$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa File: 14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa (raw, json) Hash identifier: TCZBDThjXn5h590VjkMBUaiQAkYhT9NIxNijGiTED7k= Subject key identifier: 21:11:0A:C2:01:86:0D:D3:26:7F:B2:50:A1:1F:A9:E3:BB:35:18:FE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F374D224FA2F3BE601BAC77F0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 7040 IP address blocks: 172.111.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:22:4f:a2:f3:be:60:1b:ac:77:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=53de2db0-600b-4b9d-8ef0-52236dcc3e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:c9:93:ce:a5:e5:b0:76:48:f3:1e:72:2b: 34:10:91:eb:1c:0a:c0:83:30:9b:ea:13:f9:a8:90: 72:0d:76:84:6d:1e:bd:5c:83:69:ec:25:ff:10:cb: c5:d9:40:c1:f6:01:2e:55:24:ed:14:b8:8a:80:be: a7:de:e4:b7:82:e2:0d:77:39:01:11:04:f3:e0:03: 28:31:a8:dd:db:e6:91:82:c0:80:34:a0:70:fa:cf: c4:fc:86:29:98:d4:a1:8b:4d:77:81:b0:ce:08:53: a5:82:25:25:e1:c7:0a:33:3d:84:49:1e:a1:19:83: d8:c5:46:c7:12:fd:68:d0:a2:3e:01:9a:b8:26:81: bc:b0:e6:72:4f:df:43:72:57:51:76:62:92:bc:a0: 8e:bb:44:10:3c:8d:b9:b7:a8:a2:0b:1c:5a:24:c7: 48:a1:fa:bc:7e:78:ee:a0:e2:14:47:74:86:89:4a: ce:a8:09:df:c8:97:49:ed:03:64:fd:16:4f:6b:6b: d2:5d:d8:ba:3e:61:46:40:98:42:bb:3b:04:8a:22: 18:6a:f6:aa:5d:9d:49:c3:e1:5f:52:7e:e2:11:8c: b5:c1:2f:be:5a:29:80:26:e8:c8:05:1e:1b:67:d6: ad:70:3d:3b:a3:ae:c5:9e:32:6d:15:a4:57:3a:28: f3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:0A:C2:01:86:0D:D3:26:7F:B2:50:A1:1F:A9:E3:BB:35:18:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9d:6a:27:da:ae:a9:2b:0d:9b:7f:13:15:09:5f:d1:df:d7: f6:e4:a5:ee:d5:22:cf:7e:2b:32:4f:ba:36:0f:5b:22:8b:b7: 80:9c:f0:34:fb:5e:37:27:f2:d3:7b:98:71:ed:16:18:b8:a4: 82:85:a6:dc:be:57:f3:5e:6a:44:77:b0:d5:aa:ae:fe:0b:46: 99:6f:60:47:73:12:de:77:aa:f6:5c:c8:09:53:d2:3b:af:26: b3:92:41:01:69:f6:93:08:df:95:8a:31:3d:4a:51:5f:16:6b: 2a:ed:43:98:12:08:a6:70:51:da:43:21:bb:d8:bc:a3:e3:7a: 5b:72:cd:3f:f0:77:ad:80:38:e3:14:d5:bd:e3:6e:ed:ad:66: f7:3a:e7:0b:05:28:4a:32:ba:ae:01:85:5e:ca:32:ca:cd:37: d1:1e:a6:6e:61:bd:f5:2f:83:b0:81:68:b6:17:94:a3:2e:5d: 2f:50:e5:32:6b:a4:c0:55:fd:aa:52:aa:9a:60:4b:ab:3d:c8: 16:bf:d2:b0:54:e6:f7:f8:a4:38:26:b5:9d:eb:9a:97:48:11: 43:f0:f4:c3:24:2c:cf:76:ad:94:c1:15:ee:f0:65:5b:be:e3: 57:44:08:03:fe:87:40:60:fb:fb:0f:02:da:e2:85:83:d0:13: fa:fc:a2:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSJPovO+YBusd/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NTNkZTJkYjAtNjAwYi00YjlkLThlZjAtNTIyMzZkY2MzZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+vJk86l5bB2SPMecis0EJHrHArAgzCb6hP5 qJByDXaEbR69XINp7CX/EMvF2UDB9gEuVSTtFLiKgL6n3uS3guINdzkBEQTz4AMo Majd2+aRgsCANKBw+s/E/IYpmNShi013gbDOCFOlgiUl4ccKMz2ESR6hGYPYxUbH Ev1o0KI+AZq4JoG8sOZyT99DcldRdmKSvKCOu0QQPI25t6iiCxxaJMdIofq8fnju oOIUR3SGiUrOqAnfyJdJ7QNk/RZPa2vSXdi6PmFGQJhCuzsEiiIYavaqXZ1Jw+Ff Un7iEYy1wS++WimAJujIBR4bZ9atcD07o67FnjJtFaRXOijzywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCERCsIBhg3TJn+yUKEfqeO7NRj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQyNjg4ODMtNjhlNC0z ZjQ4LWIxM2MtZDFmNmE5YmYxNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECdaifarqkrDZt/ExUJX9Hf1/bkpe7VIs9+KzJPujYPWyKLt4Cc8DT7 Xjcn8tN7mHHtFhi4pIKFpty+V/NeakR3sNWqrv4LRplvYEdzEt53qvZcyAlT0juv JrOSQQFp9pMI35WKMT1KUV8WayrtQ5gSCKZwUdpDIbvYvKPjeltyzT/wd62AOOMU 1b3jbu2tZvc65wsFKEoyuq4BhV7KMsrNN9Eepm5hvfUvg7CBaLYXlKMuXS9Q5TJr pMBV/apSqppgS6s9yBa/0rBU5vf4pDgmtZ3rmpdIEUPw9MMkLM92rZTBFe7wZVu+ 41dECAP+h0Bg+/sPAtrihYPQE/r8om0= -----END CERTIFICATE-----Generated at Sat Sep 26 21:35:26 2026 by rpki-client