$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa File: 5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa (raw, json) Hash identifier: h86//bsnROkvpNvo+mWq4rpDNAkMIx8akU43eroG/O8= Subject key identifier: 24:1D:DD:2C:F3:36:B7:63:A4:36:B9:76:B3:9A:EA:5D:45:DD:B6:7C Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F11A1655A436D72BA3512B440 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 400529 IP address blocks: 172.111.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:65:5a:43:6d:72:ba:35:12:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=0fed42b7-2a44-4a24-8481-4e4d5ff143a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:a7:54:9a:03:66:49:dd:b4:90:05:65:19: c0:38:d6:7e:94:57:34:d8:cc:46:fc:04:ee:60:49: 24:a1:ac:88:5e:a7:e3:6f:92:e2:6c:73:7a:60:cc: eb:97:c6:57:bc:d6:34:64:d7:e7:19:f4:b3:ca:c3: fc:86:23:93:d5:2d:2b:47:50:5a:c3:ec:41:5f:b2: b9:1c:4b:eb:cb:4c:94:b6:09:ca:af:d5:19:2d:85: e6:1e:2b:06:16:f1:4b:32:ee:32:84:2f:2e:54:ea: 6c:48:fc:df:4f:3e:de:57:91:d9:35:09:a4:61:8d: ff:6b:86:3d:3d:66:c9:43:4a:15:c9:c0:92:a6:e4: d9:9f:18:22:1e:12:42:91:47:39:64:18:7b:99:ef: a4:b2:1f:db:bb:4c:30:b0:ce:25:52:2b:5b:52:20: 5a:10:c5:0a:cf:62:b0:47:70:2a:ea:7f:92:a9:5e: 5f:6f:4c:82:36:a0:d4:ec:6d:49:d3:82:0c:df:ef: 72:c8:05:f0:db:ef:06:ea:f6:1b:88:3c:f3:9a:f5: 84:53:d7:9b:06:bd:5f:a8:d6:f1:d2:ee:fd:ed:4f: 74:64:a5:63:a6:df:cb:46:25:58:71:00:c3:a4:42: 05:42:cd:5b:80:ff:65:57:42:f3:53:cb:8d:36:d1: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1D:DD:2C:F3:36:B7:63:A4:36:B9:76:B3:9A:EA:5D:45:DD:B6:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:52:d5:34:75:82:53:f9:f8:b4:18:8f:30:b6:4a:03:4f:a9: 89:13:f1:63:8d:3b:21:da:43:67:f3:62:08:f4:0c:55:c3:cd: 16:5d:1f:5a:39:f0:e2:c9:b9:8a:a3:9a:e2:3c:88:94:07:c1: c5:b5:40:20:2d:c9:fc:f5:ca:d3:95:42:0b:8a:84:a0:8d:cc: 02:f6:6a:ac:08:f7:31:e7:2b:b9:ea:8b:37:1b:37:83:08:b1: 55:c3:8c:f3:81:64:e6:65:9f:8a:a5:e3:7e:15:d3:cb:85:89: 6c:aa:28:a8:f6:a7:c4:2f:c3:7b:f0:e6:d3:98:57:ca:b5:72: d7:c7:e2:fd:70:48:f3:3c:d9:1f:d0:07:cb:16:c9:07:66:b5: b5:de:70:c4:4f:9c:db:af:be:3b:4f:57:9b:4a:2d:7a:18:40: f0:21:ae:75:d6:10:a5:f7:f1:b4:aa:ab:06:e6:03:08:4f:df: 8c:35:e8:60:e0:9e:4c:81:37:61:29:a6:4f:67:d3:89:7e:36: 68:fb:84:14:0d:a7:8e:5a:63:ff:5d:95:59:47:e4:f9:dc:2c: d1:b7:eb:f8:3c:f3:a1:35:5f:b7:36:98:f8:d6:4c:c8:26:45: 7e:ec:8a:24:56:a1:53:fe:28:f9:25:94:d8:34:e4:c5:62:e8: ed:54:a0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoWVaQ21yujUStEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZlZDQyYjctMmE0NC00YTI0LTg0ODEtNGU0ZDVmZjE0M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoOnVJoDZkndtJAFZRnAONZ+lFc02MxG/ATu YEkkoayIXqfjb5LibHN6YMzrl8ZXvNY0ZNfnGfSzysP8hiOT1S0rR1Baw+xBX7K5 HEvry0yUtgnKr9UZLYXmHisGFvFLMu4yhC8uVOpsSPzfTz7eV5HZNQmkYY3/a4Y9 PWbJQ0oVycCSpuTZnxgiHhJCkUc5ZBh7me+ksh/bu0wwsM4lUitbUiBaEMUKz2Kw R3Aq6n+SqV5fb0yCNqDU7G1J04IM3+9yyAXw2+8G6vYbiDzzmvWEU9ebBr1fqNbx 0u797U90ZKVjpt/LRiVYcQDDpEIFQs1bgP9lV0LzU8uNNtGxyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQd3SzzNrdjpDa5drOa6l1F3bZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNWQ1ODQ5ZTItMmNmZi0z ODQ5LWIzOGYtMzE2NWZkOGU2ZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBS1TR1glP5+LQYjzC2SgNPqYkT8WONOyHaQ2fzYgj0DFXDzRZdH1o5 8OLJuYqjmuI8iJQHwcW1QCAtyfz1ytOVQguKhKCNzAL2aqwI9zHnK7nqizcbN4MI sVXDjPOBZOZln4ql434V08uFiWyqKKj2p8Qvw3vw5tOYV8q1ctfH4v1wSPM82R/Q B8sWyQdmtbXecMRPnNuvvjtPV5tKLXoYQPAhrnXWEKX38bSqqwbmAwhP34w16GDg nkyBN2Eppk9n04l+Nmj7hBQNp45aY/9dlVlH5PncLNG36/g886E1X7c2mPjWTMgm RX7siiRWoVP+KPkllNg05MVi6O1UoH0= -----END CERTIFICATE-----Generated at Sat Sep 5 06:02:52 2026 by rpki-client