$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a74c261-95c1-30cd-9941-0f8760067df2.roa File: 2a74c261-95c1-30cd-9941-0f8760067df2.roa (raw, json) Hash identifier: 9qu9mfJCiBfG8CjayoZu2YcWtqdsv3s5RkrMehWh2uk= Subject key identifier: E6:F7:7F:74:23:EE:2B:4B:98:C8:7C:00:C2:7B:3C:20:DB:20:06:56 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ECE9C7580B3CCBC182D2C9050 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a74c261-95c1-30cd-9941-0f8760067df2.roa Signing time: Wed 12 Aug 2026 01:00:11 +0000 ROA not before: Wed 12 Aug 2026 01:00:11 +0000 ROA not after: Tue 10 Nov 2026 02:00:11 +0000 asID: 18526 IP address blocks: 172.111.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ce:9c:75:80:b3:cc:bc:18:2d:2c:90:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 12 01:00:11 2026 GMT Not After : Nov 10 02:00:11 2026 GMT Subject: CN=384b2528-0ae4-4b49-a73f-46cbcd61a8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:99:41:26:12:60:c8:1f:10:52:27:2d:2b:c5: 7f:67:f6:b4:f4:4e:81:3c:97:05:a8:fa:11:35:2a: 5b:c2:5a:f5:f9:ca:01:cc:d1:e9:01:cd:4b:e3:65: 96:9f:65:9c:c0:3f:46:66:1f:3b:ce:98:b0:ce:7b: fe:2f:71:b6:2f:9c:9c:d5:96:5c:36:fd:10:2b:42: e1:b4:dc:43:54:f0:25:32:c6:5c:9f:85:d2:cd:eb: ed:a2:a4:55:55:c3:6a:ef:4b:28:f8:76:24:1f:97: 10:e8:45:25:cb:8a:28:ac:cd:b4:14:ad:ed:9d:63: 4a:23:f2:6e:86:7d:a2:34:18:2c:39:bb:a6:09:46: 70:56:54:bc:d1:e2:ee:34:b9:dc:d3:4a:82:f2:37: e7:e9:9b:69:96:ff:4a:9d:5c:78:82:c2:ab:1b:1b: bb:e1:3b:09:87:e7:61:b4:d7:65:01:85:83:f1:08: 01:52:be:f0:99:64:32:09:73:49:9c:0f:83:ff:65: 0c:df:af:c6:f5:c0:51:43:68:2c:f0:8b:9d:d7:f3: ca:0b:d2:0a:6f:34:d3:db:9a:89:e9:e2:48:70:33: 28:2f:a6:06:ec:15:74:18:f3:c2:78:56:03:00:bb: a0:a7:f2:6f:90:48:bf:00:c0:17:fb:64:80:db:7e: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F7:7F:74:23:EE:2B:4B:98:C8:7C:00:C2:7B:3C:20:DB:20:06:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a74c261-95c1-30cd-9941-0f8760067df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5b:e6:53:31:d3:3f:f1:b1:ab:b0:c5:09:87:7a:eb:af:69: 39:6b:f7:04:bc:87:f5:2c:51:4f:5c:25:e6:49:63:eb:52:e6: de:43:ad:00:19:3f:95:46:28:2c:12:54:14:79:18:db:61:08: 02:86:03:06:15:ab:e1:e3:2d:01:54:bb:d9:52:79:43:67:8a: fe:62:da:a5:11:5c:53:35:95:9e:c9:51:a5:cb:54:11:9b:e9: 36:02:23:0f:2d:a2:a1:6b:dc:7a:b0:b3:81:d5:59:ce:c5:2c: 9d:25:29:62:52:8d:7b:c2:f4:93:6e:c0:45:e2:18:bd:3d:32: 4c:8f:c3:f8:39:6d:28:4f:d2:39:20:67:d8:cb:9e:f0:89:e1: 35:e8:36:32:86:2b:45:5e:37:5e:26:be:fc:1b:a9:fe:db:28: a2:49:61:c9:73:e1:ef:b2:2a:95:c1:eb:0a:cf:3a:3b:b2:d2: d8:9c:12:27:a5:3c:39:12:23:6a:63:f2:09:9b:8c:da:5c:47: af:b8:2e:f9:a8:b6:64:ed:bf:aa:fd:81:0b:dd:32:6b:c7:66: f9:3c:72:03:10:6f:86:2e:1f:00:a0:bd:3c:ab:ba:34:47:c9: 4c:23:10:a5:1f:68:92:e7:34:f6:d3:01:6f:11:07:69:3a:b0: 6f:7e:92:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7OnHWAs8y8GC0skFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk Mzg0YjI1MjgtMGFlNC00YjQ5LWE3M2YtNDZjYmNkNjFhOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJlBJhJgyB8QUictK8V/Z/a09E6BPJcFqPoR NSpbwlr1+coBzNHpAc1L42WWn2WcwD9GZh87zpiwznv+L3G2L5yc1ZZcNv0QK0Lh tNxDVPAlMsZcn4XSzevtoqRVVcNq70so+HYkH5cQ6EUly4oorM20FK3tnWNKI/Ju hn2iNBgsObumCUZwVlS80eLuNLnc00qC8jfn6Ztplv9KnVx4gsKrGxu74TsJh+dh tNdlAYWD8QgBUr7wmWQyCXNJnA+D/2UM36/G9cBRQ2gs8Iud1/PKC9IKbzTT25qJ 6eJIcDMoL6YG7BV0GPPCeFYDALugp/JvkEi/AMAX+2SA235C3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb3f3Qj7itLmMh8AMJ7PCDbIAZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmE3NGMyNjEtOTVjMS0z MGNkLTk5NDEtMGY4NzYwMDY3ZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5b5lMx0z/xsauwxQmHeuuvaTlr9wS8h/UsUU9cJeZJY+tS5t5DrQAZ P5VGKCwSVBR5GNthCAKGAwYVq+HjLQFUu9lSeUNniv5i2qURXFM1lZ7JUaXLVBGb 6TYCIw8toqFr3Hqws4HVWc7FLJ0lKWJSjXvC9JNuwEXiGL09MkyPw/g5bShP0jkg Z9jLnvCJ4TXoNjKGK0VeN14mvvwbqf7bKKJJYclz4e+yKpXB6wrPOjuy0ticEiel PDkSI2pj8gmbjNpcR6+4LvmotmTtv6r9gQvdMmvHZvk8cgMQb4YuHwCgvTyrujRH yUwjEKUfaJLnNPbTAW8RB2k6sG9+ki4= -----END CERTIFICATE-----Generated at Fri Sep 11 09:26:29 2026 by rpki-client