$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa File: 4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa (raw, json) Hash identifier: ca4zpbeWhX0x1gwkgCsUjOGrGGAYCdKhI2llhH8nsqg= Subject key identifier: E8:BA:B1:11:12:3E:3E:51:D9:FD:20:95:FB:C8:9B:4C:7F:FD:69:E8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4F081782B2F29648C2E7AD30 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 172.111.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:17:82:b2:f2:96:48:c2:e7:ad:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=b24ecdfa-b1c9-4775-91e9-da412fca5d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:5b:83:93:f8:a8:23:a5:90:16:a7:9b:0f: a5:77:87:34:61:d5:41:c4:bc:f2:f4:18:82:27:9d: df:23:38:d8:f4:07:ae:23:3c:6a:d2:dc:e6:93:a7: 0c:cb:48:14:f7:65:18:3c:8d:ac:33:21:fd:15:5c: f0:4b:5e:38:6d:59:fb:dc:64:7b:dc:19:f1:42:dd: ce:91:43:fd:aa:88:86:3e:39:f9:03:1e:10:70:eb: 76:05:75:9a:fc:bd:6a:9a:14:b7:df:ae:3c:d9:31: be:d3:f7:bc:14:2e:b8:7a:9f:ba:c6:39:cf:b3:05: 7d:f5:ea:94:0c:59:de:16:78:71:c8:df:04:c4:d2: e4:3e:97:9b:71:05:32:41:1d:25:8b:73:29:af:b7: 23:52:60:91:f8:85:bb:d7:f7:24:c4:8b:78:96:15: 09:1d:7e:0a:b4:8a:67:58:a5:f2:45:27:17:74:9c: b3:0b:a7:bf:44:62:64:e9:9a:7c:38:09:94:e6:c1: 19:c4:2b:3c:c0:da:fb:76:bc:c7:df:00:58:b6:40: e3:72:e2:54:4f:e5:43:43:4d:6e:0b:04:1b:7f:a5: 29:7c:c5:8a:d3:06:98:f4:bd:ad:fe:40:2e:d2:9b: 9f:e1:68:c3:8d:64:92:ef:e8:da:a1:89:62:43:90: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BA:B1:11:12:3E:3E:51:D9:FD:20:95:FB:C8:9B:4C:7F:FD:69:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a5:30:66:59:e8:41:99:29:96:bc:70:64:74:89:c8:ac:6a: e3:5e:bb:c2:1c:4c:f0:ff:48:1f:72:43:0c:6b:6a:31:a7:07: fa:8f:57:52:c2:cd:63:b1:85:a1:32:9b:50:db:28:52:a2:42: 43:7c:9c:8d:1c:25:4e:e4:7c:66:95:a1:20:ce:69:03:23:6d: cd:42:9f:30:33:31:8f:85:c6:06:fb:50:73:77:14:b3:8c:59: 2a:79:d1:46:4e:5a:ae:f9:b1:57:ca:9a:91:34:8e:de:7a:af: be:0b:06:3e:f9:5f:2f:b7:11:07:d8:8c:d9:d5:f7:47:70:8e: 3a:19:1a:0c:f6:c9:73:4f:d6:68:20:23:4a:15:fa:9b:51:cb: 5b:52:74:32:52:03:44:7f:85:0b:e2:06:db:f9:e6:f5:1f:65: d3:b2:07:76:a1:e3:48:3f:65:ac:58:9b:15:84:aa:e0:7e:f5: 30:2e:b9:f3:17:84:a9:b2:82:46:1a:64:43:e4:5e:80:97:cb: 17:5d:ce:b4:4e:76:20:b8:07:93:60:94:f1:d8:04:43:61:48: ab:4b:ac:08:4f:a1:f2:b1:50:36:90:ee:e4:4c:40:09:2e:07: 35:04:bc:11:2a:91:99:77:02:e0:17:20:b4:89:89:24:f9:04: a4:46:82:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBeCsvKWSMLnrTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YjI0ZWNkZmEtYjFjOS00Nzc1LTkxZTktZGE0MTJmY2E1ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Nbg5P4qCOlkBanmw+ld4c0YdVBxLzy9BiC J53fIzjY9AeuIzxq0tzmk6cMy0gU92UYPI2sMyH9FVzwS144bVn73GR73BnxQt3O kUP9qoiGPjn5Ax4QcOt2BXWa/L1qmhS336482TG+0/e8FC64ep+6xjnPswV99eqU DFneFnhxyN8ExNLkPpebcQUyQR0li3Mpr7cjUmCR+IW71/ckxIt4lhUJHX4KtIpn WKXyRScXdJyzC6e/RGJk6Zp8OAmU5sEZxCs8wNr7drzH3wBYtkDjcuJUT+VDQ01u CwQbf6UpfMWK0waY9L2t/kAu0puf4WjDjWSS7+jaoYliQ5Dw5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi6sRESPj5R2f0glfvIm0x//WnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGJlMmIyZTktYmJmZi0z ZmQyLTlkYWYtZThhY2I3NTUyNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIilMGZZ6EGZKZa8cGR0icisauNeu8IcTPD/SB9yQwxrajGnB/qPV1LC zWOxhaEym1DbKFKiQkN8nI0cJU7kfGaVoSDOaQMjbc1CnzAzMY+Fxgb7UHN3FLOM WSp50UZOWq75sVfKmpE0jt56r74LBj75Xy+3EQfYjNnV90dwjjoZGgz2yXNP1mgg I0oV+ptRy1tSdDJSA0R/hQviBtv55vUfZdOyB3ah40g/ZaxYmxWEquB+9TAuufMX hKmygkYaZEPkXoCXyxddzrROdiC4B5NglPHYBENhSKtLrAhPofKxUDaQ7uRMQAku BzUEvBEqkZl3AuAXILSJiST5BKRGgow= -----END CERTIFICATE-----Generated at Tue Oct 6 01:27:03 2026 by rpki-client