$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa File: af0dac47-6e29-35db-80a1-859bd697b5d9.roa (raw, json) Hash identifier: 6uTFZX/xsVs3yjg3O8dVv66arfOM54wVCxNBdOA3f0g= Subject key identifier: DC:34:67:E9:60:7D:3E:9A:CA:11:AD:B8:2B:31:37:DB:3F:2F:20:BF Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F655E6995AEA0F891D47DF680 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 398395 IP address blocks: 172.111.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:69:95:ae:a0:f8:91:d4:7d:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=9d70fb8a-0f75-4e04-a542-33c58d4915b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:75:c4:76:29:00:5e:0b:9d:70:19:bf:e9:5d: ea:5e:3c:38:7f:94:9f:23:30:67:4d:f0:12:7c:03: e4:2e:ea:4d:a0:a3:4b:a9:c4:3c:4a:45:bb:87:e2: 0b:24:fb:a8:39:bd:92:23:22:22:dc:8f:ae:f3:6f: 94:aa:39:66:92:e9:da:da:90:d4:f1:4b:a0:dc:bf: d5:2d:f3:bb:f8:53:40:90:aa:af:3c:fc:1d:71:21: 8c:e6:0a:ef:c2:a9:2c:6c:89:4f:b9:2d:de:b6:6e: 87:6f:49:25:2f:a6:5e:ed:81:db:5b:bc:1e:31:7d: 31:2e:da:d5:af:32:51:29:c1:81:f5:3e:c0:b9:75: ac:89:31:41:b9:1b:34:66:1d:14:8e:db:a5:35:d1: 50:d5:65:c1:96:67:e5:b6:8c:42:c7:7c:24:85:d2: 83:82:7c:db:39:0d:99:f9:0c:1a:d0:1c:7d:a6:04: 93:65:f7:13:b1:32:92:16:67:39:f5:49:48:3c:b3: 05:6a:46:35:5c:41:4a:b9:3c:83:78:70:29:49:4f: 69:79:dd:b9:2b:04:66:4f:a7:15:ed:59:f6:c1:6c: a6:58:79:d8:02:c8:78:ea:02:2c:c2:28:bb:cd:16: 5b:49:6f:85:08:34:00:8b:c2:fa:ea:0d:06:1d:ec: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:67:E9:60:7D:3E:9A:CA:11:AD:B8:2B:31:37:DB:3F:2F:20:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/af0dac47-6e29-35db-80a1-859bd697b5d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:22:c0:64:96:90:6a:5b:90:16:e5:05:79:e3:6f:f5:4f:6f: e9:d9:f8:02:89:31:54:f5:28:3f:65:1a:1c:70:70:75:58:1a: 95:2b:ed:ea:a5:bf:ea:b8:97:04:5f:03:f0:58:80:08:e4:60: e7:f0:df:20:45:7f:9b:b9:e1:b5:d7:ca:e4:6d:1a:95:df:db: 33:70:d0:f4:3c:58:fb:90:8a:87:b9:b9:b8:b2:b5:98:da:de: c5:36:22:2a:ff:d9:f3:8c:47:d9:c3:14:46:9a:75:cc:7c:f6: 39:9a:89:ca:a7:fb:e2:e8:ae:6c:61:d5:d8:37:2a:3f:ef:e9: f4:0b:3d:3a:3c:e0:aa:8c:80:31:b4:85:ac:67:42:91:bd:97: 4d:2a:da:03:7d:46:63:d4:1b:1c:c1:af:4d:a7:d0:27:fe:37: c2:a6:22:14:a8:bc:31:7a:71:e4:09:70:35:cf:6b:03:43:51: d0:73:cb:1c:36:97:55:d0:ee:52:b6:41:b6:26:c0:a8:44:fb: de:f5:1f:24:bb:92:c1:3d:c5:32:46:4f:63:55:41:f5:d2:5c: fb:dd:dd:e8:e0:3a:4f:0d:7e:ca:5b:ac:ca:e9:b4:a4:39:66: 3b:99:d9:f1:18:85:ee:d7:a2:f2:9a:f7:bc:d6:5d:e9:9a:dc: 48:40:47:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmmVrqD4kdR99oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OWQ3MGZiOGEtMGY3NS00ZTA0LWE1NDItMzNjNThkNDkxNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHXEdikAXgudcBm/6V3qXjw4f5SfIzBnTfAS fAPkLupNoKNLqcQ8SkW7h+ILJPuoOb2SIyIi3I+u82+Uqjlmkuna2pDU8Uug3L/V LfO7+FNAkKqvPPwdcSGM5grvwqksbIlPuS3etm6Hb0klL6Ze7YHbW7weMX0xLtrV rzJRKcGB9T7AuXWsiTFBuRs0Zh0UjtulNdFQ1WXBlmfltoxCx3wkhdKDgnzbOQ2Z +Qwa0Bx9pgSTZfcTsTKSFmc59UlIPLMFakY1XEFKuTyDeHApSU9ped25KwRmT6cV 7Vn2wWymWHnYAsh46gIswii7zRZbSW+FCDQAi8L66g0GHew0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNw0Z+lgfT6ayhGtuCsxN9s/LyC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYWYwZGFjNDctNmUyOS0z NWRiLTgwYTEtODU5YmQ2OTdiNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoiwGSWkGpbkBblBXnjb/VPb+nZ+AKJMVT1KD9lGhxwcHVYGpUr7eql v+q4lwRfA/BYgAjkYOfw3yBFf5u54bXXyuRtGpXf2zNw0PQ8WPuQioe5ubiytZja 3sU2Iir/2fOMR9nDFEaadcx89jmaicqn++Lormxh1dg3Kj/v6fQLPTo84KqMgDG0 haxnQpG9l00q2gN9RmPUGxzBr02n0Cf+N8KmIhSovDF6ceQJcDXPawNDUdBzyxw2 l1XQ7lK2QbYmwKhE+971HyS7ksE9xTJGT2NVQfXSXPvd3ejgOk8NfspbrMrptKQ5 ZjuZ2fEYhe7XovKa97zWXema3EhAR18= -----END CERTIFICATE-----Generated at Thu Oct 22 17:09:51 2026 by rpki-client