$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa File: ba814287-b53d-31fc-b52d-a3923ba8d46c.roa (raw, json) Hash identifier: o1is/QAL4O5SGUgjQFAsU5ULlVXzUmADRcQSsd0MYxU= Subject key identifier: 45:65:B0:F4:E9:09:A6:17:4B:89:68:7B:D9:95:2C:95:15:FF:24:73 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4F0818103BAADB53B6B58580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 172.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:18:10:3b:aa:db:53:b6:b5:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=191fb28c-3247-4566-8acb-63622ca7f4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:6f:90:c4:86:25:59:8b:ca:13:78:7c:bd: de:4d:22:b5:db:45:6b:c1:4e:66:a5:d9:a1:46:aa: 65:06:b4:83:b0:14:80:7f:04:b6:cb:c4:72:0f:e8: 66:25:47:32:74:6d:16:4c:95:fd:b7:a5:f9:cf:c7: 4c:b8:75:74:50:a7:b5:91:27:5a:6f:7d:f0:7c:90: 8e:b4:70:8a:56:d1:fb:9d:af:b5:c8:83:96:f1:38: 0f:b8:a9:22:75:1b:33:7a:32:49:4f:eb:94:c0:69: c3:4e:4d:c4:29:e2:a6:9a:f8:2f:92:9c:c1:7d:c6: 27:e7:42:65:2d:99:0c:53:8f:7d:fd:8a:96:da:4a: 19:9e:14:0e:35:4a:93:08:09:cb:8e:b9:f1:4d:0b: 6d:a7:9f:ca:49:7b:ae:1a:e8:29:64:e0:23:60:eb: 7f:1e:03:64:17:a9:d0:19:29:01:db:3a:a9:31:f9: 7f:10:2a:36:69:ec:10:82:61:c1:9b:94:b3:94:d4: 8d:5e:2c:27:03:43:7c:5d:08:73:dc:a9:c4:4d:aa: 3f:97:37:27:9c:9c:01:93:3e:86:dd:b3:83:8f:32: 78:fd:f8:18:11:4f:f7:91:72:45:ef:6a:34:fd:83: e2:a8:6a:08:57:9b:c4:a9:58:56:0d:73:13:af:f1: 08:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:B0:F4:E9:09:A6:17:4B:89:68:7B:D9:95:2C:95:15:FF:24:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d2:13:e5:5a:b2:a0:37:5e:a2:35:38:4f:64:51:bf:32:de: 5b:4f:06:41:f6:ca:d3:0d:6b:d9:54:79:8e:bb:b6:eb:df:a0: 37:81:c9:d6:b8:7d:16:3e:4a:df:ae:fe:74:2e:a1:3e:e3:5a: 26:ea:6f:ae:c1:4e:a2:30:93:5b:81:e1:77:08:39:4b:d7:79: a2:34:72:5f:85:38:31:25:58:16:fd:fa:4e:f3:49:49:27:b3: 85:af:31:2d:59:cd:3b:3c:14:41:91:03:9b:f3:27:f3:48:63: 33:53:7f:b4:1a:ea:de:50:b4:db:c9:08:e3:53:bf:45:8e:a7: 51:29:61:9e:19:96:53:20:0d:63:a1:43:15:24:76:d1:b7:1e: a7:97:37:bf:df:64:9c:96:52:99:a9:ae:1e:3f:56:5d:fd:b5: cc:c1:83:c1:8a:09:6e:42:e1:e8:7c:7e:03:9c:08:f3:24:e3: 8a:ce:0f:d5:51:74:79:20:46:77:59:1b:75:f8:81:f1:bd:09: ca:34:87:22:dd:c8:42:f6:b1:7c:7b:42:fe:85:bb:02:72:0f: 57:9c:8c:22:ff:06:48:1a:a9:7d:27:40:7f:e9:54:11:26:a8: 43:4b:a9:bc:16:2e:c2:53:98:9d:9e:82:14:f5:32:1c:9c:33: 05:ef:65:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBgQO6rbU7a1hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MTkxZmIyOGMtMzI0Ny00NTY2LThhY2ItNjM2MjJjYTdmNGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc5vkMSGJVmLyhN4fL3eTSK120VrwU5mpdmh RqplBrSDsBSAfwS2y8RyD+hmJUcydG0WTJX9t6X5z8dMuHV0UKe1kSdab33wfJCO tHCKVtH7na+1yIOW8TgPuKkidRszejJJT+uUwGnDTk3EKeKmmvgvkpzBfcYn50Jl LZkMU499/YqW2koZnhQONUqTCAnLjrnxTQttp5/KSXuuGugpZOAjYOt/HgNkF6nQ GSkB2zqpMfl/ECo2aewQgmHBm5SzlNSNXiwnA0N8XQhz3KnETao/lzcnnJwBkz6G 3bODjzJ4/fgYEU/3kXJF72o0/YPiqGoIV5vEqVhWDXMTr/EIoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVlsPTpCaYXS4loe9mVLJUV/yRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmE4MTQyODctYjUzZC0z MWZjLWI1MmQtYTM5MjNiYThkNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHSE+VasqA3XqI1OE9kUb8y3ltPBkH2ytMNa9lUeY67tuvfoDeByda4 fRY+St+u/nQuoT7jWibqb67BTqIwk1uB4XcIOUvXeaI0cl+FODElWBb9+k7zSUkn s4WvMS1ZzTs8FEGRA5vzJ/NIYzNTf7Qa6t5QtNvJCONTv0WOp1EpYZ4ZllMgDWOh QxUkdtG3HqeXN7/fZJyWUpmprh4/Vl39tczBg8GKCW5C4eh8fgOcCPMk44rOD9VR dHkgRndZG3X4gfG9Cco0hyLdyEL2sXx7Qv6FuwJyD1ecjCL/BkgaqX0nQH/pVBEm qENLqbwWLsJTmJ2eghT1MhycMwXvZac= -----END CERTIFICATE-----Generated at Mon Oct 26 19:47:45 2026 by rpki-client