$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8691cdac-e5eb-3a35-b4da-d20381435fea.roa File: 8691cdac-e5eb-3a35-b4da-d20381435fea.roa (raw, json) Hash identifier: Q8ilxANsIWWqeT2DcvilPSGPhkl68qoE3ytNAKhU5i8= Subject key identifier: 67:47:C5:D1:BD:41:F0:EE:44:F5:09:D3:2B:BD:86:61:3A:23:5A:D9 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584CAFBC7CB6F37C462378E21F80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8691cdac-e5eb-3a35-b4da-d20381435fea.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 54113 IP address blocks: 172.111.84.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7c:b6:f3:7c:46:23:78:e2:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=44c971ae-3cf0-4cdd-91d1-7d3ef5a73226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:4f:98:6b:88:fe:12:be:5d:1e:d2:bf:0f: 1b:69:c7:53:26:e5:d5:d3:e2:80:21:68:6e:e4:b2: 9e:00:dd:4e:90:e9:a9:ff:6e:f5:b4:7b:8c:70:bb: 7d:e1:dd:e7:f3:f0:ac:65:eb:16:f6:41:9f:36:a8: 1d:e7:25:09:26:7d:9c:8f:87:ff:28:58:14:81:36: ff:47:58:46:60:e1:01:1c:b1:7b:92:e0:fc:6a:ef: 3d:d5:8b:fc:cd:2d:85:70:c8:70:60:d6:be:ce:33: bf:86:24:41:96:c8:ca:78:a0:76:8d:c0:d7:f2:4c: 26:00:fb:ee:cf:30:ad:fb:39:75:58:bb:f8:e2:bb: 89:76:f7:27:6b:60:9d:f5:d4:0e:2d:a0:1e:cd:1a: a3:c1:01:c6:62:27:c6:f2:a7:f2:7e:69:be:8b:8e: 6e:9a:31:4c:8b:b8:b3:79:be:49:34:4f:fb:20:e5: 03:7e:53:f4:65:32:88:a6:7e:7d:a8:68:07:b7:90: 22:94:38:0c:fa:db:ab:96:cc:6e:5d:f2:56:4e:a0: 63:c1:f1:76:5b:30:d7:01:f9:20:32:58:cc:4a:20: 42:df:b1:76:e9:0f:41:61:72:48:af:92:79:8f:0a: ec:32:41:e9:55:52:8d:8d:32:96:20:d2:c2:51:f4: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:C5:D1:BD:41:F0:EE:44:F5:09:D3:2B:BD:86:61:3A:23:5A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8691cdac-e5eb-3a35-b4da-d20381435fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.84.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ba:d0:a3:cc:ec:ab:7c:e4:fd:16:44:5f:ae:45:57:51:59: 8a:5e:9f:be:0e:59:8f:ec:22:81:d7:b0:f7:e5:51:e3:44:f7: 65:64:65:1c:67:04:9f:2e:40:ba:94:80:d7:69:4c:ec:2d:a8: da:84:20:24:2c:68:14:fa:6d:16:2d:33:47:f3:c0:31:0a:72: 8a:15:fe:3e:ac:e7:29:a7:3f:95:30:db:b6:69:e7:36:9a:76: d4:d8:b4:10:b2:b4:c1:f4:f5:49:82:6d:95:3b:49:4a:9a:b5: 2c:8d:df:64:de:5d:46:5b:4a:ae:fb:d8:01:a8:d7:db:92:db: 4e:bb:11:d0:e0:dc:f0:d6:b7:cb:7b:45:04:5c:9b:57:d9:45: 5d:60:c3:31:ad:0c:92:74:f7:56:f2:00:42:0e:ca:33:28:f6: f0:9d:23:88:49:bd:4c:dc:ef:64:68:af:be:be:fb:6e:62:a6: ef:0f:a6:30:ad:9e:1d:9b:8f:d7:8e:cb:ca:3b:a5:eb:24:e8: 37:e4:96:3e:2d:20:97:05:58:8c:2c:7f:54:64:f4:88:0c:6e: 7d:d7:da:ba:8f:9f:9e:c3:7b:31:17:cb:a7:9f:f4:0d:62:81: ef:d5:7c:3f:3d:d4:53:e6:98:23:07:b9:af:35:08:72:fe:7b: 94:97:a8:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyvvHy283xGI3jiH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDRjOTcxYWUtM2NmMC00Y2RkLTkxZDEtN2QzZWY1YTczMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQdPmGuI/hK+XR7Svw8bacdTJuXV0+KAIWhu 5LKeAN1OkOmp/271tHuMcLt94d3n8/CsZesW9kGfNqgd5yUJJn2cj4f/KFgUgTb/ R1hGYOEBHLF7kuD8au891Yv8zS2FcMhwYNa+zjO/hiRBlsjKeKB2jcDX8kwmAPvu zzCt+zl1WLv44ruJdvcna2Cd9dQOLaAezRqjwQHGYifG8qfyfmm+i45umjFMi7iz eb5JNE/7IOUDflP0ZTKIpn59qGgHt5AilDgM+turlsxuXfJWTqBjwfF2WzDXAfkg MljMSiBC37F26Q9BYXJIr5J5jwrsMkHpVVKNjTKWINLCUfTbfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGdHxdG9QfDuRPUJ0yu9hmE6I1rZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvODY5MWNkYWMtZTVlYi0z YTM1LWI0ZGEtZDIwMzgxNDM1ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9UgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjutCjzOyrfOT9FkRfrkVXUVmKXp++DlmP7CKB17D35VHjRPdlZGUc ZwSfLkC6lIDXaUzsLajahCAkLGgU+m0WLTNH88AxCnKKFf4+rOcppz+VMNu2aec2 mnbU2LQQsrTB9PVJgm2VO0lKmrUsjd9k3l1GW0qu+9gBqNfbkttOuxHQ4Nzw1rfL e0UEXJtX2UVdYMMxrQySdPdW8gBCDsozKPbwnSOISb1M3O9kaK++vvtuYqbvD6Yw rZ4dm4/XjsvKO6XrJOg35JY+LSCXBViMLH9UZPSIDG5919q6j5+ew3sxF8unn/QN YoHv1Xw/PdRT5pgjB7mvNQhy/nuUl6jO -----END CERTIFICATE-----Generated at Mon Mar 2 07:12:23 2026 by rpki-client