$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json) Hash identifier: RuacRBaXx2jkhr9kACVCfJl1iRPCve8XNnOYsri4f2U= Subject key identifier: A3:4C:99:EC:5E:24:71:D1:14:44:E2:73:33:3D:C0:01:73:11:5D:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EE0C200DEFCB2833E5C9CAA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 3223 IP address blocks: 172.111.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:00:de:fc:b2:83:3e:5c:9c:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=af87b948-d3e9-48f2-a929-8e65a5cba2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:3a:05:fe:8d:f4:fb:73:be:e6:f4:fc:b8: b3:dc:50:5c:14:68:22:78:b4:e8:6f:10:92:bb:d3: d0:62:06:7b:3f:37:68:dd:52:41:6a:e6:04:79:0b: 41:49:36:cc:23:38:7b:58:ea:30:53:a9:ae:51:36: c6:63:71:ef:dd:75:2b:7a:0a:57:b1:f0:a6:80:f9: 2a:5b:ab:6d:a9:33:13:a5:ad:bc:b9:3e:a2:6e:a7: cc:e0:ee:3b:55:1a:4d:00:75:4a:03:a5:b5:5b:7c: fb:31:a5:c8:f6:90:1e:d8:5a:ea:9c:8d:9f:80:96: f8:68:37:25:b5:5c:b2:df:64:70:24:63:0c:b6:d2: f5:52:2c:43:b2:d1:3b:1e:e1:dc:04:f0:f3:65:f2: 82:7e:81:50:60:0d:b8:d5:bd:bf:70:84:04:f9:2e: 1f:ee:29:41:bb:c1:42:be:71:9f:01:95:38:55:9a: dd:4f:46:95:58:49:ac:ff:40:f0:68:2a:f0:3c:d6: 4a:fa:c1:7b:bd:47:ae:bc:9d:ab:44:7e:a4:ba:5d: ea:61:84:9c:3b:c7:b9:97:f4:3a:c8:20:72:b3:5d: 0d:12:57:33:6f:51:fd:b5:72:26:93:36:26:29:af: b3:1d:f5:80:1f:4d:33:10:95:02:ad:de:7d:30:c5: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:99:EC:5E:24:71:D1:14:44:E2:73:33:3D:C0:01:73:11:5D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:62:a1:10:94:42:d5:85:da:af:9f:07:1f:8f:5e:12:a1:12: 19:9a:21:c5:00:ea:60:7e:35:59:e6:f3:42:bd:6b:46:f5:c0: 51:aa:16:9c:1a:b9:60:99:3f:23:84:96:6f:46:c2:12:6d:06: 4e:1a:9e:8a:2b:1a:24:63:19:2e:bf:ad:8c:4d:b6:9b:90:c9: 4d:c4:00:cf:02:b1:67:85:0b:90:c1:4a:bd:5e:f8:78:24:7e: 1b:0e:97:2a:9f:66:42:22:89:58:22:44:24:20:a4:cb:b1:b2: b2:6a:1a:80:81:d2:4d:df:6c:ce:a7:a6:80:89:94:be:39:a5: 4a:f8:92:91:c1:0d:65:fc:68:04:4d:a0:54:1f:f3:31:ab:f6: c2:45:9e:8c:ce:a2:e7:a5:84:35:83:54:b2:4e:b2:10:cb:15: 4c:99:d8:3a:99:41:3b:b7:10:f6:9a:5c:91:52:76:08:7c:0a: ac:35:92:73:00:b3:0b:70:e1:11:a7:84:1a:91:b0:3b:8f:23: cd:e6:81:56:a0:bb:eb:a6:3e:de:06:a6:b4:7a:7e:ac:11:75: 4f:46:8c:e9:89:40:ae:ec:c7:8f:c1:cb:0e:52:ef:6e:71:2d: b8:66:4b:ee:ac:a5:d1:3c:6d:92:29:56:dc:93:1a:fc:ec:6c: 93:6c:97:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgDe/LKDPlycqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YWY4N2I5NDgtZDNlOS00OGYyLWE5MjktOGU2NWE1Y2JhMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz06Bf6N9Ptzvub0/Liz3FBcFGgieLTobxCS u9PQYgZ7Pzdo3VJBauYEeQtBSTbMIzh7WOowU6muUTbGY3Hv3XUregpXsfCmgPkq W6ttqTMTpa28uT6ibqfM4O47VRpNAHVKA6W1W3z7MaXI9pAe2FrqnI2fgJb4aDcl tVyy32RwJGMMttL1UixDstE7HuHcBPDzZfKCfoFQYA241b2/cIQE+S4f7ilBu8FC vnGfAZU4VZrdT0aVWEms/0DwaCrwPNZK+sF7vUeuvJ2rRH6kul3qYYScO8e5l/Q6 yCBys10NElczb1H9tXImkzYmKa+zHfWAH00zEJUCrd59MMWGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNMmexeJHHRFETiczM9wAFzEV26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWE3ZTBkZWYtODBjNi0z MGQ0LTliMzctMDdhZTBiNDhiZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINioRCUQtWF2q+fBx+PXhKhEhmaIcUA6mB+NVnm80K9a0b1wFGqFpwa uWCZPyOElm9GwhJtBk4anoorGiRjGS6/rYxNtpuQyU3EAM8CsWeFC5DBSr1e+Hgk fhsOlyqfZkIiiVgiRCQgpMuxsrJqGoCB0k3fbM6npoCJlL45pUr4kpHBDWX8aARN oFQf8zGr9sJFnozOouelhDWDVLJOshDLFUyZ2DqZQTu3EPaaXJFSdgh8Cqw1knMA swtw4RGnhBqRsDuPI83mgVagu+umPt4GprR6fqwRdU9GjOmJQK7sx4/Byw5S725x LbhmS+6spdE8bZIpVtyTGvzsbJNsl7E= -----END CERTIFICATE-----Generated at Fri Sep 4 04:13:09 2026 by rpki-client