$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa File: 59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa (raw, json) Hash identifier: bjMmUo0MNVxVusF+x2YrNPFs7G0W4g69khG2Gnwyw/8= Subject key identifier: C0:0A:2F:06:E4:EA:23:0C:F7:9C:45:54:49:7F:3D:6F:52:38:6F:D5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F6C583989B452CE5D9F5E5140 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 45671 IP address blocks: 172.111.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:39:89:b4:52:ce:5d:9f:5e:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=e8e90f41-0f55-4229-9c56-963736371ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:08:30:b2:ab:2a:73:fd:82:9f:32:aa:1e: fc:c3:13:3f:9c:aa:ef:7e:d5:41:75:c9:95:eb:12: 1f:cd:f0:38:71:42:19:dd:f0:0a:9d:d9:dd:05:3d: 86:d7:e8:1f:8a:6b:7f:7d:b1:7d:35:cf:29:4d:25: 88:41:22:34:c8:34:fd:7a:1e:f1:e9:0c:df:02:bd: ba:0c:a0:a2:ae:ab:13:0f:0b:a2:54:57:f5:47:41: cf:43:92:d6:44:c4:f3:97:25:66:52:d6:0f:be:94: c5:0b:09:60:80:56:18:b8:3a:77:76:81:cf:cd:96: 79:96:43:0a:98:60:d7:a1:57:f9:fd:6a:d5:51:da: 67:07:dc:25:2a:46:5b:ed:8e:d7:61:5b:3f:1a:e8: c7:fd:55:0c:19:f9:a9:00:2e:15:e9:6a:7b:2b:68: 49:42:d0:b2:1f:3e:4c:82:48:de:a6:43:10:ef:e3: 6d:a8:a0:c2:03:ba:bb:e0:5c:36:57:67:99:a7:7b: 54:7b:1c:a9:48:ad:1b:1c:e7:ca:87:dd:1b:85:71: fd:86:cc:27:54:b7:a0:ae:89:ce:c3:cb:24:13:75: 5b:74:e7:a2:b1:05:a5:5f:fb:f2:f5:54:a8:89:75: 1e:ea:b0:b9:3e:89:25:4c:33:cc:76:f4:18:5d:92: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0A:2F:06:E4:EA:23:0C:F7:9C:45:54:49:7F:3D:6F:52:38:6F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:dd:73:cc:4d:33:d8:9e:65:b6:71:ae:0c:fa:1a:ad:7c:6e: 6e:25:89:a5:5d:76:7c:37:c2:c9:b6:98:e7:24:d3:55:a4:6c: d6:fe:71:bf:bd:5d:33:23:3e:16:c7:f1:39:5b:ba:e9:86:41: 51:1a:9f:be:6e:2b:23:2e:5d:68:01:3a:03:8a:98:dc:bb:a8: 36:54:07:00:14:5a:d7:6e:00:d2:0b:e1:25:95:28:27:a3:18: e0:af:51:5a:73:e4:c8:65:91:94:fa:36:98:d3:38:05:53:b5: ed:a3:af:8e:6a:b1:7f:13:31:e9:19:16:19:af:1d:45:be:a3: 26:f6:7b:02:a3:49:61:d3:b9:13:9c:c2:12:2d:b1:c7:05:f6: d8:d6:9a:4c:58:29:8f:40:12:37:2e:d7:97:60:17:c7:70:fb: 3a:67:1d:f9:ec:d6:09:59:d2:d1:75:7d:39:e5:22:91:6e:36: 29:30:f1:2a:28:fc:9c:05:89:59:6f:1d:d6:f6:f5:bc:7f:e4: 84:96:6f:71:c5:f5:6f:42:97:7d:1c:8e:b3:06:87:fd:ae:95: f5:f1:bc:66:4a:cf:c7:93:5a:8a:60:80:7f:be:57:e4:3b:37: c0:4c:a2:39:b2:c8:c3:49:14:74:64:2d:68:50:31:55:0d:dd: 2f:1f:c8:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDmJtFLOXZ9eUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZThlOTBmNDEtMGY1NS00MjI5LTljNTYtOTYzNzM2MzcxZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnEIMLKrKnP9gp8yqh78wxM/nKrvftVBdcmV 6xIfzfA4cUIZ3fAKndndBT2G1+gfimt/fbF9Nc8pTSWIQSI0yDT9eh7x6QzfAr26 DKCirqsTDwuiVFf1R0HPQ5LWRMTzlyVmUtYPvpTFCwlggFYYuDp3doHPzZZ5lkMK mGDXoVf5/WrVUdpnB9wlKkZb7Y7XYVs/GujH/VUMGfmpAC4V6Wp7K2hJQtCyHz5M gkjepkMQ7+NtqKDCA7q74Fw2V2eZp3tUexypSK0bHOfKh90bhXH9hswnVLegronO w8skE3VbdOeisQWlX/vy9VSoiXUe6rC5PoklTDPMdvQYXZLYhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAKLwbk6iMM95xFVEl/PW9SOG/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTlhMGEzNjMtYTEwYy0z N2M2LWFhYTQtNzNhMjdlMzQ4NWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACndc8xNM9ieZbZxrgz6Gq18bm4liaVddnw3wsm2mOck01WkbNb+cb+9 XTMjPhbH8TlbuumGQVEan75uKyMuXWgBOgOKmNy7qDZUBwAUWtduANIL4SWVKCej GOCvUVpz5MhlkZT6NpjTOAVTte2jr45qsX8TMekZFhmvHUW+oyb2ewKjSWHTuROc whItsccF9tjWmkxYKY9AEjcu15dgF8dw+zpnHfns1glZ0tF1fTnlIpFuNikw8Soo /JwFiVlvHdb29bx/5ISWb3HF9W9Cl30cjrMGh/2ulfXxvGZKz8eTWopggH++V+Q7 N8BMojmyyMNJFHRkLWhQMVUN3S8fyFs= -----END CERTIFICATE-----Generated at Sat Oct 24 10:41:39 2026 by rpki-client