$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01265c5d-44c4-367a-85cb-d4c26cd26da3.roa File: 01265c5d-44c4-367a-85cb-d4c26cd26da3.roa (raw, json) Hash identifier: fq6RK2KloOAVXYj7EG5Zy8V1txySksdMo6DEqZuvdyk= Subject key identifier: 74:C5:4B:D6:2A:5E:5E:D1:15:D6:69:31:86:87:07:EB:3B:92:35:7A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F82ADAE02DCF4452744D0E000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01265c5d-44c4-367a-85cb-d4c26cd26da3.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 9009 IP address blocks: 172.111.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:ae:02:dc:f4:45:27:44:d0:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=1385da46-18b7-47c3-83a0-d085877e397a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:55:f1:db:62:90:3d:43:2c:fb:11:60:a3: f9:a1:69:b3:3e:d6:17:9c:7f:1e:04:7b:5c:fc:81: 1f:20:bf:21:35:e3:d8:94:de:fc:47:4a:a5:a5:a1: 2c:72:d6:3f:a9:ec:ba:6e:81:0a:34:df:08:56:40: 10:67:f5:7a:7b:a8:21:c7:c9:78:9d:4f:04:06:d6: 59:71:92:bb:da:3d:28:7f:43:47:8a:d8:ef:89:ad: 34:bf:46:7f:70:39:fb:a2:25:fa:18:a1:bd:77:ec: dd:95:14:e6:a6:3e:bd:93:2a:63:11:e2:67:a4:48: b7:23:4b:31:72:19:f1:1e:42:a1:68:b9:de:c6:02: 5c:88:83:7a:d2:cc:de:91:16:de:25:fd:40:2b:2b: 9f:81:05:c7:97:7d:88:36:b7:70:06:4d:6f:35:62: c1:57:00:40:8e:2c:61:d9:2f:1c:1e:cc:a8:e0:53: 58:a7:1a:e3:a3:1f:85:27:50:15:a2:82:81:3c:86: eb:61:d7:de:45:96:6e:b6:ac:ce:b1:48:da:39:35: 02:5c:43:d2:76:b9:c7:7e:ca:1d:e7:a1:04:2c:15: de:a0:f9:4e:ca:61:e7:2d:dd:84:aa:c3:0f:6c:5c: b4:31:eb:94:6d:f0:75:1d:bd:72:66:8f:23:e2:14: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:4B:D6:2A:5E:5E:D1:15:D6:69:31:86:87:07:EB:3B:92:35:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01265c5d-44c4-367a-85cb-d4c26cd26da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a7:68:44:2c:52:78:7f:52:64:ae:d6:50:a4:cb:b5:6a:eb: 0c:d6:14:f3:b3:41:fd:9e:ea:b5:58:d9:0e:66:3f:3f:f6:e5: 55:c3:d6:97:9e:1d:e4:de:cb:8a:48:a1:4f:1c:83:dd:bc:70: 7f:07:4b:19:4e:6e:b0:00:ab:58:c9:6c:2c:6e:d7:4c:47:f3: 6b:0e:30:b0:d2:3d:3d:b3:45:79:e8:cb:36:58:5c:8e:72:f1: 29:04:33:bc:cf:8e:5a:0a:34:a4:a1:43:bf:a7:88:e8:a7:cc: d6:b4:3a:75:ec:2e:b7:aa:99:28:02:1d:85:7d:48:b1:98:b3: 2c:2c:4b:64:b3:cd:71:e0:0d:b9:c9:78:7b:e5:4f:54:6a:d2: 47:82:8d:1f:67:16:64:8d:7e:28:cc:4f:7b:ab:ff:a1:f2:22: 1c:df:6a:52:2c:82:47:12:12:c3:6a:1b:e6:69:91:8e:70:32: f4:37:52:75:2b:2a:69:30:ef:52:b3:f1:cb:f2:ba:13:75:30: 11:6b:18:22:e8:9c:3a:51:97:6c:50:b1:67:e1:6e:0c:b4:9b: 10:85:dd:ff:0f:7b:95:96:9d:31:30:29:14:9e:78:24:c1:10: da:7b:e2:97:b4:aa:0f:5e:88:84:b8:29:68:b3:d7:09:49:b0: 16:b6:95:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Cra4C3PRFJ0TQ4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk MTM4NWRhNDYtMThiNy00N2MzLTgzYTAtZDA4NTg3N2UzOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgVV8dtikD1DLPsRYKP5oWmzPtYXnH8eBHtc /IEfIL8hNePYlN78R0qlpaEsctY/qey6boEKNN8IVkAQZ/V6e6ghx8l4nU8EBtZZ cZK72j0of0NHitjvia00v0Z/cDn7oiX6GKG9d+zdlRTmpj69kypjEeJnpEi3I0sx chnxHkKhaLnexgJciIN60szekRbeJf1AKyufgQXHl32INrdwBk1vNWLBVwBAjixh 2S8cHsyo4FNYpxrjox+FJ1AVooKBPIbrYdfeRZZutqzOsUjaOTUCXEPSdrnHfsod 56EELBXeoPlOymHnLd2EqsMPbFy0MeuUbfB1Hb1yZo8j4hTcWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTFS9YqXl7RFdZpMYaHB+s7kjV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDEyNjVjNWQtNDRjNC0z NjdhLTg1Y2ItZDRjMjZjZDI2ZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADunaEQsUnh/UmSu1lCky7Vq6wzWFPOzQf2e6rVY2Q5mPz/25VXD1pee HeTey4pIoU8cg928cH8HSxlObrAAq1jJbCxu10xH82sOMLDSPT2zRXnoyzZYXI5y 8SkEM7zPjloKNKShQ7+niOinzNa0OnXsLreqmSgCHYV9SLGYsywsS2SzzXHgDbnJ eHvlT1Rq0keCjR9nFmSNfijMT3ur/6HyIhzfalIsgkcSEsNqG+ZpkY5wMvQ3UnUr Kmkw71Kz8cvyuhN1MBFrGCLonDpRl2xQsWfhbgy0mxCF3f8Pe5WWnTEwKRSeeCTB ENp74pe0qg9eiIS4KWiz1wlJsBa2ldA= -----END CERTIFICATE-----Generated at Tue Oct 27 12:01:55 2026 by rpki-client