$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1dd84504-38ca-3031-b7c4-abd2818c1643.roa File: 1dd84504-38ca-3031-b7c4-abd2818c1643.roa (raw, json) Hash identifier: RP4xv9azjkTjuNMLIR0qMLlgPmaBxvIcCJ3Z649yhvY= Subject key identifier: DF:37:16:33:24:7A:EB:A3:D7:3C:86:5F:DC:01:B5:52:49:30:1F:B5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EE921EBEE4C8762332F621B40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1dd84504-38ca-3031-b7c4-abd2818c1643.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 834 IP address blocks: 172.111.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:eb:ee:4c:87:62:33:2f:62:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=312f6ffb-111d-4e2b-a1aa-aabfa353b61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3d:3a:40:ac:b4:93:d0:e0:b7:d1:13:32:f6: e2:df:d8:d1:cd:87:d4:2e:80:45:c9:f3:01:39:7e: 61:62:5f:c2:b6:32:35:f9:78:ef:ca:ca:ad:37:48: cc:ef:7e:78:67:81:51:ed:fe:90:d7:55:1e:28:42: 0d:37:fb:d6:88:ca:eb:2d:3a:b6:d2:73:a0:1d:28: 04:b9:5c:ff:c5:39:3a:2a:47:a7:bf:e2:04:79:26: 06:b4:8b:25:57:18:2e:82:29:11:52:83:fa:d8:f1: f1:53:d3:c1:5e:a4:43:65:cc:ad:13:59:41:89:e4: 2a:36:27:30:e7:42:0a:57:da:d4:e0:d5:f1:27:09: 20:8c:ff:ed:fa:f0:4a:29:c7:08:ab:fb:15:32:2b: 60:60:40:51:a8:43:d6:48:fa:de:05:93:69:fe:8e: 55:16:0c:b9:d2:8b:35:ae:38:0c:73:cf:53:b1:30: 29:0f:c2:64:18:52:6b:56:aa:ea:63:e8:9f:a0:e0: 69:85:be:73:75:97:57:28:b1:b1:9b:c7:5b:97:b0: ba:8f:38:d4:71:07:14:f5:72:01:04:c0:6e:de:df: d6:d7:cb:6b:b5:93:9d:52:00:2b:85:e9:7f:e1:0c: 29:5b:38:0b:e5:dc:8f:cc:1f:39:c2:e0:22:ba:63: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:16:33:24:7A:EB:A3:D7:3C:86:5F:DC:01:B5:52:49:30:1F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1dd84504-38ca-3031-b7c4-abd2818c1643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9f:35:17:3a:70:ae:bb:ce:24:9c:52:ab:8b:d2:77:a1:94: 36:71:3a:52:79:02:6d:7d:0b:d6:41:d0:3c:0d:6b:8c:69:10: 7e:3c:f5:99:04:77:2b:8f:5b:f1:de:18:0b:30:5d:4a:fb:dc: 8d:96:c2:32:0f:ac:26:11:de:31:23:60:ea:90:77:05:e1:96: 02:e4:63:65:f1:9e:b5:6b:fc:5e:c5:64:33:1c:4b:b6:37:15: 94:a4:b8:4c:55:cb:99:c2:22:8f:5a:f4:4e:30:12:19:c5:67: 49:4e:bc:4b:78:a0:49:ca:78:6c:2e:21:09:a9:d1:fe:d0:6f: 40:7c:c1:5e:29:31:4d:8c:e0:4f:ee:3d:e2:b7:ae:7e:97:da: 6f:32:07:3e:eb:23:4a:5a:52:f4:c0:0f:b0:5d:af:11:5d:38: 29:58:06:2a:11:43:87:e8:ce:ca:95:5f:7a:cd:1a:4b:53:fa: 32:c0:d0:30:01:c0:5d:06:9e:ac:d1:49:99:0d:23:62:a6:61: 9d:30:0c:0b:2e:83:a3:bf:36:f6:21:d1:f9:71:dd:c9:7a:06: 91:67:70:9e:d2:4f:d4:5a:9b:72:a4:c2:04:d9:77:90:7a:9d: 27:d3:12:9b:54:9b:e7:a9:9b:3c:6f:12:ad:65:4d:bf:e8:d8: ca:16:ef:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIevuTIdiMy9iG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk MzEyZjZmZmItMTExZC00ZTJiLWExYWEtYWFiZmEzNTNiNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD06QKy0k9Dgt9ETMvbi39jRzYfULoBFyfMB OX5hYl/CtjI1+XjvysqtN0jM7354Z4FR7f6Q11UeKEINN/vWiMrrLTq20nOgHSgE uVz/xTk6Kkenv+IEeSYGtIslVxgugikRUoP62PHxU9PBXqRDZcytE1lBieQqNicw 50IKV9rU4NXxJwkgjP/t+vBKKccIq/sVMitgYEBRqEPWSPreBZNp/o5VFgy50os1 rjgMc89TsTApD8JkGFJrVqrqY+ifoOBphb5zdZdXKLGxm8dbl7C6jzjUcQcU9XIB BMBu3t/W18trtZOdUgArhel/4QwpWzgL5dyPzB85wuAiumPZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN83FjMkeuuj1zyGX9wBtVJJMB+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWRkODQ1MDQtMzhjYS0z MDMxLWI3YzQtYWJkMjgxOGMxNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOfNRc6cK67ziScUquL0nehlDZxOlJ5Am19C9ZB0DwNa4xpEH489ZkE dyuPW/HeGAswXUr73I2WwjIPrCYR3jEjYOqQdwXhlgLkY2XxnrVr/F7FZDMcS7Y3 FZSkuExVy5nCIo9a9E4wEhnFZ0lOvEt4oEnKeGwuIQmp0f7Qb0B8wV4pMU2M4E/u PeK3rn6X2m8yBz7rI0paUvTAD7BdrxFdOClYBioRQ4fozsqVX3rNGktT+jLA0DAB wF0GnqzRSZkNI2KmYZ0wDAsug6O/NvYh0flx3cl6BpFncJ7ST9Ram3KkwgTZd5B6 nSfTEptUm+epmzxvEq1lTb/o2MoW7z8= -----END CERTIFICATE-----Generated at Sun Sep 20 21:44:18 2026 by rpki-client