$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0870d437-2bb5-3c69-a556-9a595bf0a1da.roa File: 0870d437-2bb5-3c69-a556-9a595bf0a1da.roa (raw, json) Hash identifier: eHzoprPG8t2ZsbZoefCvYsFJCsrfgyCoDjyA65suInA= Subject key identifier: 4B:EB:02:36:BF:4E:AA:E6:3F:42:E6:60:B8:4A:17:57:7C:45:A2:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4DA28E20238A3C7EF531DC20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0870d437-2bb5-3c69-a556-9a595bf0a1da.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 132372 IP address blocks: 172.111.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8e:20:23:8a:3c:7e:f5:31:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=b1bcd7e7-5e10-40b5-bed5-e763ac0d7cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:f2:4c:6b:77:0c:b8:50:f9:76:57:37:e5: a5:9e:88:fc:5d:9c:33:f5:b7:57:c4:71:9f:52:ee: c5:a2:0d:d9:de:9b:89:d3:8d:a1:53:ea:29:10:6e: 39:9a:d6:c4:5b:88:a0:ec:28:44:ce:8d:5f:f1:9b: fe:a7:a3:e8:25:1e:6a:c0:6b:b3:d5:6d:81:aa:16: 37:b7:e3:f8:1b:0a:a2:78:f1:64:c9:80:50:89:1c: 2d:d5:37:f0:f5:7c:cd:33:f9:ac:9d:59:a0:5f:d7: cb:f0:25:25:d2:c0:07:d1:ac:e5:ad:da:29:e2:2b: d4:9e:78:e7:f8:a2:e8:6e:16:c9:99:b0:5e:de:f2: 2d:d5:c3:4c:1d:3c:1d:d6:d9:2e:9f:89:78:de:65: ab:20:8a:81:12:58:c3:0b:52:f5:fb:88:af:3a:97: 83:96:36:ca:a3:78:d2:6e:50:a5:8a:a8:8c:1a:3e: 4d:fe:17:54:22:a7:49:57:0b:66:ff:04:18:5c:74: d8:e1:b3:42:33:47:81:eb:09:51:e6:21:7e:90:1c: 76:b6:ae:e9:39:99:e8:0c:ff:6b:bd:2d:86:20:b5: 26:62:b4:78:f2:e4:b6:d0:57:bb:46:a7:b9:91:c3: 3a:62:0f:f1:67:8e:7b:57:ac:56:22:a0:b1:37:65: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:02:36:BF:4E:AA:E6:3F:42:E6:60:B8:4A:17:57:7C:45:A2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0870d437-2bb5-3c69-a556-9a595bf0a1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4e:3b:58:f2:7e:21:a6:25:b7:02:26:c6:86:08:a5:7d:14: a6:28:40:57:53:71:65:69:13:e0:ac:2e:0c:60:50:28:be:5d: 43:e3:d4:63:22:6c:90:e7:08:47:82:67:28:2f:8a:5e:27:14: 16:d5:a9:e1:6d:60:65:f4:2f:cd:4e:4c:b7:84:3e:81:10:75: b7:9c:ae:5a:0f:39:fc:c9:8a:a5:c3:f0:46:a2:0c:70:21:b2: 25:15:13:55:65:61:5d:c8:78:c4:90:3a:7f:3a:1e:fe:80:46: a4:19:40:d9:c6:04:97:91:d4:bc:c8:26:92:71:dd:64:d4:a2: 05:e6:8e:38:3a:41:13:19:ab:eb:d7:f1:47:c1:db:6f:ce:0a: ab:18:d4:d6:ea:43:61:e1:50:47:54:61:eb:b3:82:46:73:0b: f3:f2:43:18:30:9c:89:c7:30:9e:55:98:a8:a3:14:ae:b5:02: 6d:7d:8d:49:cd:c6:44:5e:8b:18:e6:5d:45:ad:75:51:44:a2: 04:07:c4:8a:4c:d3:6d:77:26:21:54:17:58:df:76:89:f2:3b: e5:03:03:df:f1:c9:1d:d3:17:65:c5:65:9e:7c:7e:58:4d:12: 1a:2c:d7:4e:ec:3d:96:71:0e:c0:96:28:b3:38:51:d9:46:10: 71:b2:f5:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noo4gI4o8fvUx3CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk YjFiY2Q3ZTctNWUxMC00MGI1LWJlZDUtZTc2M2FjMGQ3Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHHyTGt3DLhQ+XZXN+Wlnoj8XZwz9bdXxHGf Uu7Fog3Z3puJ042hU+opEG45mtbEW4ig7ChEzo1f8Zv+p6PoJR5qwGuz1W2BqhY3 t+P4GwqiePFkyYBQiRwt1Tfw9XzNM/msnVmgX9fL8CUl0sAH0azlrdop4ivUnnjn +KLobhbJmbBe3vIt1cNMHTwd1tkun4l43mWrIIqBEljDC1L1+4ivOpeDljbKo3jS blCliqiMGj5N/hdUIqdJVwtm/wQYXHTY4bNCM0eB6wlR5iF+kBx2tq7pOZnoDP9r vS2GILUmYrR48uS20Fe7Rqe5kcM6Yg/xZ457V6xWIqCxN2UjRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvrAja/TqrmP0LmYLhKF1d8RaIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDg3MGQ0MzctMmJiNS0z YzY5LWE1NTYtOWE1OTViZjBhMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhOO1jyfiGmJbcCJsaGCKV9FKYoQFdTcWVpE+CsLgxgUCi+XUPj1GMi bJDnCEeCZygvil4nFBbVqeFtYGX0L81OTLeEPoEQdbecrloPOfzJiqXD8EaiDHAh siUVE1VlYV3IeMSQOn86Hv6ARqQZQNnGBJeR1LzIJpJx3WTUogXmjjg6QRMZq+vX 8UfB22/OCqsY1NbqQ2HhUEdUYeuzgkZzC/PyQxgwnInHMJ5VmKijFK61Am19jUnN xkReixjmXUWtdVFEogQHxIpM0213JiFUF1jfdonyO+UDA9/xyR3TF2XFZZ58flhN Ehos107sPZZxDsCWKLM4UdlGEHGy9Sk= -----END CERTIFICATE-----Generated at Mon Oct 12 00:55:59 2026 by rpki-client