$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa File: d718e811-5d3b-3e92-94a4-9ad6d104b712.roa (raw, json) Hash identifier: A5+5QmuQhH1OAHJE013DKABZrzjBdiYLb93oFcwD2rA= Subject key identifier: 0F:29:9C:81:52:77:59:EC:47:4B:A9:84:F0:23:DA:A6:BC:C7:D4:AE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F5768014414FA2199696DCEE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 6939 IP address blocks: 172.111.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:01:44:14:fa:21:99:69:6d:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=1d931870-7ed4-4165-968b-9bfe238f9fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:e0:28:87:7f:3f:cc:c5:5c:a5:b1:7d:e8: c9:95:8b:47:57:c6:b7:45:e1:f8:3c:fd:0f:05:b0: 90:7f:aa:5f:07:1c:ac:b9:2e:11:4d:99:da:19:b3: 8b:c0:a4:a5:7c:8a:19:4e:fc:da:97:3a:e4:a5:ed: f1:45:37:85:ee:9a:fd:29:91:7f:7c:e9:53:0a:bb: 77:bd:8c:de:b1:3d:0f:65:51:45:be:76:eb:0c:72: 86:4a:ab:fa:63:01:a1:1d:a2:13:85:28:93:6a:2c: 67:58:32:a6:f8:4f:49:a7:44:38:14:60:6e:73:d4: c5:02:75:a6:5c:83:63:dd:8d:f0:42:5b:f8:a7:94: 0b:d7:a4:d5:7e:b6:cd:d2:5f:d4:6c:0b:84:21:de: e0:1e:da:dc:ba:da:87:62:ae:d7:38:a8:93:21:16: 4c:46:e4:c1:aa:f0:56:32:3a:d7:0d:fb:d6:eb:47: fb:19:2d:51:0f:dc:e9:be:10:eb:71:bd:8d:6e:4b: 18:b6:ee:d1:14:9e:0a:1e:c1:1b:b5:3e:cb:21:61: ff:3b:d8:be:29:0d:34:91:d0:58:09:c8:1b:85:c5: 00:40:ad:74:2f:6b:6e:75:61:9a:1b:0b:12:25:a9: fe:f4:93:41:61:66:bd:66:8e:d4:27:d9:60:4a:20: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:29:9C:81:52:77:59:EC:47:4B:A9:84:F0:23:DA:A6:BC:C7:D4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:39:2f:e9:00:ae:2b:a7:65:f5:af:b0:da:28:f6:8b:1e:0f: 81:cb:7f:be:75:7b:2f:ec:3d:49:ff:d8:f0:45:cb:6a:47:6f: 0c:43:ca:a1:c1:a8:e0:dd:61:fc:f8:c4:0e:67:fe:11:c0:82: 21:27:35:87:5a:17:ed:1e:25:f1:23:28:c0:ec:a7:93:d6:2c: b6:c0:6e:bb:f4:9d:53:87:e6:53:69:18:09:dc:fa:23:45:7d: b5:25:ae:ab:33:4d:a2:ea:f5:80:ec:04:93:1e:8e:d4:d9:2e: 73:75:f3:25:f3:75:63:58:2b:bc:8c:62:b4:a7:90:b4:6e:72: f1:a3:61:f6:dc:78:b9:c6:ca:37:26:b1:00:c7:2b:c6:de:4a: e0:58:d0:25:32:9c:0b:9e:05:10:34:b4:c9:e2:a2:6c:f4:3f: a8:26:83:fc:da:33:57:96:77:c9:6a:b0:5c:58:f4:78:e8:12: 57:2b:77:48:bb:25:c0:08:bf:ab:19:fa:5e:3b:33:9b:f5:71: ed:16:31:18:80:6a:71:e4:33:31:b8:8a:49:8c:0c:e7:be:9a: 2a:c1:d7:e7:75:8a:5b:26:c0:82:05:19:98:29:93:4e:b3:cf: 15:6e:66:e8:ba:93:d2:ca:31:01:d8:37:a5:00:d5:34:a9:67: cc:9e:5b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAFEFPohmWltzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MWQ5MzE4NzAtN2VkNC00MTY1LTk2OGItOWJmZTIzOGY5ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WbgKId/P8zFXKWxfejJlYtHV8a3ReH4PP0P BbCQf6pfBxysuS4RTZnaGbOLwKSlfIoZTvzalzrkpe3xRTeF7pr9KZF/fOlTCrt3 vYzesT0PZVFFvnbrDHKGSqv6YwGhHaIThSiTaixnWDKm+E9Jp0Q4FGBuc9TFAnWm XINj3Y3wQlv4p5QL16TVfrbN0l/UbAuEId7gHtrcutqHYq7XOKiTIRZMRuTBqvBW MjrXDfvW60f7GS1RD9zpvhDrcb2NbksYtu7RFJ4KHsEbtT7LIWH/O9i+KQ00kdBY CcgbhcUAQK10L2tudWGaGwsSJan+9JNBYWa9Zo7UJ9lgSiDrVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8pnIFSd1nsR0uphPAj2qa8x9SuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDcxOGU4MTEtNWQzYi0z ZTkyLTk0YTQtOWFkNmQxMDRiNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE5L+kAriunZfWvsNoo9oseD4HLf751ey/sPUn/2PBFy2pHbwxDyqHB qODdYfz4xA5n/hHAgiEnNYdaF+0eJfEjKMDsp5PWLLbAbrv0nVOH5lNpGAnc+iNF fbUlrqszTaLq9YDsBJMejtTZLnN18yXzdWNYK7yMYrSnkLRucvGjYfbceLnGyjcm sQDHK8beSuBY0CUynAueBRA0tMniomz0P6gmg/zaM1eWd8lqsFxY9HjoElcrd0i7 JcAIv6sZ+l47M5v1ce0WMRiAanHkMzG4ikmMDOe+mirB1+d1ilsmwIIFGZgpk06z zxVuZui6k9LKMQHYN6UA1TSpZ8yeW3Q= -----END CERTIFICATE-----Generated at Mon Oct 26 08:44:22 2026 by rpki-client