$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa File: ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa (raw, json) Hash identifier: IKO1Hjsugzj46h/bNq/8oFuyV6/UBQxB+VZwo66BRIs= Subject key identifier: 62:AA:41:EF:5C:3C:AA:59:F8:08:5C:99:3D:41:CB:16:81:F7:FA:F2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F86DDA3FE44135550763B4680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.111.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a3:fe:44:13:55:50:76:3b:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=037a74ab-c135-4f07-b4b0-4c92132ad58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:b1:78:15:0c:cf:57:8a:90:3c:c0:29:d5: 21:4a:de:8b:33:cc:e8:de:cc:28:45:5c:dc:4b:f7: d2:64:19:5e:4c:d8:ad:fc:ec:d6:38:b2:85:2e:82: 77:5f:31:ae:f2:e3:01:f2:9f:f1:f8:a2:0a:90:ee: 14:4a:c1:db:d5:c5:05:42:bf:8f:2e:12:34:96:c7: de:71:20:8d:f3:30:b4:16:c3:4e:a9:45:09:5a:f7: 84:26:3c:63:67:1b:4a:95:28:09:54:90:86:47:32: 1b:ab:b7:12:f0:9f:5e:8b:cd:c4:70:70:ad:c4:16: b4:80:ee:2a:58:a1:1e:1c:c4:2f:74:8d:84:cd:6c: 95:5a:ab:f8:4d:03:a0:7f:f8:07:22:08:49:0f:b4: 27:40:19:85:3e:ad:b8:ca:f3:dd:78:e1:8f:3a:d3: d3:9f:b5:0a:73:94:ca:16:9e:37:45:83:91:a0:1f: 9d:c0:7b:46:41:35:c2:2e:30:63:50:07:5e:ab:e3: 53:f9:c9:2b:2d:12:53:b6:0e:d8:19:78:a8:60:66: 07:ee:3c:3b:23:1b:35:74:01:71:f5:9b:7f:18:6f: 84:f8:59:0b:b6:c2:80:09:2c:fc:e8:3b:dc:d9:c6: ee:d7:59:9e:d9:d4:59:67:ac:6b:9a:58:c4:79:51: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:41:EF:5C:3C:AA:59:F8:08:5C:99:3D:41:CB:16:81:F7:FA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:17:c0:a4:7f:56:3d:e7:36:f4:bc:fc:07:dd:d6:65:29:60: 1c:e7:bf:37:34:72:5c:c1:04:eb:99:bc:62:ea:3d:c9:3b:ea: c6:05:7d:d0:90:1d:0d:3a:5f:7d:c5:f1:b3:5f:2e:dc:92:4b: 46:3c:8c:88:aa:21:0a:1c:be:ff:cf:9e:55:c5:5a:de:61:e8: e6:7f:c6:1f:60:1b:14:c3:77:e7:16:40:25:a7:ed:68:6c:cf: 4f:1b:86:59:ff:5b:1f:03:45:c7:9c:48:9a:90:fc:2b:02:4f: 78:cb:8e:f0:43:35:40:96:87:a1:cb:2d:a8:7d:b8:02:aa:f8: c2:4e:ba:4e:41:e5:c8:f4:51:e3:e9:9c:d9:c6:eb:c6:32:47: 10:19:e5:17:0a:11:2e:25:da:23:25:30:14:a7:e6:83:fc:c5: 5b:f1:0f:3d:4a:b5:51:c1:5a:f2:66:ac:24:b6:d5:04:c8:54: ad:24:1a:a1:7c:de:67:d4:bf:11:22:d9:a0:bd:1d:49:e8:75: 70:ea:0a:67:0b:de:c5:1b:d4:b2:90:8e:53:fb:bb:85:08:44: 4c:b1:e4:57:30:97:4e:56:d5:96:a4:16:09:0b:ca:22:43:2b: 3e:b0:8c:2f:0c:fa:9f:83:3b:59:ec:f4:5f:6d:58:0d:ce:1d: 42:51:02:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3aP+RBNVUHY7RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk MDM3YTc0YWItYzEzNS00ZjA3LWI0YjAtNGM5MjEzMmFkNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzSxeBUMz1eKkDzAKdUhSt6LM8zo3swoRVzc S/fSZBleTNit/OzWOLKFLoJ3XzGu8uMB8p/x+KIKkO4USsHb1cUFQr+PLhI0lsfe cSCN8zC0FsNOqUUJWveEJjxjZxtKlSgJVJCGRzIbq7cS8J9ei83EcHCtxBa0gO4q WKEeHMQvdI2EzWyVWqv4TQOgf/gHIghJD7QnQBmFPq24yvPdeOGPOtPTn7UKc5TK Fp43RYORoB+dwHtGQTXCLjBjUAdeq+NT+ckrLRJTtg7YGXioYGYH7jw7Ixs1dAFx 9Zt/GG+E+FkLtsKACSz86Dvc2cbu11me2dRZZ6xrmljEeVF9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKqQe9cPKpZ+AhcmT1ByxaB9/ryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmYxM2NlOWMtNGE5NS0z YWUxLWE3ZTctZDBhNTI2NTc1ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUXwKR/Vj3nNvS8/Afd1mUpYBznvzc0clzBBOuZvGLqPck76sYFfdCQ HQ06X33F8bNfLtySS0Y8jIiqIQocvv/PnlXFWt5h6OZ/xh9gGxTDd+cWQCWn7Whs z08bhln/Wx8DRcecSJqQ/CsCT3jLjvBDNUCWh6HLLah9uAKq+MJOuk5B5cj0UePp nNnG68YyRxAZ5RcKES4l2iMlMBSn5oP8xVvxDz1KtVHBWvJmrCS21QTIVK0kGqF8 3mfUvxEi2aC9HUnodXDqCmcL3sUb1LKQjlP7u4UIREyx5Fcwl05W1ZakFgkLyiJD Kz6wjC8M+p+DO1ns9F9tWA3OHUJRAsA= -----END CERTIFICATE-----Generated at Wed Oct 21 21:11:29 2026 by rpki-client