$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/433c24b6-7739-3f50-af12-25249e9fc52d.roa File: 433c24b6-7739-3f50-af12-25249e9fc52d.roa (raw, json) Hash identifier: edQvAGgz6wtWZ8J+FlL1yqjDPMmDXAosT/9Q/GgeZcg= Subject key identifier: 89:F8:45:04:BD:F8:56:36:4C:FB:F1:33:96:BE:15:35:FE:7D:C8:EF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352DAB080DA7A27D5421680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/433c24b6-7739-3f50-af12-25249e9fc52d.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.111.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:da:b0:80:da:7a:27:d5:42:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=d9a16ed3-6b07-497f-8b78-cee92f259dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:7b:54:b7:43:ca:8b:02:be:ea:c1:a6:74: d7:1e:b3:2c:9b:54:e9:54:a8:d6:d3:64:d3:19:6e: c8:0d:d2:6e:33:65:71:e5:a5:af:19:a8:46:f2:cf: 64:b9:6f:59:b6:6b:e5:ce:29:ad:d8:60:ca:ab:7b: 79:96:68:3b:18:9b:51:cf:ed:52:05:c7:3b:1c:32: 17:fa:f3:b2:23:0d:3a:40:3a:b7:57:f5:5a:73:63: 82:c9:91:d9:85:87:d8:1d:fa:cc:2d:c4:d8:6a:ca: ad:85:29:fb:65:b3:20:94:ae:27:2b:4f:94:e6:16: d1:e3:01:55:63:1f:7b:f5:ce:94:73:36:dc:55:0b: 18:7b:f4:e1:b0:dd:a5:bc:82:b2:78:88:83:f2:ae: 34:0d:18:15:3c:cb:94:94:35:2a:4d:79:fd:56:b3: f6:03:b5:5f:8b:dd:c9:61:9f:c0:bd:4a:99:90:b9: 18:44:82:16:95:90:8c:c5:cf:45:85:fe:e2:76:ca: 2f:73:03:a3:83:84:f1:90:c2:e4:c0:b6:41:54:d6: b1:c1:f9:f1:85:55:b1:cf:63:eb:f7:2c:b7:e3:a4: 55:80:1c:e0:ee:cc:c1:ae:9a:66:a1:b9:9f:d8:52: 00:37:77:bf:44:1a:8d:91:5e:72:7e:a9:7a:f0:da: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F8:45:04:BD:F8:56:36:4C:FB:F1:33:96:BE:15:35:FE:7D:C8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/433c24b6-7739-3f50-af12-25249e9fc52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:66:b3:a5:ed:61:ac:bf:0e:f9:07:51:71:bc:00:62:0c:2c: 18:f1:53:95:38:8d:1e:69:99:71:7c:27:01:c1:9f:18:37:3d: fb:1c:2e:a9:8f:9f:f0:49:02:41:26:aa:9d:a5:59:43:6a:85: 59:76:91:5c:2c:f6:d0:d4:36:a4:08:35:af:be:2d:0a:b4:53: 95:3c:d6:ab:5b:af:d1:a7:fd:5b:79:fe:9f:53:cd:11:8b:b6: 3c:3f:ef:25:fc:69:32:6b:54:69:d0:5e:8d:12:ab:38:81:15: 8f:35:df:18:a7:62:66:64:f7:00:71:c4:b1:de:03:44:ce:8b: 4b:b9:2f:1b:15:31:37:36:c7:01:47:f3:95:a0:b9:be:9d:a6: 0d:09:a6:29:51:2d:8b:85:98:a1:7c:15:9b:f6:8e:18:45:3c: a6:ac:99:9a:f5:64:26:11:88:02:ef:16:50:3a:26:5d:9c:81: 5b:75:5c:40:1f:90:c1:f5:e5:77:4e:d9:ad:2c:78:6a:8a:47: 0d:41:b9:d5:73:af:d0:7b:06:66:e2:35:1d:2c:0c:a5:53:3e: f0:5a:94:97:84:93:d2:23:a3:87:b3:30:e6:95:ea:93:94:1b: 82:55:3b:ea:b7:e6:fc:da:52:66:03:6f:7e:7d:fa:a3:2a:04: 70:95:fd:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtqwgNp6J9VCFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZDlhMTZlZDMtNmIwNy00OTdmLThiNzgtY2VlOTJmMjU5ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPd7VLdDyosCvurBpnTXHrMsm1TpVKjW02TT GW7IDdJuM2Vx5aWvGahG8s9kuW9Ztmvlzimt2GDKq3t5lmg7GJtRz+1SBcc7HDIX +vOyIw06QDq3V/Vac2OCyZHZhYfYHfrMLcTYasqthSn7ZbMglK4nK0+U5hbR4wFV Yx979c6UczbcVQsYe/ThsN2lvIKyeIiD8q40DRgVPMuUlDUqTXn9VrP2A7Vfi93J YZ/AvUqZkLkYRIIWlZCMxc9Fhf7idsovcwOjg4TxkMLkwLZBVNaxwfnxhVWxz2Pr 9yy346RVgBzg7szBrppmobmf2FIAN3e/RBqNkV5yfql68Np0jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn4RQS9+FY2TPvxM5a+FTX+fcjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDMzYzI0YjYtNzczOS0z ZjUwLWFmMTItMjUyNDllOWZjNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINms6XtYay/DvkHUXG8AGIMLBjxU5U4jR5pmXF8JwHBnxg3PfscLqmP n/BJAkEmqp2lWUNqhVl2kVws9tDUNqQINa++LQq0U5U81qtbr9Gn/Vt5/p9TzRGL tjw/7yX8aTJrVGnQXo0SqziBFY813xinYmZk9wBxxLHeA0TOi0u5LxsVMTc2xwFH 85Wgub6dpg0JpilRLYuFmKF8FZv2jhhFPKasmZr1ZCYRiALvFlA6Jl2cgVt1XEAf kMH15XdO2a0seGqKRw1BudVzr9B7BmbiNR0sDKVTPvBalJeEk9Ijo4ezMOaV6pOU G4JVO+q35vzaUmYDb359+qMqBHCV/bA= -----END CERTIFICATE-----Generated at Mon Oct 26 08:47:08 2026 by rpki-client