$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa File: 3d44ec8a-b582-344c-8805-a64b89c845f0.roa (raw, json) Hash identifier: YyUmhXjxdlIs6yMQHg+L9Od+CsuFEksqTjbAXCTx0yM= Subject key identifier: 91:1B:7A:EF:1B:3C:02:50:4F:70:CC:EE:5C:56:16:44:50:1A:6A:D3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EE7BCB5CD887F5E7A04E1DB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.111.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b5:cd:88:7f:5e:7a:04:e1:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=86005a15-c492-4260-b298-11d2fdd8c869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:e5:a8:dc:bf:2d:d8:09:8f:db:78:34:a7: 3e:a4:38:ae:a6:2e:84:df:31:a2:8c:ab:c8:de:a6: 5e:88:67:ed:2b:e8:bc:cd:24:fb:88:5a:90:b6:53: 36:dd:1f:41:18:ef:68:3b:f8:28:01:23:d5:dd:ba: e1:15:58:97:6d:4a:44:53:64:bb:55:c3:16:10:13: d4:b1:7f:2d:83:02:88:9a:9d:43:fb:09:74:e6:65: ca:b1:16:e0:e4:d8:60:b2:da:01:14:42:4c:44:2f: 19:a0:36:4e:32:c9:68:9d:dd:0b:a6:49:ff:21:a2: 93:fd:d7:28:70:8a:32:19:a1:1e:36:2e:29:c3:37: 93:66:66:d7:28:f0:99:2b:77:9c:30:ae:f9:f8:70: df:f6:28:92:f7:d3:b4:8b:77:4f:66:52:c2:e6:0a: c9:78:40:1f:b9:1d:2d:93:5c:18:58:92:75:01:5d: 52:1f:35:04:fb:6f:54:d3:50:ff:76:b2:b9:9d:1c: 81:b9:ed:bf:72:ea:57:75:4e:49:2c:32:5e:a3:6a: a5:74:3a:3b:f5:99:96:c4:a2:00:49:0a:d5:72:73: 72:78:5e:97:8e:a7:3d:9b:4e:18:ec:a5:ad:ef:ad: 3b:2d:ca:1d:d6:19:34:1b:9b:f2:89:42:24:f5:3f: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:7A:EF:1B:3C:02:50:4F:70:CC:EE:5C:56:16:44:50:1A:6A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:19:00:8f:22:a0:1d:4d:49:25:9f:90:1f:b3:d4:96:3f:60: 56:0e:10:d2:4a:be:9d:9e:56:8c:1f:0d:2f:4c:6c:76:59:ad: 5e:a5:a7:66:d1:b4:e1:2b:13:4e:e4:02:0d:35:0c:1b:63:92: 13:0f:34:d3:4f:c4:d5:40:e2:a7:b1:0f:77:dc:30:6d:5d:a8: 2b:7a:4e:37:63:e3:24:6a:c5:88:c4:db:3b:9b:fd:2c:3a:c5: 79:60:fe:bb:44:20:0c:d5:0a:8e:51:bb:b6:cc:e6:22:e7:0b: 11:79:af:39:95:61:5e:1c:e6:47:40:fd:66:bd:87:05:85:5e: 38:db:76:6d:7d:de:37:56:59:6d:f1:65:14:57:25:bd:2b:64: fe:a3:56:73:35:16:ef:b2:81:66:4c:84:08:af:25:c6:47:1c: e6:75:1b:27:d5:d3:a0:df:b4:bd:d8:c1:da:5a:90:6a:b4:82: ad:60:30:ad:f5:1e:29:03:8e:56:22:1d:9a:4c:24:20:79:c8: f8:0a:03:55:35:eb:f2:7b:15:0e:96:7c:bf:46:df:92:01:43: 35:27:0c:0a:61:3c:83:64:f5:88:f0:e5:a8:0c:51:d7:03:8e: 24:13:6a:42:df:f6:23:d2:27:da:28:92:37:18:ff:90:db:7c: 6f:d7:d8:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLXNiH9eegTh2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ODYwMDVhMTUtYzQ5Mi00MjYwLWIyOTgtMTFkMmZkZDhjODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinvlqNy/LdgJj9t4NKc+pDiupi6E3zGijKvI 3qZeiGftK+i8zST7iFqQtlM23R9BGO9oO/goASPV3brhFViXbUpEU2S7VcMWEBPU sX8tgwKImp1D+wl05mXKsRbg5NhgstoBFEJMRC8ZoDZOMslond0Lpkn/IaKT/dco cIoyGaEeNi4pwzeTZmbXKPCZK3ecMK75+HDf9iiS99O0i3dPZlLC5grJeEAfuR0t k1wYWJJ1AV1SHzUE+29U01D/drK5nRyBue2/cupXdU5JLDJeo2qldDo79ZmWxKIA SQrVcnNyeF6Xjqc9m04Y7KWt7607Lcod1hk0G5vyiUIk9T/45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEbeu8bPAJQT3DM7lxWFkRQGmrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2Q0NGVjOGEtYjU4Mi0z NDRjLTg4MDUtYTY0Yjg5Yzg0NWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgZAI8ioB1NSSWfkB+z1JY/YFYOENJKvp2eVowfDS9MbHZZrV6lp2bR tOErE07kAg01DBtjkhMPNNNPxNVA4qexD3fcMG1dqCt6Tjdj4yRqxYjE2zub/Sw6 xXlg/rtEIAzVCo5Ru7bM5iLnCxF5rzmVYV4c5kdA/Wa9hwWFXjjbdm193jdWWW3x ZRRXJb0rZP6jVnM1Fu+ygWZMhAivJcZHHOZ1GyfV06DftL3YwdpakGq0gq1gMK31 HikDjlYiHZpMJCB5yPgKA1U16/J7FQ6WfL9G35IBQzUnDAphPINk9Yjw5agMUdcD jiQTakLf9iPSJ9ookjcY/5DbfG/X2Bk= -----END CERTIFICATE-----Generated at Fri Sep 4 22:53:46 2026 by rpki-client