjljZC0z NDJmLWIxMmEtOGYxZmY3NmQwYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk8ulD8dUQyEwRRhfJc7bV3aW2cjzaFHzm9uwHaTTH9TV8UxZM42ZtE QF/Tze62uBAzxOre3iDspi4qYG/jl0nqEpMR5+qhPnYzE3KhOzPdXy39VWhZLCHB n3QPTIwckFeAbWHHvIUpDEJJ/WzNFRCF2DuKTA2ToqhLNcsa1JlNtI2PArP55HAR 2ezgfqeY2zMuQgqqO+P/tDA4X7Sj3f5F9dK+qerrYeKSyutiEgq++10I+lN6Ly8L mHcN9I2gXCHwlqFWQ/p6dT1qkCZZPLGvc/i5lYpH9K1AWKrkVrmXrZbFY9dyBWpc 8kt3CSW+0C+DJr3FrcRxF019d9vjRos= -----END CERTIFICATE-----Generated at Sun Mar 1 20:28:50 2026 by rpki-client