$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa File: a2894994-fc45-31ef-9443-e6e1133a12f2.roa (raw, json) Hash identifier: NatAU/eEnXNcsH49nA13BD3WoU5eaUM4wp9egSlcwvo= Subject key identifier: 60:24:4B:22:D3:2F:E7:59:A5:AB:DE:23:97:CB:7D:36:79:99:EE:D5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ED16726F0B970490208EA9A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 132372 IP address blocks: 172.111.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:26:f0:b9:70:49:02:08:ea:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=a85a11ba-c6dc-4dc6-8e9f-6b0fa8c8ebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:90:60:43:18:0c:6e:67:e7:e8:20:4f:b6: 71:dd:1b:5f:dc:ac:4e:74:c1:18:52:19:5e:0b:a7: bf:43:a4:4f:bb:df:cc:67:c9:8d:b2:20:c7:c5:ef: eb:c4:34:c3:14:cb:f4:3d:3a:58:ff:7d:91:b7:4f: 0a:50:e0:84:7b:f1:05:81:98:30:31:98:f4:e9:87: 2e:80:35:ed:b1:3c:80:27:32:d8:7b:52:58:3a:40: 51:4b:34:8e:46:d8:45:03:0c:1f:49:25:43:7c:cd: 6e:f5:6f:19:9e:8f:ea:bc:e0:7a:34:b6:e9:5f:f3: 4f:b7:26:5e:ae:aa:5b:cd:21:88:55:79:00:9e:e5: 24:bc:eb:39:f9:3c:5f:75:dc:60:bf:8e:ce:03:f2: 83:00:e0:65:69:93:04:2b:70:79:b0:df:d0:1d:f6: fc:ef:41:15:6f:1b:27:a0:51:96:e7:3d:44:37:e3: 56:5d:ea:95:df:29:28:98:30:bf:a6:b1:5f:18:64: 0d:dc:26:a8:2f:9d:01:75:00:b0:83:5e:5c:04:75: ba:8d:d1:9c:53:81:07:67:e6:9a:63:80:74:f0:25: 2f:7b:e4:bf:e2:ff:84:c6:e0:d1:4d:89:27:49:d7: 9e:1a:88:32:d5:86:64:99:50:e8:8c:80:65:38:f3: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:24:4B:22:D3:2F:E7:59:A5:AB:DE:23:97:CB:7D:36:79:99:EE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:98:67:8d:63:0c:40:d5:d7:38:88:ee:e1:0c:38:b6:d2:93: d9:d2:9d:94:d6:6b:3c:9f:be:36:79:3d:f8:2a:79:f0:04:64: 1d:67:ab:ac:05:5a:ae:d0:a8:38:88:39:1a:f0:a8:df:f0:d3: b2:47:bb:e4:fe:6c:c1:15:6c:2c:3a:bf:24:a2:6c:f9:93:c5: 88:0b:15:4d:5f:19:bd:2a:22:45:fc:21:8a:8b:c2:09:60:b2: e1:04:6e:a5:70:5c:d1:0b:8b:7d:bd:4b:01:55:6d:58:b6:f8: 9c:51:4b:d2:6f:b7:2c:c7:16:85:cf:09:b7:3f:65:9a:5b:a2: d4:35:81:3d:26:43:c5:10:57:f0:b4:51:93:36:e3:6a:a7:ca: 6e:40:da:69:48:1b:05:9d:fa:61:56:0c:15:78:fd:43:d5:5c: a3:a5:c3:44:b3:fd:93:91:23:0d:30:ec:6a:42:f7:9a:59:5f: f1:b8:5f:ab:c3:3c:92:86:21:cf:ae:e2:46:e7:e7:cb:de:e9: 3a:ff:56:ec:49:69:fd:23:86:09:b5:a9:87:c8:8c:6d:63:3c: 3f:88:5a:03:90:cf:5a:4e:77:83:e9:61:95:31:5c:67:6a:6f: 2d:62:dc:90:62:d1:44:6f:5d:66:56:e1:dc:38:e3:e2:d7:fd: 23:5c:08:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZybwuXBJAgjqmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk YTg1YTExYmEtYzZkYy00ZGM2LThlOWYtNmIwZmE4YzhlYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysSQYEMYDG5n5+ggT7Zx3Rtf3KxOdMEYUhle C6e/Q6RPu9/MZ8mNsiDHxe/rxDTDFMv0PTpY/32Rt08KUOCEe/EFgZgwMZj06Ycu gDXtsTyAJzLYe1JYOkBRSzSORthFAwwfSSVDfM1u9W8Zno/qvOB6NLbpX/NPtyZe rqpbzSGIVXkAnuUkvOs5+Txfddxgv47OA/KDAOBlaZMEK3B5sN/QHfb870EVbxsn oFGW5z1EN+NWXeqV3ykomDC/prFfGGQN3CaoL50BdQCwg15cBHW6jdGcU4EHZ+aa Y4B08CUve+S/4v+ExuDRTYknSdeeGogy1YZkmVDojIBlOPP/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAkSyLTL+dZpaveI5fLfTZ5me7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTI4OTQ5OTQtZmM0NS0z MWVmLTk0NDMtZTZlMTEzM2ExMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqYZ41jDEDV1ziI7uEMOLbSk9nSnZTWazyfvjZ5PfgqefAEZB1nq6wF Wq7QqDiIORrwqN/w07JHu+T+bMEVbCw6vySibPmTxYgLFU1fGb0qIkX8IYqLwglg suEEbqVwXNELi329SwFVbVi2+JxRS9JvtyzHFoXPCbc/ZZpbotQ1gT0mQ8UQV/C0 UZM242qnym5A2mlIGwWd+mFWDBV4/UPVXKOlw0Sz/ZORIw0w7GpC95pZX/G4X6vD PJKGIc+u4kbn58ve6Tr/VuxJaf0jhgm1qYfIjG1jPD+IWgOQz1pOd4PpYZUxXGdq by1i3JBi0URvXWZW4dw44+LX/SNcCMA= -----END CERTIFICATE-----Generated at Sat Sep 5 03:59:25 2026 by rpki-client