$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddb52ce6-b3f6-38eb-a149-927b03369a3a.roa File: ddb52ce6-b3f6-38eb-a149-927b03369a3a.roa (raw, json) Hash identifier: tn4PLLy/jHOWN9ZVr7rgGgy8Nc4rxCH7PHb9ESTVfLc= Subject key identifier: F6:FE:EC:DF:27:99:C9:D7:D8:59:9D:0E:2E:D9:2C:7D:F0:57:99:6F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F2E80E34B0BFCD24FA113C200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddb52ce6-b3f6-38eb-a149-927b03369a3a.roa Signing time: Tue 15 Sep 2026 09:22:20 +0000 ROA not before: Tue 15 Sep 2026 09:22:20 +0000 ROA not after: Mon 14 Dec 2026 10:22:20 +0000 asID: 208185 IP address blocks: 172.111.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:80:e3:4b:0b:fc:d2:4f:a1:13:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 15 09:22:20 2026 GMT Not After : Dec 14 10:22:20 2026 GMT Subject: CN=52122792-1202-4e65-9450-6e01a11e6f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:2a:74:4d:df:9a:3a:32:59:b9:18:5f:40: 94:29:a0:1c:2f:2c:6d:0a:00:c9:40:27:25:98:d0: 0f:02:1a:41:43:fd:52:be:78:0e:69:68:cb:19:c6: a5:e7:36:52:6e:a8:aa:39:f0:bd:0c:8f:b4:5d:47: 66:5f:35:7e:4e:b3:63:5c:32:20:a5:81:aa:a5:b4: 12:82:0b:98:0b:3f:e9:b0:10:4d:6e:34:eb:31:99: d7:a1:b2:f4:34:34:d4:d0:91:99:af:a5:9d:8b:c7: 3e:87:e6:15:01:00:e0:71:54:a6:42:53:bc:40:bc: 17:20:60:0f:cd:20:db:ee:28:ed:5a:9d:01:7e:5b: 44:c7:1b:c1:ea:21:6c:4d:45:18:54:5a:67:92:1a: 16:66:3f:bc:e3:b9:56:4b:c0:d0:39:4c:95:46:7a: eb:d9:8f:4b:7c:90:90:e7:93:42:3c:09:26:8c:d7: b2:05:12:fd:fe:38:ae:0d:e1:c4:8a:25:55:23:0e: c3:03:9e:ed:0d:61:bd:2a:ee:19:81:ee:a8:c8:db: e3:92:5d:59:1f:9a:3e:b9:d7:31:90:4d:59:3f:59: 64:9c:71:2a:8e:08:21:3c:38:fe:47:e9:71:bb:c3: 13:d6:5c:24:b9:38:ad:f6:cd:f6:ff:c8:56:73:9a: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:EC:DF:27:99:C9:D7:D8:59:9D:0E:2E:D9:2C:7D:F0:57:99:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddb52ce6-b3f6-38eb-a149-927b03369a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9e:62:ec:c4:33:7c:91:b1:75:c4:b9:d2:5b:43:a7:d3:68: 11:d8:f4:5b:cf:11:5c:2e:dd:70:54:07:ba:af:40:a3:79:13: 1d:46:5a:5a:e7:7a:61:b3:83:c6:c4:20:c3:a9:1e:83:a9:d0: 07:34:f3:53:3b:dd:ef:d6:2a:6b:c5:b0:48:a6:27:c0:40:b1: b6:58:29:8b:f1:ed:26:bf:e6:7e:af:2e:3e:02:a9:2c:5c:b8: a0:cb:81:71:0d:ec:8b:f2:a5:e6:66:3e:4e:a6:ec:d2:13:d7: 09:01:ee:7e:66:1a:b5:4c:24:fe:f1:3c:d2:52:8a:56:d2:48: a6:f4:ee:0c:e7:f2:da:0c:d2:33:a7:8f:e9:ee:cf:90:07:4a: 10:92:34:fd:45:bc:8f:cf:17:cd:0a:97:b2:7e:c7:5f:cc:5b: 0d:99:4e:c2:5f:b3:86:09:3c:9b:0c:7e:f5:f0:b3:b2:e9:a4: 11:bf:7e:ce:2e:27:3a:53:68:28:c4:d6:5a:14:08:43:86:04: 97:23:c1:c9:61:24:d6:1a:f1:6f:7f:1f:90:cb:79:4d:0b:50: 9e:4a:09:c9:b9:98:cc:6a:2b:bb:eb:63:af:f4:41:22:31:20: a4:5d:6f:26:4b:3d:61:2b:44:1c:f0:45:8b:ac:73:de:cb:a1: 58:73:ea:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8ugONLC/zST6ETwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxNTA5MjIyMFoXDTI2MTIxNDEwMjIyMFowLzEtMCsGA1UEAxMk NTIxMjI3OTItMTIwMi00ZTY1LTk0NTAtNmUwMWExMWU2ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwcqdE3fmjoyWbkYX0CUKaAcLyxtCgDJQCcl mNAPAhpBQ/1SvngOaWjLGcal5zZSbqiqOfC9DI+0XUdmXzV+TrNjXDIgpYGqpbQS gguYCz/psBBNbjTrMZnXobL0NDTU0JGZr6Wdi8c+h+YVAQDgcVSmQlO8QLwXIGAP zSDb7ijtWp0BfltExxvB6iFsTUUYVFpnkhoWZj+847lWS8DQOUyVRnrr2Y9LfJCQ 55NCPAkmjNeyBRL9/jiuDeHEiiVVIw7DA57tDWG9Ku4Zge6oyNvjkl1ZH5o+udcx kE1ZP1lknHEqjgghPDj+R+lxu8MT1lwkuTit9s32/8hWc5qbmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb+7N8nmcnX2FmdDi7ZLH3wV5lvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGRiNTJjZTYtYjNmNi0z OGViLWExNDktOTI3YjAzMzY5YTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyeYuzEM3yRsXXEudJbQ6fTaBHY9FvPEVwu3XBUB7qvQKN5Ex1GWlrn emGzg8bEIMOpHoOp0Ac081M73e/WKmvFsEimJ8BAsbZYKYvx7Sa/5n6vLj4CqSxc uKDLgXEN7IvypeZmPk6m7NIT1wkB7n5mGrVMJP7xPNJSilbSSKb07gzn8toM0jOn j+nuz5AHShCSNP1FvI/PF80Kl7J+x1/MWw2ZTsJfs4YJPJsMfvXws7LppBG/fs4u JzpTaCjE1loUCEOGBJcjwclhJNYa8W9/H5DLeU0LUJ5KCcm5mMxqK7vrY6/0QSIx IKRdbyZLPWErRBzwRYusc97LoVhz6nQ= -----END CERTIFICATE-----Generated at Fri Sep 18 22:06:18 2026 by rpki-client