$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa File: b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa (raw, json) Hash identifier: ymNjli9l3BRBi82fq9trKhdGqRB/EgzdtEQLr6W8pGw= Subject key identifier: 7C:71:5C:AC:AE:D1:0A:0C:83:78:E7:D1:5F:AA:98:88:BF:6C:B2:74 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F9BCDE785296395087690BA00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 9009 IP address blocks: 172.111.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e7:85:29:63:95:08:76:90:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=6bc7eebd-91de-4838-ad34-942b4bc299de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:7b:91:3e:00:00:ee:27:1e:d6:1b:70:e5: 3d:c3:d1:b2:b5:07:92:19:ab:51:eb:c7:6b:4a:2e: 96:7c:12:e0:35:5c:c1:ec:38:c1:e1:09:e3:77:28: ba:29:f3:b9:c9:cd:ca:57:82:8b:2d:4b:5a:77:bf: e0:b8:de:a4:a6:30:34:11:b4:b9:27:f5:e3:11:83: 3b:b7:76:e8:9a:28:61:36:95:61:03:f8:fc:3d:5d: 00:70:77:33:88:c6:1e:85:a9:62:c9:a6:4c:8c:82: 28:79:8e:58:5f:c1:67:32:a1:e5:df:c8:b6:36:68: ba:c5:0c:d7:d3:b5:61:84:6a:07:ac:23:0c:9a:80: 44:40:57:2d:7c:a6:62:d0:94:ba:f0:b4:89:92:50: 4f:2a:71:f7:27:88:48:a6:29:48:81:c0:f7:27:8a: 84:a0:ec:a4:f5:f7:4d:3c:2b:75:6b:d1:c0:63:f2: 6c:ca:a5:85:e4:a3:da:d0:9e:8f:27:ad:15:cb:55: a4:f6:bc:3f:71:a1:54:bd:3c:c3:de:be:11:27:3a: f9:1b:c7:3c:06:27:d7:15:ff:34:63:5e:a4:dd:06: 67:72:2e:8d:16:9f:25:89:99:d1:11:45:f1:81:bf: 77:af:4b:d3:70:67:1b:88:4d:fb:b6:f7:29:76:dc: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:71:5C:AC:AE:D1:0A:0C:83:78:E7:D1:5F:AA:98:88:BF:6C:B2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e2:30:52:52:dc:55:36:7d:9f:53:d1:ba:94:fa:a4:aa:6f: 6e:ac:ef:0c:9b:6f:04:bc:90:88:a3:a9:76:11:78:f9:cf:e8: 1d:63:b7:2a:4f:00:cf:59:13:c8:1e:9b:bc:90:fe:38:f1:0e: 7f:df:ad:bb:aa:be:a2:76:86:70:20:f2:39:ce:71:ea:a3:e9: 2b:de:71:57:5e:d3:46:f9:79:c5:fa:fb:26:8d:ae:33:88:e8: 28:c0:ef:07:58:17:98:43:18:a7:5c:a1:18:2e:c9:5c:3d:f4: b4:a2:a4:82:02:d7:8b:1a:53:f7:ed:f4:db:19:27:fe:a8:c4: 4d:ef:59:9b:da:19:52:e2:08:98:3d:a9:98:97:21:7b:c9:5d: a3:73:f1:c9:ea:dd:d8:00:09:fd:b7:f8:ab:b1:70:e2:1d:11: ad:c3:41:0b:44:95:89:02:56:86:42:14:8d:5b:5f:f5:23:48: 03:ff:27:b0:5f:d2:4f:97:e1:6b:bd:1b:c1:93:10:d7:45:da: dd:f2:20:c5:ce:8d:31:75:06:1b:9b:57:51:18:d0:d3:b8:31: 14:0c:ca:79:11:7d:af:88:39:a6:b0:f1:59:9d:08:ed:ef:81: b0:9d:2c:f0:61:07:1b:ed:66:8a:90:d1:42:44:16:d5:2d:57: 2d:6d:e5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeeFKWOVCHaQugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NmJjN2VlYmQtOTFkZS00ODM4LWFkMzQtOTQyYjRiYzI5OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGB7kT4AAO4nHtYbcOU9w9GytQeSGatR68dr Si6WfBLgNVzB7DjB4Qnjdyi6KfO5yc3KV4KLLUtad7/guN6kpjA0EbS5J/XjEYM7 t3bomihhNpVhA/j8PV0AcHcziMYehaliyaZMjIIoeY5YX8FnMqHl38i2Nmi6xQzX 07VhhGoHrCMMmoBEQFctfKZi0JS68LSJklBPKnH3J4hIpilIgcD3J4qEoOyk9fdN PCt1a9HAY/JsyqWF5KPa0J6PJ60Vy1Wk9rw/caFUvTzD3r4RJzr5G8c8BifXFf80 Y16k3QZnci6NFp8liZnREUXxgb93r0vTcGcbiE37tvcpdtwACQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxxXKyu0QoMg3jn0V+qmIi/bLJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjljNDgxZWItOTAyZC0z OTViLWEwZDktOTNiZmRkZmJhNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjiMFJS3FU2fZ9T0bqU+qSqb26s7wybbwS8kIijqXYRePnP6B1jtypP AM9ZE8gem7yQ/jjxDn/frbuqvqJ2hnAg8jnOceqj6SvecVde00b5ecX6+yaNrjOI 6CjA7wdYF5hDGKdcoRguyVw99LSipIIC14saU/ft9NsZJ/6oxE3vWZvaGVLiCJg9 qZiXIXvJXaNz8cnq3dgACf23+KuxcOIdEa3DQQtElYkCVoZCFI1bX/UjSAP/J7Bf 0k+X4Wu9G8GTENdF2t3yIMXOjTF1BhubV1EY0NO4MRQMynkRfa+IOaaw8VmdCO3v gbCdLPBhBxvtZoqQ0UJEFtUtVy1t5aM= -----END CERTIFICATE-----Generated at Tue Oct 27 18:36:52 2026 by rpki-client