$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa File: 543a399a-5087-3cd5-964f-19091aae8b0e.roa (raw, json) Hash identifier: 8TEtEBlpzVUNt8JCLnrD+eIfOrM/lTymUG2QnZ2fFKE= Subject key identifier: FC:E2:85:57:2E:42:F0:BA:AF:99:5C:E4:89:8B:56:6D:8A:25:50:D1 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584CD4078B5B8C6CB1A620787F10 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 54113 IP address blocks: 172.111.67.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:8b:5b:8c:6c:b1:a6:20:78:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=661c2a88-d964-445e-9bab-7f9462b03d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1d:35:c5:47:36:8d:f6:20:dc:5f:8f:a4:01: be:b5:f7:ec:7d:79:9c:10:bf:38:6c:61:5a:97:cc: 01:e9:c4:f5:d5:ea:da:9d:2e:d6:c4:68:dc:dc:f6: be:4d:48:43:b6:b0:47:a5:2c:1b:39:3d:64:bf:12: 1b:f5:f7:3e:f9:4f:ab:83:eb:ac:d1:47:17:53:3e: 16:a2:d6:fb:3f:6a:55:85:27:ed:b2:1d:f3:41:8f: 99:72:13:8b:25:75:94:2d:fa:5c:4e:20:8f:4f:b5: 9f:00:58:87:dd:d3:d3:2e:d1:d9:91:ee:83:69:b4: 54:72:d6:5a:bd:34:bd:31:c1:88:50:b7:d0:68:7b: 43:57:46:e8:f4:cc:ee:28:a7:70:42:1d:e3:a9:f9: 22:b2:de:a4:87:8f:4b:e9:68:c9:89:7e:1f:ea:19: 29:7e:33:2d:fe:de:ba:90:4b:3e:ed:a1:a0:a3:75: 23:5a:2d:a6:d2:e3:0c:91:67:8f:d0:1e:aa:3a:1b: b8:02:c5:3b:0a:2f:f2:18:a9:94:8c:39:3d:69:a1: 72:5e:7d:29:26:9f:9a:7b:d9:fa:97:b6:ba:73:46: 53:19:51:89:75:42:7b:a4:24:97:61:e4:9b:0b:64: 99:1e:1f:27:e2:a7:75:10:04:93:7b:3a:6d:17:b7: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E2:85:57:2E:42:F0:BA:AF:99:5C:E4:89:8B:56:6D:8A:25:50:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.67.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:69:63:ee:7d:03:7a:6a:85:60:2f:b8:a4:fb:43:bf:fb:36: 51:59:6c:34:9a:c4:e2:5c:87:fc:47:47:3c:4a:89:25:5e:bd: a3:49:5e:46:ac:0f:e1:11:d4:09:67:d5:8f:93:f3:b1:a8:6a: d0:40:10:88:7c:d7:de:61:1c:f5:75:a4:5d:9a:11:89:e9:32: 61:a4:6f:a8:e7:00:24:f5:2b:38:d1:1f:1c:95:95:26:5f:ae: c1:8d:c9:2f:41:83:dc:79:21:8b:f1:3c:a8:a9:50:c7:54:78: 5b:40:4d:80:b5:0a:1b:8c:38:f7:60:e5:02:f1:8b:85:76:b6: 09:cd:43:ab:d9:5a:44:42:fe:ba:1a:d2:fb:e1:01:6a:f6:d4: f8:f0:d1:6a:9d:67:f2:32:66:ae:97:7b:3d:ab:63:a0:08:4d: e6:7f:72:92:ce:ee:06:2c:a4:3d:e2:b0:78:e8:ef:fb:af:64: c5:0d:c9:21:87:41:02:b6:11:6c:cf:6d:f2:11:f9:b6:86:f5: 3a:e9:36:aa:2c:a1:82:90:7d:76:c1:f4:f5:bf:20:bb:10:27: df:a6:9d:f9:5a:13:69:2b:89:af:89:29:b7:ae:46:0f:bf:50: 72:10:16:45:60:dc:2a:bb:3b:f6:26:48:0a:3b:f0:08:5d:7e: 4f:a5:02:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB4tbjGyxpiB4fxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk NjYxYzJhODgtZDk2NC00NDVlLTliYWItN2Y5NDYyYjAzZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx01xUc2jfYg3F+PpAG+tffsfXmcEL84bGFa l8wB6cT11eranS7WxGjc3Pa+TUhDtrBHpSwbOT1kvxIb9fc++U+rg+us0UcXUz4W otb7P2pVhSftsh3zQY+ZchOLJXWULfpcTiCPT7WfAFiH3dPTLtHZke6DabRUctZa vTS9McGIULfQaHtDV0bo9MzuKKdwQh3jqfkist6kh49L6WjJiX4f6hkpfjMt/t66 kEs+7aGgo3UjWi2m0uMMkWeP0B6qOhu4AsU7Ci/yGKmUjDk9aaFyXn0pJp+ae9n6 l7a6c0ZTGVGJdUJ7pCSXYeSbC2SZHh8n4qd1EASTezptF7eipQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPzihVcuQvC6r5lc5ImLVm2KJVDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTQzYTM5OWEtNTA4Ny0z Y2Q1LTk2NGYtMTkwOTFhYWU4YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9DADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjaWPufQN6aoVgL7ik+0O/+zZRWWw0msTiXIf8R0c8SoklXr2jSV5G rA/hEdQJZ9WPk/OxqGrQQBCIfNfeYRz1daRdmhGJ6TJhpG+o5wAk9Ss40R8clZUm X67BjckvQYPceSGL8TyoqVDHVHhbQE2AtQobjDj3YOUC8YuFdrYJzUOr2VpEQv66 GtL74QFq9tT48NFqnWfyMmaul3s9q2OgCE3mf3KSzu4GLKQ94rB46O/7r2TFDckh h0ECthFsz23yEfm2hvU66TaqLKGCkH12wfT1vyC7ECffpp35WhNpK4mviSm3rkYP v1ByEBZFYNwquzv2JkgKO/AIXX5PpQI7 -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:04 2026 by rpki-client