$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d332ff5f-df9a-36cf-bff0-80203dd6be47.roa File: d332ff5f-df9a-36cf-bff0-80203dd6be47.roa (raw, json) Hash identifier: 2E838t07YsSfGBMkVzQB0zB9uGAJkfQHkeRYyMBLVSM= Subject key identifier: A6:D1:72:FC:B4:56:44:8E:9B:8B:53:19:FC:25:F7:C9:C7:CD:7C:B6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F82AD9B029866BC728DD0CCC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d332ff5f-df9a-36cf-bff0-80203dd6be47.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 9009 IP address blocks: 172.111.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:9b:02:98:66:bc:72:8d:d0:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=579e21d9-cf97-423b-9623-5c4ae89aead8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:24:c1:2f:9a:09:0d:27:98:0d:4a:1f:ab:26: a0:0e:5a:76:c5:ce:8f:c3:3f:93:b3:a9:11:e4:db: 59:b5:2d:9a:52:9f:9d:ea:1c:01:9c:7a:fd:87:49: 2d:3e:31:a0:cd:4d:e0:59:c0:eb:29:0b:68:48:2f: 59:bb:14:31:14:f3:41:f0:cf:50:b3:19:5a:a9:46: dd:c8:93:9d:34:93:e7:24:6f:12:23:14:97:8b:a7: 75:1a:c5:f8:ad:70:61:26:9a:87:be:f0:e6:6a:d1: f5:91:b9:72:8b:36:67:f9:2e:27:09:59:ae:63:e3: b3:0b:4f:9e:dd:d0:7c:eb:c5:48:55:43:00:f7:e6: 64:d4:6e:66:a3:fb:2c:fd:86:65:3e:2f:18:e2:e8: 6b:6c:e4:b1:4f:73:f0:fa:58:27:1f:68:ff:6c:4b: 31:55:80:1d:7d:15:1d:e9:d6:71:74:6f:19:d8:0c: 1a:10:df:69:40:37:b5:db:3a:b7:b3:70:60:61:78: 63:4b:4f:19:82:14:60:ad:db:56:d4:d1:b0:ad:f2: 93:95:2a:c3:ea:46:ee:b6:df:14:4a:76:06:dd:e2: bd:5a:fa:82:64:ec:f3:f6:78:92:1b:0b:ad:9a:8e: 17:1a:ba:f5:00:fb:f5:73:56:4e:b8:eb:49:8d:c9: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D1:72:FC:B4:56:44:8E:9B:8B:53:19:FC:25:F7:C9:C7:CD:7C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d332ff5f-df9a-36cf-bff0-80203dd6be47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:57:6d:fe:c0:d5:79:4c:f6:e8:37:eb:c0:c7:5a:12:6d:07: 34:0d:8b:01:89:d0:c7:92:00:5f:5b:3a:3e:03:7c:9a:5e:d1: 9a:67:7a:c3:97:84:28:19:fd:b7:ed:98:f1:db:f3:f9:e5:a9: 86:84:e4:39:3e:5a:9d:e6:0c:f5:3b:a4:b2:3f:4b:98:6d:dc: 6c:1a:e5:b5:a7:c2:96:b2:23:7e:4b:68:16:9b:3e:95:3b:76: ac:c1:1c:c8:a6:83:b9:a3:29:b8:d5:9e:ca:eb:86:44:1d:a0: 2c:51:01:c8:55:35:1d:d5:9c:76:bd:d6:a1:cb:55:cc:96:0f: cb:42:03:6d:0d:4a:09:bb:52:8b:3e:ee:98:b3:4c:1f:0c:8c: cd:03:82:e5:35:a0:e8:9c:ef:a1:9a:44:02:f9:69:1c:0d:80: af:a6:b5:c0:f8:d0:a3:4c:30:95:77:00:36:60:50:bd:d8:11: ca:7b:00:b2:f8:f3:e4:b5:3e:a1:38:ad:63:14:cb:2f:20:d9: 5b:f0:a0:7d:76:c1:f3:21:94:4f:be:fd:bf:2b:c9:6b:de:d8: 8c:dd:09:ee:1b:bc:cc:0c:d3:1d:4b:d2:63:60:0d:73:6a:76: 64:9c:62:5c:41:d6:29:a5:71:3d:90:2a:11:0d:f2:e6:22:f2: 31:b6:5f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrZsCmGa8co3QzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NTc5ZTIxZDktY2Y5Ny00MjNiLTk2MjMtNWM0YWU4OWFlYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiTBL5oJDSeYDUofqyagDlp2xc6Pwz+Ts6kR 5NtZtS2aUp+d6hwBnHr9h0ktPjGgzU3gWcDrKQtoSC9ZuxQxFPNB8M9QsxlaqUbd yJOdNJPnJG8SIxSXi6d1GsX4rXBhJpqHvvDmatH1kblyizZn+S4nCVmuY+OzC0+e 3dB868VIVUMA9+Zk1G5mo/ss/YZlPi8Y4uhrbOSxT3Pw+lgnH2j/bEsxVYAdfRUd 6dZxdG8Z2AwaEN9pQDe12zq3s3BgYXhjS08ZghRgrdtW1NGwrfKTlSrD6kbutt8U SnYG3eK9WvqCZOzz9niSGwutmo4XGrr1APv1c1ZOuOtJjcnyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbRcvy0VkSOm4tTGfwl98nHzXy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDMzMmZmNWYtZGY5YS0z NmNmLWJmZjAtODAyMDNkZDZiZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINXbf7A1XlM9ug368DHWhJtBzQNiwGJ0MeSAF9bOj4DfJpe0ZpnesOX hCgZ/bftmPHb8/nlqYaE5Dk+Wp3mDPU7pLI/S5ht3Gwa5bWnwpayI35LaBabPpU7 dqzBHMimg7mjKbjVnsrrhkQdoCxRAchVNR3VnHa91qHLVcyWD8tCA20NSgm7Uos+ 7pizTB8MjM0DguU1oOic76GaRAL5aRwNgK+mtcD40KNMMJV3ADZgUL3YEcp7ALL4 8+S1PqE4rWMUyy8g2VvwoH12wfMhlE++/b8ryWve2IzdCe4bvMwM0x1L0mNgDXNq dmScYlxB1imlcT2QKhEN8uYi8jG2X2Q= -----END CERTIFICATE-----Generated at Wed Oct 28 19:35:37 2026 by rpki-client