$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa File: ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa (raw, json) Hash identifier: cm9nPk674y3BqPu2/uHwqiysg+KHMvTLL8AQRz0QMYc= Subject key identifier: C4:F8:8E:58:49:F2:E9:01:63:13:62:04:B9:7B:C8:12:F8:55:4A:98 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F497F2100C2705E8E1B59CC40 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 172.111.124.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:21:00:c2:70:5e:8e:1b:59:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=19e1e4d5-ded9-4279-8e31-f206e0df5ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:85:d4:80:6a:cf:09:18:65:71:24:5a:d2: d1:68:f1:96:86:4c:bf:f1:13:29:3b:08:56:76:92: eb:20:18:22:84:96:49:49:07:71:f7:22:4b:d9:81: 7a:5d:23:33:36:86:62:52:cb:62:95:59:de:2c:de: 53:4d:53:7b:38:be:f3:31:44:14:74:18:6b:2b:ec: b9:ac:e3:b3:2e:49:40:b3:38:76:6e:ac:ed:90:f3: 59:b6:04:d9:56:d0:bc:75:9f:dc:23:77:73:a7:4a: 72:3f:ee:30:04:31:16:d5:78:9e:9c:b8:bd:3f:f0: 66:9f:bf:d6:cf:1c:71:37:26:25:9a:f9:0b:8b:06: 30:1d:f4:f2:1f:73:cc:a4:c4:2e:e9:be:3b:2f:7c: 3f:1e:ec:78:1b:72:fd:f8:c3:cc:dc:f1:04:0f:25: 42:cc:b2:2e:88:f4:97:5d:56:04:08:2c:2c:78:a0: bb:9f:ed:aa:93:20:23:25:fa:76:42:aa:2f:ee:48: d8:65:fc:0a:a3:5e:4d:68:a2:b4:68:75:bc:77:a4: 70:9a:dc:42:d2:29:34:9a:5e:ab:f8:08:c3:20:68: 07:80:43:09:ec:33:02:65:2d:81:31:14:45:f3:dd: 20:bd:f6:a3:cf:57:3f:40:fe:51:5a:77:47:34:c5: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F8:8E:58:49:F2:E9:01:63:13:62:04:B9:7B:C8:12:F8:55:4A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.124.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:96:fd:0d:5f:e6:15:89:bf:9d:65:b7:8e:b1:0c:de:bb:ed: ee:eb:cc:86:0f:b4:59:f1:aa:0a:ad:29:c9:ef:19:a6:2d:ec: fc:fc:9a:c1:ec:a8:11:0c:d0:9e:24:b4:2e:de:97:91:08:9e: 3b:54:9b:cc:a2:70:9a:76:29:d0:d2:57:fe:06:70:c4:14:37: 39:e3:c9:72:92:c9:67:50:3b:f9:da:5f:5b:05:d9:56:93:c2: 80:ca:d0:12:74:f7:2a:ce:d6:27:b3:d1:14:1f:e8:86:81:bc: 61:84:cf:e7:47:1e:18:e5:73:21:25:02:ff:4e:8e:e5:43:0a: 10:3f:12:f0:5e:ab:f6:41:f3:66:a2:8f:9d:df:0d:9a:da:fe: 97:88:f7:35:0c:76:1b:76:50:a1:9a:d3:b3:79:53:84:b8:64: 12:6c:71:94:9c:6c:d1:36:c0:5d:ea:5e:8b:32:aa:bb:cc:6e: 0e:b6:b6:b0:b7:42:37:58:cf:c2:00:2b:0d:cb:9a:44:23:20: e1:d2:50:27:aa:26:2e:87:0e:c4:b0:f6:13:34:44:69:3e:13: a6:04:e1:e6:e6:4c:06:2f:9b:96:d7:90:4b:1c:76:13:9a:e7: 48:9d:7c:a6:e8:0e:7b:9b:11:c8:f8:81:bb:95:8b:20:02:b0: 48:12:5b:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfyEAwnBejhtZzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTllMWU0ZDUtZGVkOS00Mjc5LThlMzEtZjIwNmUwZGY1YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj2F1IBqzwkYZXEkWtLRaPGWhky/8RMpOwhW dpLrIBgihJZJSQdx9yJL2YF6XSMzNoZiUstilVneLN5TTVN7OL7zMUQUdBhrK+y5 rOOzLklAszh2bqztkPNZtgTZVtC8dZ/cI3dzp0pyP+4wBDEW1XienLi9P/Bmn7/W zxxxNyYlmvkLiwYwHfTyH3PMpMQu6b47L3w/Hux4G3L9+MPM3PEEDyVCzLIuiPSX XVYECCwseKC7n+2qkyAjJfp2Qqov7kjYZfwKo15NaKK0aHW8d6RwmtxC0ik0ml6r +AjDIGgHgEMJ7DMCZS2BMRRF890gvfajz1c/QP5RWndHNMVDIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMT4jlhJ8ukBYxNiBLl7yBL4VUqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWM4OTk0NTktZjBmMS0z ZmI5LThlMWQtYjRlMWI0YTE3NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFrG98ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCRlv0NX+YVib+dZbeOsQzeu+3u68yGD7RZ8aoKrSnJ7xmmLez8/JrB 7KgRDNCeJLQu3peRCJ47VJvMonCadinQ0lf+BnDEFDc548lykslnUDv52l9bBdlW k8KAytASdPcqztYns9EUH+iGgbxhhM/nRx4Y5XMhJQL/To7lQwoQPxLwXqv2QfNm oo+d3w2a2v6XiPc1DHYbdlChmtOzeVOEuGQSbHGUnGzRNsBd6l6LMqq7zG4Otraw t0I3WM/CACsNy5pEIyDh0lAnqiYuhw7EsPYTNERpPhOmBOHm5kwGL5uW15BLHHYT mudInXym6A57mxHI+IG7lYsgArBIEltm -----END CERTIFICATE-----Generated at Sat Sep 26 22:47:13 2026 by rpki-client