$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa File: ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa (raw, json) Hash identifier: nFLdjpj1Gl/QvuXfM1pZAKkmXu651LWqZfD+2WrpEDo= Subject key identifier: 75:C0:97:C7:E2:C9:8A:2D:3B:DE:E5:DC:4D:CC:A6:E8:CF:AA:0D:66 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D624A659BD0ABCC451E1F6E20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 132372 IP address blocks: 172.111.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:65:9b:d0:ab:cc:45:1e:1f:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=523e61f7-ba3c-4570-b3d3-d3f2c841b33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:4d:d4:14:ae:44:66:8c:0b:df:25:b2:59: b8:a3:7c:aa:6f:e3:cc:8b:6c:de:4e:e8:d8:1a:9b: 20:0a:5f:25:33:e2:3c:a2:c6:d0:62:83:3d:2e:d1: bb:bd:0c:45:28:40:5b:1f:47:62:27:ca:51:90:26: 9b:99:c6:f3:f4:76:3a:73:e1:e9:5e:62:99:cd:f5: ef:cd:9c:d1:37:2b:9e:83:bf:33:34:a4:eb:a8:ef: 43:c1:3f:47:b1:a1:ff:56:91:f5:ed:58:0f:e1:d2: 76:eb:93:49:13:37:6d:bf:9e:20:3b:1f:b2:33:06: 6a:9b:62:08:10:cd:4b:3f:5c:bb:97:38:f5:6e:fc: 3a:25:e6:53:99:54:1a:a6:ce:f8:79:c6:e4:bf:7d: 8e:14:ab:39:fb:29:42:ca:09:42:67:91:30:d5:6e: 61:98:d6:45:c6:7f:f7:5f:61:e4:78:4e:94:73:ad: cb:c1:3e:db:81:4f:3c:82:8a:b7:d9:c4:96:93:cc: a6:79:07:3a:d1:f6:80:c8:ec:16:f0:b7:8f:0f:74: 8a:28:1d:8c:bb:1f:a9:eb:af:3b:4c:13:48:2f:9a: 80:34:ed:96:6e:1b:19:8d:c0:9b:c9:b6:59:2f:8d: 8a:57:8f:8c:2c:a7:53:a9:21:28:d4:b5:30:fe:04: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C0:97:C7:E2:C9:8A:2D:3B:DE:E5:DC:4D:CC:A6:E8:CF:AA:0D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a8:d2:d6:8b:63:3a:44:8d:91:a0:17:3e:93:4e:c9:a2:4c: ef:08:72:7a:1a:7f:53:02:44:e7:ac:5c:7f:50:90:c7:03:65: 87:4a:61:4f:82:ae:0f:6b:45:e7:29:f0:98:e3:86:64:ec:4f: 76:29:1d:73:24:e2:d9:c0:f4:be:6d:bd:fb:c6:d7:e1:cd:13: 6d:f2:76:be:98:d9:03:9b:51:c8:06:fd:ef:e7:f8:76:6b:4b: 4b:85:46:6d:3e:22:dc:a1:59:de:58:08:06:94:40:72:fb:f8: 92:6f:31:42:21:23:16:8b:e1:38:62:b6:3c:0e:26:15:58:e9: 95:23:02:61:91:df:95:d5:52:3f:d2:d2:36:98:3b:d1:13:f8: 32:b1:c4:ad:6a:42:9f:d4:be:5b:80:62:3e:c6:ef:89:4d:12: f4:81:26:23:78:77:92:a1:53:57:04:4d:a4:0e:2b:87:56:83: 4e:a3:2e:f9:14:1a:29:63:b0:e3:e6:69:4f:d9:a1:13:e7:ee: 39:1e:c5:3d:58:f3:bf:9a:80:01:97:11:08:71:18:f4:c4:70: 90:4d:56:a8:01:6a:36:cc:bf:6b:e6:4c:93:95:96:56:2d:a1: 5f:f5:5f:25:b2:9f:88:66:af:bf:b9:14:00:3a:3e:f1:70:d5: 6e:24:9b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSmWb0KvMRR4fbiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk NTIzZTYxZjctYmEzYy00NTcwLWIzZDMtZDNmMmM4NDFiMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjpN1BSuRGaMC98lslm4o3yqb+PMi2zeTujY GpsgCl8lM+I8osbQYoM9LtG7vQxFKEBbH0diJ8pRkCabmcbz9HY6c+HpXmKZzfXv zZzRNyueg78zNKTrqO9DwT9HsaH/VpH17VgP4dJ265NJEzdtv54gOx+yMwZqm2II EM1LP1y7lzj1bvw6JeZTmVQaps74ecbkv32OFKs5+ylCyglCZ5Ew1W5hmNZFxn/3 X2HkeE6Uc63LwT7bgU88goq32cSWk8ymeQc60faAyOwW8LePD3SKKB2Mux+p6687 TBNIL5qANO2WbhsZjcCbybZZL42KV4+MLKdTqSEo1LUw/gSKbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXAl8fiyYotO97l3E3MpujPqg1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmYxM2NlOWMtNGE5NS0z YWUxLWE3ZTctZDBhNTI2NTc1ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2o0taLYzpEjZGgFz6TTsmiTO8Icnoaf1MCROesXH9QkMcDZYdKYU+C rg9rRecp8JjjhmTsT3YpHXMk4tnA9L5tvfvG1+HNE23ydr6Y2QObUcgG/e/n+HZr S0uFRm0+ItyhWd5YCAaUQHL7+JJvMUIhIxaL4ThitjwOJhVY6ZUjAmGR35XVUj/S 0jaYO9ET+DKxxK1qQp/UvluAYj7G74lNEvSBJiN4d5KhU1cETaQOK4dWg06jLvkU GiljsOPmaU/ZoRPn7jkexT1Y87+agAGXEQhxGPTEcJBNVqgBajbMv2vmTJOVllYt oV/1XyWyn4hmr7+5FAA6PvFw1W4km08= -----END CERTIFICATE-----Generated at Fri Apr 17 14:06:03 2026 by rpki-client