$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa File: 7beaf452-982b-31a2-97e4-bd3009d616c9.roa (raw, json) Hash identifier: b2RpzIDyYN6L8B/oWLUO9UttbnEAx3/Q3TudKCNz8RY= Subject key identifier: B2:75:54:CF:DD:80:63:D8:15:FC:D8:77:A9:36:EA:36:85:FA:59:7C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F89A87AB341E9358266923180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 206264 IP address blocks: 172.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:7a:b3:41:e9:35:82:66:92:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=0bd5c3d6-1de7-47f5-9ba9-3665595c49b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:5d:4a:9d:1f:99:0d:10:7f:84:4b:25:f3: a0:cb:fa:7b:b5:9c:d3:7f:17:22:8e:93:a2:d1:8d: 2f:3b:ac:5a:de:f7:51:49:74:e8:24:83:be:3a:fb: 39:80:ef:20:39:51:d9:3e:60:1d:1c:47:e9:0f:e6: f7:a8:42:cd:84:91:a8:7c:6e:26:70:5f:17:30:7d: 8d:e9:17:a8:99:87:db:17:24:de:e8:91:ab:7e:e2: 95:8c:a4:37:d9:a7:c1:a9:3a:e0:63:8b:2b:e7:8b: 5c:33:fb:83:cb:85:28:c4:8d:fe:d8:95:1d:8d:ac: 3e:25:71:45:62:62:75:42:73:18:f3:4d:72:22:68: 35:30:d6:fd:a2:3e:0f:7e:5f:de:93:e2:2a:ec:f1: 90:d9:73:6c:01:12:d3:5a:65:7b:71:cd:c7:76:90: 67:68:84:2c:60:e5:41:08:81:9a:02:10:53:04:ed: 15:53:fe:5b:da:d5:24:a3:c2:31:48:af:4b:a8:2f: 88:5f:f7:3c:07:96:78:cc:c6:3a:e1:ea:a3:17:9c: b9:95:e9:04:2a:5c:96:32:e0:0a:9d:97:c1:81:e8: 64:4b:d3:f8:ea:29:57:37:40:bd:12:38:28:76:8f: 15:0b:29:7e:93:72:c1:0e:a1:97:94:27:55:47:04: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:75:54:CF:DD:80:63:D8:15:FC:D8:77:A9:36:EA:36:85:FA:59:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2d:5b:14:c6:91:5e:06:b9:6e:8d:1f:38:10:59:34:ad:e7: a0:d8:e0:61:e3:15:d1:41:c7:50:44:2f:3f:d5:10:28:35:b9: a0:37:5f:c6:51:cd:e1:6e:b5:7c:2f:9f:fe:17:8d:14:5b:a7: 1a:54:cd:9f:7c:80:47:1a:1e:35:98:65:b7:23:2b:59:e5:2d: f9:ff:5f:91:6e:fe:e7:55:08:d4:54:5b:37:b3:45:b2:aa:78: c2:ae:d8:a0:86:8f:70:37:64:8d:1d:9d:d6:a2:4f:fc:92:b6: 0b:38:c7:9d:f7:41:d7:af:e0:68:c3:a7:29:3a:03:29:6c:19: b8:bd:51:71:9f:34:d3:84:89:de:c9:cc:0b:3a:fc:d0:50:b5: 90:8f:fa:3c:0b:34:31:0e:9b:a3:10:b0:77:d7:2d:02:26:d7: 64:e0:ab:63:6b:fa:d8:3e:77:32:73:0d:cf:f0:a5:bc:50:25: f3:0d:26:63:d9:d6:1f:69:15:87:ec:0a:a9:66:31:6c:da:dd: b1:1b:be:5c:e2:92:f2:ff:59:d0:d6:db:83:1f:95:e4:a6:ca: 79:93:86:a4:76:45:5d:22:b3:1c:e5:d6:d1:98:5b:ea:96:c8: 2a:3e:f6:df:67:67:83:05:9d:a8:ce:3f:d9:0c:ef:bd:ba:05: 70:11:eb:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqHqzQek1gmaSMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MGJkNWMzZDYtMWRlNy00N2Y1LTliYTktMzY2NTU5NWM0OWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xdSp0fmQ0Qf4RLJfOgy/p7tZzTfxcijpOi 0Y0vO6xa3vdRSXToJIO+Ovs5gO8gOVHZPmAdHEfpD+b3qELNhJGofG4mcF8XMH2N 6ReomYfbFyTe6JGrfuKVjKQ32afBqTrgY4sr54tcM/uDy4UoxI3+2JUdjaw+JXFF YmJ1QnMY801yImg1MNb9oj4Pfl/ek+Iq7PGQ2XNsARLTWmV7cc3HdpBnaIQsYOVB CIGaAhBTBO0VU/5b2tUko8IxSK9LqC+IX/c8B5Z4zMY64eqjF5y5lekEKlyWMuAK nZfBgehkS9P46ilXN0C9Ejgodo8VCyl+k3LBDqGXlCdVRwTJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ1VM/dgGPYFfzYd6k26jaF+ll8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2JlYWY0NTItOTgyYi0z MWEyLTk3ZTQtYmQzMDA5ZDYxNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwtWxTGkV4GuW6NHzgQWTSt56DY4GHjFdFBx1BELz/VECg1uaA3X8ZR zeFutXwvn/4XjRRbpxpUzZ98gEcaHjWYZbcjK1nlLfn/X5Fu/udVCNRUWzezRbKq eMKu2KCGj3A3ZI0dndaiT/yStgs4x533Qdev4GjDpyk6AylsGbi9UXGfNNOEid7J zAs6/NBQtZCP+jwLNDEOm6MQsHfXLQIm12Tgq2Nr+tg+dzJzDc/wpbxQJfMNJmPZ 1h9pFYfsCqlmMWza3bEbvlzikvL/WdDW24MfleSmynmThqR2RV0isxzl1tGYW+qW yCo+9t9nZ4MFnajOP9kM7726BXAR67U= -----END CERTIFICATE-----Generated at Wed Oct 28 04:34:31 2026 by rpki-client