$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa File: 2dd78db9-6d0c-3114-a64a-769cedc85549.roa (raw, json) Hash identifier: V/iVDaici8BlWhXjbYZQY2riu2u7ggVdS+WnumyTk5Q= Subject key identifier: F1:CD:BB:D3:E8:42:93:0C:99:7C:D1:73:1E:20:7F:40:94:3A:37:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7E7DBC7477917F6CE1288440 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 9009 IP address blocks: 172.111.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:bc:74:77:91:7f:6c:e1:28:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=f40fa0c7-cec8-4a67-a882-72e12e5efb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:a2:93:3a:e4:d9:63:92:f5:ab:7b:91:b9: 33:73:4e:66:ad:43:9b:5a:1d:ac:3e:a7:8e:13:01: d2:02:42:cb:c0:e2:52:d0:cd:a2:0f:fe:67:82:a5: 23:be:ca:aa:38:a9:7a:d8:f6:6b:f6:a9:3e:d3:6d: f8:c7:54:e9:56:c1:0c:54:7d:d0:0f:c4:65:5e:df: 52:24:ad:bd:88:3c:6f:25:2a:08:a1:f8:06:51:c3: 97:bd:ae:14:d5:91:a5:11:35:f0:e2:42:9b:2e:01: 3f:53:6f:d4:12:e8:0c:a9:97:b0:a4:a4:94:7d:45: ba:f0:15:82:d9:c5:15:3a:31:e8:23:cf:11:ad:72: c5:c1:cd:fb:98:5d:4a:66:b0:65:51:5e:47:66:f5: b3:64:00:0e:a2:98:f4:2f:9d:ec:21:b4:90:26:ef: 07:c5:12:11:b4:7d:8c:dd:0f:af:dc:54:78:0d:5c: c2:77:db:cf:98:5b:46:ec:00:e0:c0:c0:5b:76:35: 72:ca:84:db:80:e7:8c:3e:a8:d3:76:f7:c1:be:10: 66:cc:74:09:e0:27:95:25:16:09:ff:c3:0f:55:87: 28:5d:26:c9:88:e3:17:3f:3f:17:3e:8b:2b:05:5c: 0c:fb:d7:06:31:27:8e:37:60:fa:0c:57:dd:b8:53: d2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CD:BB:D3:E8:42:93:0C:99:7C:D1:73:1E:20:7F:40:94:3A:37:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8f:46:d9:95:a5:05:15:d0:eb:0d:db:5c:46:97:39:e7:87: 52:4b:8b:b5:41:4b:a3:dd:93:ab:d7:d9:7f:1a:ec:b6:ba:6c: d9:ae:64:88:a2:77:82:c7:63:6e:5c:bd:9b:3b:37:00:0b:bf: 78:ae:2e:ea:1c:ac:83:18:29:5c:05:d2:c3:4a:d4:6a:a4:9d: d5:a0:b8:4a:51:31:fb:19:0a:07:83:02:7e:ba:8b:2a:cb:bd: bb:86:ee:3d:15:dc:97:9c:ef:d3:72:61:3f:35:af:94:4c:67: e2:87:19:9f:4f:35:7e:11:50:d1:c2:a0:57:1f:33:c5:25:76: f5:a3:57:39:b4:83:59:cb:f1:e4:7f:75:b7:ea:d9:3c:3c:6d: 8e:f0:e3:0e:d2:c0:8d:43:e5:c9:7c:ca:1f:a5:9f:5f:1c:83: d5:78:ef:a0:10:d1:8d:ef:c4:a1:4d:1c:50:31:bc:a4:86:a7: 1c:cd:1d:04:bb:34:3a:3d:ff:3b:6d:a6:6d:e7:a1:eb:78:1e: 8d:36:17:c7:59:b9:92:f3:39:62:51:be:a1:49:42:27:4f:73: 44:5f:84:43:86:47:9a:d0:ab:56:09:d4:56:f2:76:05:02:5c: c9:d4:ba:04:1f:42:b2:8d:68:9b:cc:74:87:2a:b6:25:97:ee: ba:38:0d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbx0d5F/bOEohEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjQwZmEwYzctY2VjOC00YTY3LWE4ODItNzJlMTJlNWVmYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLqikzrk2WOS9at7kbkzc05mrUObWh2sPqeO EwHSAkLLwOJS0M2iD/5ngqUjvsqqOKl62PZr9qk+0234x1TpVsEMVH3QD8RlXt9S JK29iDxvJSoIofgGUcOXva4U1ZGlETXw4kKbLgE/U2/UEugMqZewpKSUfUW68BWC 2cUVOjHoI88RrXLFwc37mF1KZrBlUV5HZvWzZAAOopj0L53sIbSQJu8HxRIRtH2M 3Q+v3FR4DVzCd9vPmFtG7ADgwMBbdjVyyoTbgOeMPqjTdvfBvhBmzHQJ4CeVJRYJ /8MPVYcoXSbJiOMXPz8XPosrBVwM+9cGMSeON2D6DFfduFPSUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHNu9PoQpMMmXzRcx4gf0CUOjfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmRkNzhkYjktNmQwYy0z MTE0LWE2NGEtNzY5Y2VkYzg1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOPRtmVpQUV0OsN21xGlznnh1JLi7VBS6Pdk6vX2X8a7La6bNmuZIii d4LHY25cvZs7NwALv3iuLuocrIMYKVwF0sNK1GqkndWguEpRMfsZCgeDAn66iyrL vbuG7j0V3Jec79NyYT81r5RMZ+KHGZ9PNX4RUNHCoFcfM8UldvWjVzm0g1nL8eR/ dbfq2Tw8bY7w4w7SwI1D5cl8yh+ln18cg9V476AQ0Y3vxKFNHFAxvKSGpxzNHQS7 NDo9/zttpm3noet4Ho02F8dZuZLzOWJRvqFJQidPc0RfhEOGR5rQq1YJ1FbydgUC XMnUugQfQrKNaJvMdIcqtiWX7ro4De8= -----END CERTIFICATE-----Generated at Mon Oct 26 08:41:24 2026 by rpki-client