$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa File: 0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa (raw, json) Hash identifier: mM02M74AR73OSzBK2riIC1pVHn/Eoe4Sv8icF932tHQ= Subject key identifier: 5D:48:1D:CF:A9:7A:B7:51:B3:A8:6E:C7:C6:39:6F:1B:7A:AA:A5:94 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F498936FC69DC437B4C7DBE40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.111.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:36:fc:69:dc:43:7b:4c:7d:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=88a0117f-8856-41df-8a55-5284383c38d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:a4:cc:b8:6e:bc:f9:80:57:b2:b2:53:55: 3f:94:af:21:73:bd:f6:05:e1:8e:76:7c:6f:d8:92: ed:5e:c8:5f:6e:98:4f:37:b0:5b:71:8a:07:51:70: 40:01:d3:e1:be:58:29:f1:35:b8:c7:f2:28:e0:47: 14:d5:60:b2:a1:8f:eb:e4:c3:32:8e:05:37:85:0d: 2d:f1:c5:c5:7b:f5:9f:a0:e2:65:aa:d6:14:ba:e8: e2:97:68:8f:b1:c4:0d:1a:6d:b2:d2:b7:df:b6:ab: da:6d:25:36:27:99:83:51:4b:87:ba:45:46:3c:20: dc:b0:3a:9b:2c:fe:af:d7:89:bf:2d:76:77:07:d8: 56:dd:a8:8d:76:18:ed:68:d2:7e:4b:e2:72:ae:c0: 3f:fb:b6:92:cd:85:e0:92:4c:48:75:13:1d:d0:d4: a8:d0:36:51:61:3f:4b:55:27:f0:db:ab:98:1a:1d: 0b:a8:d6:43:32:c1:d7:8a:e0:99:4b:9a:42:60:0c: 02:85:36:86:e0:b9:51:db:7c:22:10:d9:91:c7:74: ab:d7:35:78:e2:c1:20:3e:a3:01:72:6d:5f:ae:97: 6a:b5:d4:71:a1:a2:00:e6:96:fd:e0:d3:78:c2:ee: b1:fa:2c:bd:0f:6e:6c:ab:6a:14:e0:ad:24:c2:7d: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:48:1D:CF:A9:7A:B7:51:B3:A8:6E:C7:C6:39:6F:1B:7A:AA:A5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:64:84:8f:5f:91:87:f5:61:d9:66:3d:69:25:02:96:fd:a3: 90:63:47:78:4f:44:c9:97:50:ec:8f:1f:0b:8f:d4:3e:64:b8: 9a:f6:56:81:ad:a5:36:e0:b3:0c:aa:b0:0a:b8:b6:c4:ee:cc: e1:92:03:75:c3:c3:fb:2b:9b:9e:a9:1d:7f:2d:7b:0e:4b:d8: 59:f7:b8:9f:1b:17:fc:f7:87:c4:81:29:6d:9d:73:5c:9f:17: 15:55:82:b0:25:ff:ad:da:4e:6e:3f:9e:91:11:15:71:04:4b: 08:6a:dd:74:ae:c8:ee:b4:20:59:31:14:48:54:4d:e6:83:57: b4:c9:cf:8f:b1:b5:c9:61:ec:79:23:d8:a6:d3:1a:e1:0d:59: 87:f2:b1:fb:9e:16:c4:35:59:05:32:1f:59:fd:32:54:6e:99: 96:5f:51:46:6a:b9:7e:fa:2b:aa:ed:a2:8a:5c:78:cf:a2:81: 7e:22:93:8d:a1:eb:6e:36:c6:bd:54:4a:60:8d:35:4c:82:89: 43:e6:07:9d:64:80:81:45:27:ea:31:af:8e:7d:ec:79:1b:a3: f0:1c:61:4f:78:9f:72:5f:c1:21:99:4a:92:1d:23:8b:27:bd: f0:6d:7e:ae:00:67:0f:7c:05:f5:7b:d2:83:0e:69:5f:ff:ca: 12:9a:40:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiTb8adxDe0x9vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODhhMDExN2YtODg1Ni00MWRmLThhNTUtNTI4NDM4M2MzOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW2kzLhuvPmAV7KyU1U/lK8hc732BeGOdnxv 2JLtXshfbphPN7BbcYoHUXBAAdPhvlgp8TW4x/Io4EcU1WCyoY/r5MMyjgU3hQ0t 8cXFe/WfoOJlqtYUuujil2iPscQNGm2y0rfftqvabSU2J5mDUUuHukVGPCDcsDqb LP6v14m/LXZ3B9hW3aiNdhjtaNJ+S+JyrsA/+7aSzYXgkkxIdRMd0NSo0DZRYT9L VSfw26uYGh0LqNZDMsHXiuCZS5pCYAwChTaG4LlR23wiENmRx3Sr1zV44sEgPqMB cm1frpdqtdRxoaIA5pb94NN4wu6x+iy9D25sq2oU4K0kwn2DKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1IHc+perdRs6hux8Y5bxt6qqWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGQ0MGEzNzktZTBmZC0z NmY0LWIwYzAtODdmNGJiZjMyZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhkhI9fkYf1YdlmPWklApb9o5BjR3hPRMmXUOyPHwuP1D5kuJr2VoGt pTbgswyqsAq4tsTuzOGSA3XDw/srm56pHX8tew5L2Fn3uJ8bF/z3h8SBKW2dc1yf FxVVgrAl/63aTm4/npERFXEESwhq3XSuyO60IFkxFEhUTeaDV7TJz4+xtclh7Hkj 2KbTGuENWYfysfueFsQ1WQUyH1n9MlRumZZfUUZquX76K6rtoopceM+igX4ik42h 6242xr1USmCNNUyCiUPmB51kgIFFJ+oxr4597Hkbo/AcYU94n3JfwSGZSpIdI4sn vfBtfq4AZw98BfV70oMOaV//yhKaQNk= -----END CERTIFICATE-----Generated at Tue Oct 20 19:13:27 2026 by rpki-client