$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa File: dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa (raw, json) Hash identifier: ZPI1/NTrHt8N8kfnXzkAFZZ98UnhlMQyGeB4LQDsjlo= Subject key identifier: 16:92:C0:37:19:53:DC:B5:F0:9E:30:EF:5A:FA:1C:6B:E8:F0:DE:CD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F9BCDE729886170DE90B87E40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 9009 IP address blocks: 172.111.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e7:29:88:61:70:de:90:b8:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=4d849012-5c4a-4048-b681-0fc4319b7591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:aa:c3:ca:90:62:08:1d:5a:f0:4a:68:92:ef: 96:ed:b7:af:ff:6a:d6:e7:55:8d:ba:36:f3:35:5d: a7:fa:4b:fa:22:ea:bf:aa:bf:8f:6b:84:c2:d9:af: db:87:9c:bd:5c:6d:89:b7:1a:af:3d:ed:07:91:ee: fc:14:ac:45:79:26:fa:37:83:dc:f2:2d:dd:16:0a: 59:a4:ae:62:2c:ec:57:84:ba:05:02:56:f5:ea:4e: c0:54:9a:22:38:3a:6a:a5:d0:a4:85:fa:ea:46:3f: aa:bc:50:22:76:8e:b4:38:97:06:f4:b9:63:66:41: dc:43:e2:3d:c1:f7:c2:a5:72:60:33:ae:7b:4d:54: 29:ff:c3:38:1a:0f:05:7f:9e:4d:e3:7d:9d:e5:85: 6d:4f:6d:17:d0:f0:ae:91:98:9c:1c:7a:e6:d1:9a: 18:2e:4f:af:dc:f0:6b:ec:32:72:e9:60:72:f4:fd: 87:2d:70:d8:cd:3c:6c:df:15:6f:e5:53:88:71:8c: 29:be:63:bb:0f:d5:5a:b5:71:16:f5:73:35:6f:0a: 5a:fc:20:b4:ef:80:75:99:f9:80:2f:d3:04:ae:1c: 7b:3c:13:d4:88:8d:77:f1:f2:4c:b6:3c:fe:47:af: 4d:45:38:b0:7d:74:69:13:d8:a8:fc:79:99:0d:91: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:92:C0:37:19:53:DC:B5:F0:9E:30:EF:5A:FA:1C:6B:E8:F0:DE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:49:c9:7b:7d:e1:91:eb:c4:d4:1f:04:66:31:60:6b:42:4e: 40:d5:32:1a:37:2e:46:f5:85:22:21:00:21:f6:92:6b:0a:f0: 1c:d1:95:e5:f2:70:cc:ab:66:5f:c4:64:56:da:83:46:cd:0a: ae:7b:83:f0:50:e3:f7:7e:1f:ac:f7:25:db:3c:38:6d:43:36: c9:c9:65:9f:bd:5e:22:6b:4d:dc:1f:80:0a:ec:fb:ac:db:a7: bb:d5:88:58:00:f8:bc:e4:2c:53:a7:8f:5d:b9:50:6d:94:7e: 42:8a:17:26:51:f4:c5:49:34:0e:4d:db:62:33:d1:fd:e9:f3: 3c:f1:0e:08:73:8f:a9:36:45:82:4f:ab:a3:7b:2e:ce:35:ea: ed:b2:29:15:bf:8b:f8:11:a9:49:09:15:b2:ca:c8:37:f3:7a: 31:8d:19:31:58:06:bc:ac:d2:cd:be:d0:e3:83:65:ea:47:67: 83:0f:e2:17:20:f9:aa:69:e0:fc:15:23:92:00:ee:c7:7e:8a: d9:20:5f:ad:ef:5c:fa:05:06:6b:01:f1:e4:3d:10:67:a2:68: bf:92:9d:f5:b5:5f:4d:c3:86:52:cd:d5:0e:6c:e7:86:5e:bd: a8:f7:cd:ce:af:72:d7:40:5d:c0:4c:7b:46:03:87:ce:91:fc: b1:a9:c7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzecpiGFw3pC4fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NGQ4NDkwMTItNWM0YS00MDQ4LWI2ODEtMGZjNDMxOWI3NTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqrDypBiCB1a8Epoku+W7bev/2rW51WNujbz NV2n+kv6Iuq/qr+Pa4TC2a/bh5y9XG2JtxqvPe0Hke78FKxFeSb6N4Pc8i3dFgpZ pK5iLOxXhLoFAlb16k7AVJoiODpqpdCkhfrqRj+qvFAido60OJcG9LljZkHcQ+I9 wffCpXJgM657TVQp/8M4Gg8Ff55N432d5YVtT20X0PCukZicHHrm0ZoYLk+v3PBr 7DJy6WBy9P2HLXDYzTxs3xVv5VOIcYwpvmO7D9VatXEW9XM1bwpa/CC074B1mfmA L9MErhx7PBPUiI138fJMtjz+R69NRTiwfXRpE9io/HmZDZG3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaSwDcZU9y18J4w71r6HGvo8N7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGM3OWJjNGMtMjI1Yy0z YTdhLWE2NTItY2YzMWYwZTIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5JyXt94ZHrxNQfBGYxYGtCTkDVMho3Lkb1hSIhACH2kmsK8BzRleXy cMyrZl/EZFbag0bNCq57g/BQ4/d+H6z3Jds8OG1DNsnJZZ+9XiJrTdwfgArs+6zb p7vViFgA+LzkLFOnj125UG2UfkKKFyZR9MVJNA5N22Iz0f3p8zzxDghzj6k2RYJP q6N7Ls416u2yKRW/i/gRqUkJFbLKyDfzejGNGTFYBrys0s2+0OODZepHZ4MP4hcg +app4PwVI5IA7sd+itkgX63vXPoFBmsB8eQ9EGeiaL+SnfW1X03DhlLN1Q5s54Ze vaj3zc6vctdAXcBMe0YDh86R/LGpx0o= -----END CERTIFICATE-----Generated at Tue Oct 27 12:02:07 2026 by rpki-client