$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7304ad3c-cfef-38b4-bfa6-1e970ce3a36c.roa File: 7304ad3c-cfef-38b4-bfa6-1e970ce3a36c.roa (raw, json) Hash identifier: 63Anka48IfwT4jT1ZVdLrgB1bvc41dMMw+JPm+B/xsM= Subject key identifier: 64:91:3F:86:20:BC:03:64:F4:DF:61:5A:D0:50:DB:9B:44:59:E1:E2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352D8E551AC869D8CE31680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7304ad3c-cfef-38b4-bfa6-1e970ce3a36c.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.111.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d8:e5:51:ac:86:9d:8c:e3:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=669ad283-513a-48f2-b68c-2f21d6db9506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:0a:22:c9:05:8c:4e:3c:3e:cd:39:04:66: e8:33:16:70:90:e0:59:c1:58:8d:f1:2e:36:c7:c7: 2d:84:5f:a3:13:f2:8d:b1:84:66:b4:fc:fe:64:3e: 0c:75:93:64:e4:f5:2d:bc:f2:1e:3b:7f:ad:1f:b2: d0:5e:a4:92:7d:fd:15:cb:6a:28:f5:d3:1c:ec:ef: a5:a5:0c:18:e1:27:15:1b:05:80:69:d2:f2:6e:2d: ac:c6:fa:26:d3:69:cb:14:f0:40:d8:21:93:10:db: a7:2e:8e:60:fc:0f:00:28:15:11:11:29:a3:02:b4: d4:ad:28:b3:3a:33:fc:c0:d7:cd:93:e9:50:21:e7: 07:7c:5c:8e:be:90:a3:1b:15:09:ed:6b:41:74:6f: 69:de:05:5f:4f:bf:00:29:0e:fa:b4:5e:6a:ca:d5: b0:44:a0:2a:ba:45:d6:8f:92:2a:1f:90:81:9a:9b: 41:6c:66:03:06:a8:b6:57:f7:f5:19:db:23:08:eb: e0:36:25:89:92:f3:c3:52:d2:f1:36:07:69:ce:85: 84:a7:31:69:7e:ff:df:52:e9:6e:dd:02:a9:74:76: eb:ba:4f:3b:67:17:83:4d:22:d5:cb:46:22:a7:25: 37:93:74:d1:00:d7:64:f4:72:29:93:d1:44:b3:68: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:91:3F:86:20:BC:03:64:F4:DF:61:5A:D0:50:DB:9B:44:59:E1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7304ad3c-cfef-38b4-bfa6-1e970ce3a36c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:20:bc:4f:41:c3:9d:a9:c3:f7:f0:48:ca:ab:84:8c:c7:69: 0e:a9:95:5e:3c:df:49:bb:df:b4:61:76:b8:de:84:30:cb:cd: 4c:bc:e0:f3:15:b2:bb:82:ee:d9:52:27:45:c1:de:4c:03:4a: 0f:1c:7b:fb:b9:53:d0:d8:94:f5:97:96:8c:cd:b1:aa:0b:97: cf:15:85:7c:71:7a:86:b9:73:bd:e2:1b:84:98:da:5a:f1:54: 89:4c:53:20:3b:d1:f4:c6:71:f9:1c:af:dd:6c:1a:4d:e2:b9: 10:ea:87:4e:05:59:9a:1d:47:46:87:f0:9e:ee:9c:71:44:46: 34:a7:9e:48:87:84:3c:2b:e5:c2:2d:32:6b:1c:f2:7b:d2:d3: 4e:eb:ea:3a:7e:3f:49:33:af:9a:b7:33:b9:ee:ce:20:26:4f: 8a:ac:75:ba:4c:b5:b3:f9:c8:82:33:2c:fd:d1:4f:49:a3:5b: 30:6a:f0:f6:0b:14:fb:97:2b:0e:47:7b:0d:d3:43:65:96:f8: e3:94:44:c5:3b:a4:ef:3e:5c:90:b0:e5:37:b0:f4:da:d0:a8: fb:5f:eb:f4:bb:c3:6f:9d:bc:4a:06:e2:c6:63:a3:55:9d:96: c0:79:e4:a9:44:c3:3e:8d:5e:a9:5c:12:cc:22:87:af:10:0c: e0:41:1e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtjlUayGnYzjFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk NjY5YWQyODMtNTEzYS00OGYyLWI2OGMtMmYyMWQ2ZGI5NTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMUKIskFjE48Ps05BGboMxZwkOBZwViN8S42 x8cthF+jE/KNsYRmtPz+ZD4MdZNk5PUtvPIeO3+tH7LQXqSSff0Vy2oo9dMc7O+l pQwY4ScVGwWAadLybi2sxvom02nLFPBA2CGTENunLo5g/A8AKBURESmjArTUrSiz OjP8wNfNk+lQIecHfFyOvpCjGxUJ7WtBdG9p3gVfT78AKQ76tF5qytWwRKAqukXW j5IqH5CBmptBbGYDBqi2V/f1GdsjCOvgNiWJkvPDUtLxNgdpzoWEpzFpfv/fUulu 3QKpdHbruk87ZxeDTSLVy0YipyU3k3TRANdk9HIpk9FEs2jGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSRP4YgvANk9N9hWtBQ25tEWeHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzMwNGFkM2MtY2ZlZi0z OGI0LWJmYTYtMWU5NzBjZTNhMzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFggvE9Bw52pw/fwSMqrhIzHaQ6plV4830m737RhdrjehDDLzUy84PMV sruC7tlSJ0XB3kwDSg8ce/u5U9DYlPWXlozNsaoLl88VhXxxeoa5c73iG4SY2lrx VIlMUyA70fTGcfkcr91sGk3iuRDqh04FWZodR0aH8J7unHFERjSnnkiHhDwr5cIt Mmsc8nvS007r6jp+P0kzr5q3M7nuziAmT4qsdbpMtbP5yIIzLP3RT0mjWzBq8PYL FPuXKw5Hew3TQ2WW+OOURMU7pO8+XJCw5Tew9NrQqPtf6/S7w2+dvEoG4sZjo1Wd lsB55KlEwz6NXqlcEswih68QDOBBHlE= -----END CERTIFICATE-----Generated at Mon Oct 26 08:36:08 2026 by rpki-client