$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf6e0ce4-8245-3912-8c0f-9f5d8c429f16.roa File: cf6e0ce4-8245-3912-8c0f-9f5d8c429f16.roa (raw, json) Hash identifier: zpVvETFyYzgaMyiVY9W1Yk760VZTxewsmKXQbJsmaGU= Subject key identifier: 3A:B0:B3:EA:C6:53:A1:36:03:C1:D5:07:8A:48:CB:BB:39:D0:56:AC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F8D623097C7D80ECC05713500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf6e0ce4-8245-3912-8c0f-9f5d8c429f16.roa Signing time: Mon 19 Oct 2026 09:02:16 +0000 ROA not before: Mon 19 Oct 2026 09:02:16 +0000 ROA not after: Sun 17 Jan 2027 10:02:16 +0000 asID: 219199 IP address blocks: 172.111.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:62:30:97:c7:d8:0e:cc:05:71:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 19 09:02:16 2026 GMT Not After : Jan 17 10:02:16 2027 GMT Subject: CN=4c64b9b1-33e6-4175-a939-d0a03766406f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:72:21:2e:77:99:5b:f8:ed:b3:c7:d7:62: ac:94:45:87:4d:f2:d6:5d:ba:59:64:73:5e:6c:15: f7:f3:a4:ca:dc:15:96:57:c7:94:99:38:4a:f1:2a: aa:b0:89:10:bb:93:4a:d8:c7:34:85:42:e0:c7:0b: 6a:04:13:3f:b3:c9:51:cc:57:82:af:48:e9:43:7d: 05:24:8f:32:63:ab:e4:67:38:cc:cd:03:4d:6b:b4: bd:83:21:d9:47:26:fe:42:3a:6b:96:71:bf:bc:9d: 4f:75:9f:3c:d2:09:83:a8:37:c8:ba:53:2e:8a:8b: 43:bc:1e:56:58:65:cd:95:b8:83:12:2e:89:25:c1: 8c:85:d0:76:90:15:e4:83:ae:fd:c3:64:1a:0f:4f: 7d:e4:d8:40:91:d8:39:8c:af:77:16:19:50:16:be: d8:d9:a0:7c:5c:75:0d:8a:28:82:cc:f8:42:16:7e: ee:f4:b0:9d:3d:e5:01:ab:d3:3f:e9:df:3d:a7:2d: bb:18:d2:f7:ce:d1:54:92:d8:3c:e9:c4:be:df:34: 6d:45:37:f9:d6:17:4b:39:4f:a1:87:12:5e:4d:58: a2:52:5f:2e:7e:4c:67:33:38:7d:74:13:6e:17:d4: 41:93:be:ec:10:e4:11:af:df:a2:24:69:9d:ab:fa: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B0:B3:EA:C6:53:A1:36:03:C1:D5:07:8A:48:CB:BB:39:D0:56:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf6e0ce4-8245-3912-8c0f-9f5d8c429f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:28:9c:b4:ec:40:af:65:ae:b3:32:08:8d:7b:e6:c9:03:9b: b7:b5:7c:7e:b1:8b:bc:56:df:90:ec:d7:b2:01:30:7f:87:3a: c9:3d:cb:0c:88:54:e5:70:9c:12:fb:8f:64:ff:85:d1:0e:2a: 30:a0:b8:93:f0:d7:7c:f9:22:8b:24:a2:0e:fa:b7:06:22:e8: 56:6d:33:a6:f2:0a:58:ae:00:dc:4f:46:7e:c7:04:6c:b5:3b: 54:13:cc:f7:a4:12:ad:ff:99:49:aa:c5:2c:a3:3a:e7:8f:a1: 54:3f:76:a9:46:bf:0d:43:6e:ed:35:c9:fe:22:c3:5c:e7:a0: ba:b2:d1:3c:45:82:95:1e:c0:33:8b:85:87:e4:22:cb:ef:e6: f6:3d:b3:e8:04:96:c5:9b:99:fd:e3:35:75:fe:05:f7:ac:d9: fc:05:0a:77:de:d5:0a:17:04:b5:b3:21:2a:25:30:ba:20:19: 75:5f:9c:1b:a7:f4:ef:d3:44:ea:b6:fd:03:3d:07:02:f5:c6: 97:67:14:32:ee:21:42:36:5d:98:ff:ce:77:ed:f0:de:2d:22: f8:df:a1:a0:3e:8c:a0:db:d4:a1:1c:93:23:40:47:43:18:62: 1e:a5:65:96:a0:6d:7d:09:99:07:1f:d5:e8:52:74:7e:58:11: 38:54:c1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+NYjCXx9gOzAVxNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxOTA5MDIxNloXDTI3MDExNzEwMDIxNlowLzEtMCsGA1UEAxMk NGM2NGI5YjEtMzNlNi00MTc1LWE5MzktZDBhMDM3NjY0MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ByIS53mVv47bPH12KslEWHTfLWXbpZZHNe bBX386TK3BWWV8eUmThK8SqqsIkQu5NK2Mc0hULgxwtqBBM/s8lRzFeCr0jpQ30F JI8yY6vkZzjMzQNNa7S9gyHZRyb+QjprlnG/vJ1PdZ880gmDqDfIulMuiotDvB5W WGXNlbiDEi6JJcGMhdB2kBXkg679w2QaD0995NhAkdg5jK93FhlQFr7Y2aB8XHUN iiiCzPhCFn7u9LCdPeUBq9M/6d89py27GNL3ztFUktg86cS+3zRtRTf51hdLOU+h hxJeTViiUl8ufkxnMzh9dBNuF9RBk77sEOQRr9+iJGmdq/qBDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqws+rGU6E2A8HVB4pIy7s50FasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2Y2ZTBjZTQtODI0NS0z OTEyLThjMGYtOWY1ZDhjNDI5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0onLTsQK9lrrMyCI175skDm7e1fH6xi7xW35Ds17IBMH+HOsk9ywyI VOVwnBL7j2T/hdEOKjCguJPw13z5Ioskog76twYi6FZtM6byCliuANxPRn7HBGy1 O1QTzPekEq3/mUmqxSyjOuePoVQ/dqlGvw1Dbu01yf4iw1znoLqy0TxFgpUewDOL hYfkIsvv5vY9s+gElsWbmf3jNXX+Bfes2fwFCnfe1QoXBLWzISolMLogGXVfnBun 9O/TROq2/QM9BwL1xpdnFDLuIUI2XZj/znft8N4tIvjfoaA+jKDb1KEckyNAR0MY Yh6lZZagbX0JmQcf1ehSdH5YEThUwbg= -----END CERTIFICATE-----Generated at Tue Oct 27 00:13:55 2026 by rpki-client