$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa File: 08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa (raw, json) Hash identifier: UvMFSLn99ND++f9Pn1DKks9rKo950AlCg3ICeOj5o2U= Subject key identifier: 8E:F1:26:68:36:8D:91:E5:11:66:4C:63:33:CC:3D:85:28:F9:3C:C4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4F081792FF3BDEAD2885D880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 172.111.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:17:92:ff:3b:de:ad:28:85:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=fb1bac44-0161-4ccb-a89e-4b7eddebb319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:5a:56:11:b8:a4:59:e1:35:86:8c:29:97: f7:c7:f0:73:30:ef:7a:d9:5a:4b:b6:78:94:7e:57: 1b:b8:de:79:51:2c:06:a1:86:e6:d7:a6:b9:11:04: c7:81:4f:3f:c0:e4:7a:99:8e:5f:cc:ad:2c:ea:06: a1:92:d3:c2:0f:aa:8b:a3:94:ab:ac:fa:d0:3e:9e: 01:69:1e:3e:47:35:1e:0c:f3:ab:6c:a6:be:bf:34: b7:0c:75:99:52:73:ab:c3:cf:d3:64:55:df:4c:b7: b3:54:47:64:aa:b0:2f:1b:63:9b:5c:84:0e:00:5d: fb:c0:22:8a:ca:6c:f3:12:d2:ac:5a:59:09:11:c2: dc:7b:f5:2e:95:f5:7b:0b:fb:20:c2:53:1c:4f:ae: c0:f6:ea:e3:cb:aa:0b:64:cc:cf:60:38:71:d8:4a: 60:e0:cf:a1:99:5d:f9:f8:f1:eb:e2:10:72:4d:a8: 29:e7:15:62:90:ec:3d:0c:02:51:d7:11:bf:ae:0f: 9f:7e:87:55:13:36:8a:91:37:77:8c:23:15:94:91: 71:d9:f4:11:9d:44:ed:f3:cf:5b:10:2f:1d:f5:db: de:43:a5:80:0f:62:4e:89:46:27:35:c5:86:8f:2b: a8:ab:ba:70:49:7d:83:ab:e6:85:19:be:fe:a6:87: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F1:26:68:36:8D:91:E5:11:66:4C:63:33:CC:3D:85:28:F9:3C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:65:e8:1f:3e:69:36:77:a8:12:57:f5:b6:3a:3e:ca:a8:bf: e0:03:d6:38:eb:a8:00:0f:9f:09:e3:dd:cf:3a:06:fb:c6:f0: 94:e4:6c:95:a9:42:20:cf:b4:48:ec:0d:b1:79:d0:45:2f:52: 14:3d:cd:d5:b2:1c:94:be:31:30:d8:fe:08:9d:56:ab:54:bf: 2b:5c:72:58:40:23:a7:ee:b0:43:21:52:f9:b6:84:5c:77:59: 4f:f0:3d:c5:a8:5e:92:b7:6d:b5:2a:e8:93:91:14:9f:5c:df: bc:ad:f3:7f:d4:6f:98:23:4e:4c:f8:57:8d:25:72:b8:21:17: 9c:b6:ec:77:26:cc:1a:e7:c6:35:ca:1d:7a:d2:f0:42:04:7c: c8:3c:20:09:ed:50:7f:4a:37:93:dc:36:19:21:4b:01:4c:60: 75:06:8e:43:6b:c1:a6:6c:d0:05:89:d4:70:0d:51:de:58:bd: cc:69:87:c9:e3:e4:68:c8:71:84:f4:3a:78:62:36:ad:5f:b8: 69:56:63:44:85:e9:c6:cf:83:ef:49:97:f2:cb:f8:d0:c2:c9: e9:29:3b:e0:dc:3f:2c:5f:f8:a1:11:88:68:0e:ea:ac:6b:a0: 44:e6:73:3e:59:ee:a0:4f:f6:f5:cc:66:47:f9:a5:b3:69:d6: c2:c0:e2:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBeS/zverSiF2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZmIxYmFjNDQtMDE2MS00Y2NiLWE4OWUtNGI3ZWRkZWJiMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbVaVhG4pFnhNYaMKZf3x/BzMO962VpLtniU flcbuN55USwGoYbm16a5EQTHgU8/wOR6mY5fzK0s6gahktPCD6qLo5SrrPrQPp4B aR4+RzUeDPOrbKa+vzS3DHWZUnOrw8/TZFXfTLezVEdkqrAvG2ObXIQOAF37wCKK ymzzEtKsWlkJEcLce/UulfV7C/sgwlMcT67A9urjy6oLZMzPYDhx2Epg4M+hmV35 +PHr4hByTagp5xVikOw9DAJR1xG/rg+ffodVEzaKkTd3jCMVlJFx2fQRnUTt889b EC8d9dveQ6WAD2JOiUYnNcWGjyuoq7pwSX2Dq+aFGb7+pofT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7xJmg2jZHlEWZMYzPMPYUo+TzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDhlMzI5NTItZmZiNy0z ZDlhLWI0ZmQtNzVlNThiOTk3NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxl6B8+aTZ3qBJX9bY6Psqov+AD1jjrqAAPnwnj3c86BvvG8JTkbJWp QiDPtEjsDbF50EUvUhQ9zdWyHJS+MTDY/gidVqtUvytcclhAI6fusEMhUvm2hFx3 WU/wPcWoXpK3bbUq6JORFJ9c37yt83/Ub5gjTkz4V40lcrghF5y27HcmzBrnxjXK HXrS8EIEfMg8IAntUH9KN5PcNhkhSwFMYHUGjkNrwaZs0AWJ1HANUd5Yvcxph8nj 5GjIcYT0OnhiNq1fuGlWY0SF6cbPg+9Jl/LL+NDCyekpO+DcPyxf+KERiGgO6qxr oETmcz5Z7qBP9vXMZkf5pbNp1sLA4ug= -----END CERTIFICATE-----Generated at Tue Oct 27 15:26:54 2026 by rpki-client