$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/13458d4f-ba05-3c22-9909-64da2bb9cbde.roa File: 13458d4f-ba05-3c22-9909-64da2bb9cbde.roa (raw, json) Hash identifier: DYy23SqOcAfN5qV73tCRqDw4jyOGYgpB98XGR0T5Zmw= Subject key identifier: 3A:00:FA:BA:4F:A5:3A:4A:40:45:96:C2:7A:64:51:AD:10:16:6A:F6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F86DDAC489CF0A722BC44F980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/13458d4f-ba05-3c22-9909-64da2bb9cbde.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.111.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:ac:48:9c:f0:a7:22:bc:44:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=d92afcba-1893-4967-bceb-930363d0fdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:5b:ea:99:9c:5e:e3:90:69:5b:f3:57:4a: e7:f6:d2:a7:a1:68:cb:dd:68:5f:01:6d:6d:48:7e: d1:bb:2b:9b:97:ee:a1:6c:cb:2a:8f:ce:74:42:ca: 69:ab:ca:88:e7:5d:87:40:28:b8:2d:e3:e3:b2:e8: 17:b2:7d:e9:b8:be:a6:9e:44:ee:34:0b:0c:52:05: 11:84:84:43:db:54:90:ff:a7:8b:40:3e:8f:2f:50: 7e:7c:7b:ec:63:d9:60:db:0d:54:f8:2d:47:be:a4: 7d:d2:11:57:d9:a0:b4:15:f9:69:8b:23:fb:bd:51: f1:84:ed:30:75:1e:92:35:14:1f:bc:a1:12:68:5c: ab:fa:0c:2a:2d:30:5c:b1:cc:6a:09:f8:6b:e9:19: 05:2d:5a:2b:90:a4:85:51:cd:47:0e:96:0b:e2:86: 8f:62:94:d2:37:64:0f:cf:9b:9a:5a:49:0f:c9:05: 38:f4:af:3e:4c:08:8d:09:91:f0:53:12:27:b5:e7: bb:db:ab:36:79:2c:ed:04:70:d6:e2:5f:eb:1a:d4: 2f:21:1c:5e:c6:c8:4b:55:02:87:4f:60:cb:fb:33: 01:0b:d0:d9:6f:0e:8e:6f:d7:f2:91:a4:96:66:75: 61:84:c5:c8:38:51:ef:49:3f:67:cf:8f:90:09:e5: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:00:FA:BA:4F:A5:3A:4A:40:45:96:C2:7A:64:51:AD:10:16:6A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/13458d4f-ba05-3c22-9909-64da2bb9cbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:68:96:ed:c3:09:7c:bc:0e:2c:22:bd:fb:09:e1:d2:71:18: a9:4a:9e:a3:8e:84:24:ef:19:f0:12:e1:d7:e9:e1:0c:35:bc: 11:b6:ab:fa:8f:06:c0:df:8d:71:4b:9d:73:47:78:0c:2d:a8: cc:e0:2d:b0:64:d7:28:ed:97:40:12:df:dc:8a:58:6f:4e:00: 2c:60:9f:70:5e:6c:76:e6:a4:8e:0a:6b:ab:6a:11:41:7d:e9: f3:45:cb:10:5a:c6:e1:85:8b:ec:18:9b:58:0a:a2:c4:86:e8: e5:2c:49:db:83:2d:64:86:99:b6:f8:f5:da:4b:c3:b6:5e:0f: 16:55:7b:11:56:9b:8b:f0:3e:9f:48:7b:df:90:27:7e:b0:c0: bc:32:e3:2e:af:5f:a8:58:eb:0e:84:84:bb:f8:df:19:82:e6: 6f:60:fa:71:c4:62:d6:4c:97:db:31:e3:17:0b:33:1f:e3:44: d3:17:bd:74:77:57:bc:fe:38:ac:e7:29:f8:f0:68:80:03:63: 85:1d:ea:b4:99:9b:1c:d8:1e:64:5f:67:01:a1:66:bb:49:1d: 3b:3b:42:aa:7a:15:ff:e8:90:e4:41:ae:dd:60:28:2a:1f:2b: 3e:66:b7:48:34:71:e9:3d:54:cf:f6:59:ef:76:41:82:bd:4f: 3c:83:73:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3axInPCnIrxE+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDkyYWZjYmEtMTg5My00OTY3LWJjZWItOTMwMzYzZDBmZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDNb6pmcXuOQaVvzV0rn9tKnoWjL3WhfAW1t SH7Ruyubl+6hbMsqj850Qsppq8qI512HQCi4LePjsugXsn3puL6mnkTuNAsMUgUR hIRD21SQ/6eLQD6PL1B+fHvsY9lg2w1U+C1HvqR90hFX2aC0FflpiyP7vVHxhO0w dR6SNRQfvKESaFyr+gwqLTBcscxqCfhr6RkFLVorkKSFUc1HDpYL4oaPYpTSN2QP z5uaWkkPyQU49K8+TAiNCZHwUxIntee726s2eSztBHDW4l/rGtQvIRxexshLVQKH T2DL+zMBC9DZbw6Ob9fykaSWZnVhhMXIOFHvST9nz4+QCeU1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoA+rpPpTpKQEWWwnpkUa0QFmr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTM0NThkNGYtYmEwNS0z YzIyLTk5MDktNjRkYTJiYjljYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1olu3DCXy8DiwivfsJ4dJxGKlKnqOOhCTvGfAS4dfp4Qw1vBG2q/qP BsDfjXFLnXNHeAwtqMzgLbBk1yjtl0AS39yKWG9OACxgn3BebHbmpI4Ka6tqEUF9 6fNFyxBaxuGFi+wYm1gKosSG6OUsSduDLWSGmbb49dpLw7ZeDxZVexFWm4vwPp9I e9+QJ36wwLwy4y6vX6hY6w6EhLv43xmC5m9g+nHEYtZMl9sx4xcLMx/jRNMXvXR3 V7z+OKznKfjwaIADY4Ud6rSZmxzYHmRfZwGhZrtJHTs7Qqp6Ff/okORBrt1gKCof Kz5mt0g0cek9VM/2We92QYK9TzyDcy8= -----END CERTIFICATE-----Generated at Mon Oct 26 08:44:24 2026 by rpki-client