$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa File: ef79e838-59d8-3228-8050-1413d2bdbb7c.roa (raw, json) Hash identifier: CMQXu5mmu5EILwWTTiTCobS3Sznsq0mTEXe0SfCBjBQ= Subject key identifier: F9:BB:43:4E:DB:4C:F1:EF:14:E3:31:FD:1E:AA:4E:D1:43:63:25:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F497624B47F5619C62B6CB880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 202656 IP address blocks: 172.111.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:24:b4:7f:56:19:c6:2b:6c:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7a36a64-a2a4-436a-9b8f-9bd7dfd3bf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:4b:8d:ec:31:50:42:0a:3e:d8:43:23:d9: 6b:0c:07:b0:e1:b8:11:57:35:5a:06:11:5d:2c:77: 2e:28:22:29:c3:7b:53:72:f3:6e:58:3c:03:31:2a: e1:a4:cb:22:09:fb:d0:7d:a0:2e:a2:e6:9f:0f:2d: 90:2d:d7:81:b0:ae:a6:42:ff:66:9c:05:5e:43:e2: 02:5f:23:7a:bd:91:3f:b4:d8:a5:b4:b5:66:db:92: 42:4d:2e:d6:80:c2:e6:ef:eb:06:b4:87:72:7c:12: b3:41:0b:47:b9:c3:80:33:89:68:8e:9e:a3:93:bd: 4a:13:3e:f6:85:f0:7a:ef:f7:f1:af:9d:41:18:d9: 8b:ff:ac:aa:51:3a:96:39:16:61:aa:49:df:24:02: 0a:96:d2:48:4c:e3:8b:79:66:fe:0d:2e:2e:cf:42: 6b:3b:7e:dd:97:1d:2c:b3:6f:38:66:26:22:3b:7b: e9:5b:26:da:37:af:14:12:c4:bd:3d:98:1e:7f:f4: 77:3c:66:52:e4:be:4d:b0:17:72:ef:5e:52:65:dc: ae:58:c3:5e:29:2d:be:4d:d4:7c:4e:2a:09:b9:76: e6:d7:54:ae:03:f3:07:15:34:7e:84:ad:7c:ef:0d: 9b:5b:97:47:bc:f3:61:c5:25:a2:9c:1a:d0:01:3a: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BB:43:4E:DB:4C:F1:EF:14:E3:31:FD:1E:AA:4E:D1:43:63:25:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:03:2f:3b:28:3c:3e:02:a7:f4:2a:b7:69:f7:b9:55:88:73: b8:24:c7:64:fe:65:6f:34:eb:68:34:3c:2d:a0:55:84:22:e9: a2:df:f9:1a:6d:83:17:96:52:22:39:cc:c5:6c:e5:2b:4b:c1: e2:0a:cd:28:9a:78:0d:75:45:16:85:ef:5e:b6:06:6f:7b:3c: ef:81:c6:11:16:36:a7:c3:71:a5:46:5e:c4:67:4b:68:0b:34: 9e:92:90:c8:bd:a2:9a:c5:84:4f:c4:dd:a9:ba:23:ed:1b:7e: 49:62:71:bf:ac:88:09:94:e1:9f:21:b1:13:29:a2:96:6e:2c: d5:12:86:60:84:94:55:07:ea:cd:f0:db:89:d8:30:15:50:9b: 60:61:37:f4:0f:d8:fe:bf:2f:88:ac:0e:3d:a3:d7:bc:33:bf: 1e:c4:9e:01:87:f8:2b:7e:8e:82:00:fc:11:d0:e2:a6:7c:12: 23:20:49:5a:3e:10:d4:c0:58:4a:36:7f:25:08:02:5c:8b:e1: a3:21:80:29:9b:75:95:6c:c3:32:43:b5:1e:26:7f:dd:fa:29: d2:b9:da:9a:a9:2d:81:b7:9a:b0:5f:ad:82:53:a7:9f:a2:d5: 32:09:02:45:79:08:54:bd:7c:c3:77:1d:19:60:7b:6b:03:f9: ec:61:2b:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdiS0f1YZxitsuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDdhMzZhNjQtYTJhNC00MzZhLTliOGYtOWJkN2RmZDNiZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDxLjewxUEIKPthDI9lrDAew4bgRVzVaBhFd LHcuKCIpw3tTcvNuWDwDMSrhpMsiCfvQfaAuouafDy2QLdeBsK6mQv9mnAVeQ+IC XyN6vZE/tNiltLVm25JCTS7WgMLm7+sGtIdyfBKzQQtHucOAM4lojp6jk71KEz72 hfB67/fxr51BGNmL/6yqUTqWORZhqknfJAIKltJITOOLeWb+DS4uz0JrO37dlx0s s284ZiYiO3vpWybaN68UEsS9PZgef/R3PGZS5L5NsBdy715SZdyuWMNeKS2+TdR8 TioJuXbm11SuA/MHFTR+hK187w2bW5dHvPNhxSWinBrQATqQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm7Q07bTPHvFOMx/R6qTtFDYyUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWY3OWU4MzgtNTlkOC0z MjI4LTgwNTAtMTQxM2QyYmRiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwDLzsoPD4Cp/Qqt2n3uVWIc7gkx2T+ZW8062g0PC2gVYQi6aLf+Rpt gxeWUiI5zMVs5StLweIKzSiaeA11RRaF7162Bm97PO+BxhEWNqfDcaVGXsRnS2gL NJ6SkMi9oprFhE/E3am6I+0bfklicb+siAmU4Z8hsRMpopZuLNUShmCElFUH6s3w 24nYMBVQm2BhN/QP2P6/L4isDj2j17wzvx7EngGH+Ct+joIA/BHQ4qZ8EiMgSVo+ ENTAWEo2fyUIAlyL4aMhgCmbdZVswzJDtR4mf936KdK52pqpLYG3mrBfrYJTp5+i 1TIJAkV5CFS9fMN3HRlge2sD+exhK0Q= -----END CERTIFICATE-----Generated at Mon Oct 26 07:40:06 2026 by rpki-client