$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa File: ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa (raw, json) Hash identifier: 0+dZhrb7ss9n+49Wb2hpT8Zl1SuKdoEB7HD2nGKvR6Q= Subject key identifier: F9:82:FE:FE:B5:91:1F:38:3D:BE:C1:AE:8C:F2:3C:D5:2D:8C:E6:60 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EE4F1F06699EAA7984F289480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 132372 IP address blocks: 172.111.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:f0:66:99:ea:a7:98:4f:28:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=f1d64724-aad3-4b9e-aae9-13c35edf9925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:37:29:5a:b9:9b:be:d3:c3:d9:b7:5c:59: 01:90:ce:cc:26:63:fb:d8:40:d8:e4:b3:ba:42:b0: 24:2d:7e:29:40:c2:1b:43:6a:ca:81:5a:85:b3:a0: 65:db:f6:0b:e2:e4:bc:7f:eb:01:3b:be:9f:b6:57: 36:04:4f:c4:d6:d7:5b:70:27:b7:dc:ba:8b:98:99: 68:50:d7:da:84:29:f8:f4:6e:4b:b9:ec:1d:23:ae: 07:8a:c4:3f:1c:96:d9:de:5c:18:e4:69:d8:48:b0: 75:6b:d7:cc:a3:0c:6b:fc:24:26:c1:c8:62:51:98: 9f:07:53:48:0f:e4:0d:1a:6b:1c:d4:06:a9:fa:c8: 0c:77:fa:c6:38:f0:1a:bf:4d:71:64:71:34:4d:88: bf:f4:12:3e:d3:1c:39:bc:05:8e:2b:97:61:42:24: b5:99:97:85:aa:76:8f:5a:99:c9:d0:87:22:e3:bc: a2:a1:ad:19:c6:fe:8f:b8:aa:2a:a1:4b:58:56:19: 5b:7c:79:cd:2b:57:d3:3e:05:bb:d9:88:6b:2e:49: cb:77:7d:0c:da:7c:4c:0d:73:0b:46:a2:60:29:fa: 30:dc:02:c0:7a:58:60:06:44:79:95:55:81:35:a3: 9d:c0:93:b9:45:86:cc:3d:4c:71:70:c7:37:5a:53: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:82:FE:FE:B5:91:1F:38:3D:BE:C1:AE:8C:F2:3C:D5:2D:8C:E6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff13ce9c-4a95-3ae1-a7e7-d0a526575fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fb:18:ec:93:17:30:68:c0:82:49:55:d7:5d:d4:ac:f1:be: 32:cd:7b:a4:25:52:10:17:f5:09:a1:58:b8:b9:1b:7e:7c:b6: ef:a6:b0:f7:e4:3f:eb:0a:d5:e9:04:a5:49:c0:f8:ee:38:70: a0:00:47:27:68:df:b4:e6:0c:d3:34:c9:54:0c:4f:a8:a5:df: 8b:25:fc:bb:22:93:08:f1:5d:a2:e6:2b:6d:30:f9:e4:52:e9: 58:45:e9:13:96:df:bf:30:f5:b6:21:d5:09:04:ae:92:bc:1e: b3:1c:09:78:bd:fa:81:e0:b2:e5:db:d4:97:4c:d0:92:6e:da: 01:35:14:4c:93:44:66:85:6c:43:3f:06:b1:d8:0c:2e:d5:30: d0:8f:6f:47:44:d9:64:15:a2:5e:73:7d:4d:6f:cb:41:58:70: 52:34:28:fd:bc:ea:7e:df:3a:aa:06:bc:6a:19:f2:9b:92:43: 08:80:57:59:46:64:63:da:8c:fa:48:eb:fa:de:5d:0d:bd:be: 36:41:90:c1:28:82:91:63:29:07:95:84:5a:d4:5f:ae:da:73: 51:0e:89:2d:13:b3:71:63:a4:00:35:23:54:63:18:9b:b1:3d: 42:d4:be:b5:5a:92:49:9c:6a:7d:7e:e0:15:27:3a:b8:fa:0d: b7:7e:5c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8fBmmeqnmE8olIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ZjFkNjQ3MjQtYWFkMy00YjllLWFhZTktMTNjMzVlZGY5OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKc3KVq5m77Tw9m3XFkBkM7MJmP72EDY5LO6 QrAkLX4pQMIbQ2rKgVqFs6Bl2/YL4uS8f+sBO76ftlc2BE/E1tdbcCe33LqLmJlo UNfahCn49G5LuewdI64HisQ/HJbZ3lwY5GnYSLB1a9fMowxr/CQmwchiUZifB1NI D+QNGmsc1Aap+sgMd/rGOPAav01xZHE0TYi/9BI+0xw5vAWOK5dhQiS1mZeFqnaP WpnJ0Ici47yioa0Zxv6PuKoqoUtYVhlbfHnNK1fTPgW72YhrLknLd30M2nxMDXML RqJgKfow3ALAelhgBkR5lVWBNaOdwJO5RYbMPUxxcMc3WlOprQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmC/v61kR84Pb7BrozyPNUtjOZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmYxM2NlOWMtNGE5NS0z YWUxLWE3ZTctZDBhNTI2NTc1ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT7GOyTFzBowIJJVddd1KzxvjLNe6QlUhAX9QmhWLi5G358tu+msPfk P+sK1ekEpUnA+O44cKAARydo37TmDNM0yVQMT6il34sl/LsikwjxXaLmK20w+eRS 6VhF6ROW378w9bYh1QkErpK8HrMcCXi9+oHgsuXb1JdM0JJu2gE1FEyTRGaFbEM/ BrHYDC7VMNCPb0dE2WQVol5zfU1vy0FYcFI0KP286n7fOqoGvGoZ8puSQwiAV1lG ZGPajPpI6/reXQ29vjZBkMEogpFjKQeVhFrUX67ac1EOiS0Ts3FjpAA1I1RjGJux PULUvrVakkmcan1+4BUnOrj6Dbd+XMk= -----END CERTIFICATE-----Generated at Sat Sep 5 01:48:39 2026 by rpki-client