$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa File: a2894994-fc45-31ef-9443-e6e1133a12f2.roa (raw, json) Hash identifier: 8i7nHcvkRHB9QE7h3+5MMwWCCCKgVghSlfCguuucays= Subject key identifier: A4:C7:62:82:60:68:80:6B:8B:92:57:17:E5:52:93:C0:93:82:18:15 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F7352D8115E2775425A3BE440 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 132372 IP address blocks: 172.111.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d8:11:5e:27:75:42:5a:3b:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=276cf1fd-e778-4fa5-8523-fea9590394d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:69:4a:53:05:03:ee:10:da:a0:48:64:99: 0b:fc:96:4d:b9:48:c2:81:32:8b:85:d2:e3:0f:0b: 3d:94:5d:c2:7e:16:4c:55:d3:77:7a:08:ca:ab:f4: 41:6c:de:7a:9d:04:f3:5e:0f:a2:b3:df:b8:e8:fc: e5:41:d0:84:24:4e:59:1d:c0:f6:48:6f:25:d1:4c: 54:60:6e:62:7c:3f:e6:7d:47:b0:99:c5:9a:c8:70: eb:d9:99:35:43:e8:28:26:d2:da:d5:e8:47:b3:c1: 31:45:1e:18:ee:cc:10:38:9c:a3:1b:c7:0f:c1:2d: 36:89:31:f5:c6:cf:aa:b8:c3:be:70:f5:17:a9:ae: 05:3c:86:51:a2:30:fb:fd:11:88:47:d3:fd:3e:58: a0:44:1d:86:a3:a9:15:71:7a:6b:fe:ea:ae:7c:7b: 8d:45:18:b1:6a:a1:2e:48:ef:11:aa:6f:6a:d5:92: 2c:49:46:99:3e:24:29:34:f6:db:34:1c:91:49:a7: 6f:e3:9d:1d:6c:e2:54:ce:89:d3:2e:74:b5:0b:31: 1c:1b:70:fb:45:09:0c:a9:8a:c8:c6:9a:e6:51:98: 27:14:d1:aa:d3:7b:a2:2c:18:7d:40:90:23:d1:7b: 5d:39:13:87:e9:a1:1f:75:cd:72:63:34:8e:ea:e6: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:62:82:60:68:80:6B:8B:92:57:17:E5:52:93:C0:93:82:18:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2894994-fc45-31ef-9443-e6e1133a12f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:3e:2f:d5:cf:2e:ab:5a:4f:ca:c5:9a:0e:cf:9f:d9:d6:37: a6:79:06:97:18:0b:06:4e:63:31:e4:92:e4:bb:77:16:8a:e7: 7a:1d:df:35:70:89:b8:78:bc:0a:8b:b9:f6:8f:f0:fa:1b:df: ac:f0:54:d8:34:99:57:7a:c1:98:cf:63:fa:61:0f:ce:1c:e4: 23:67:b2:ce:cf:7f:9f:15:e5:f9:03:ca:e5:cc:9e:c1:ff:f9: 9b:18:9f:a2:37:71:47:d7:1e:e8:ef:27:fe:3d:0d:b4:62:42: e9:fe:1c:cc:d1:54:d2:fd:c0:7e:a7:ad:cf:4f:06:d0:54:25: fd:af:8d:a0:61:68:76:98:4c:76:11:63:55:c8:60:61:ca:57: 40:8f:20:9a:23:db:18:3e:96:e3:4c:3a:d0:d6:cf:be:87:ef: 02:c3:26:62:e7:48:80:a0:19:85:bf:ea:9a:6c:f5:a5:40:4b: b7:1b:2b:d3:2c:01:22:3e:cb:a2:73:51:e5:3a:ac:20:f7:f7: c4:b7:08:bd:30:72:12:ba:c1:7a:44:45:7d:9f:38:b3:87:b5: 32:0e:54:af:2e:75:ce:fc:f6:76:a4:0e:f6:05:f3:9c:81:b6: 2f:8a:ed:75:25:d4:0c:72:e8:25:a7:5c:f0:70:d9:91:85:56: 78:a3:30:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtgRXid1Qlo75EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk Mjc2Y2YxZmQtZTc3OC00ZmE1LTg1MjMtZmVhOTU5MDM5NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuItpSlMFA+4Q2qBIZJkL/JZNuUjCgTKLhdLj Dws9lF3CfhZMVdN3egjKq/RBbN56nQTzXg+is9+46PzlQdCEJE5ZHcD2SG8l0UxU YG5ifD/mfUewmcWayHDr2Zk1Q+goJtLa1ehHs8ExRR4Y7swQOJyjG8cPwS02iTH1 xs+quMO+cPUXqa4FPIZRojD7/RGIR9P9PligRB2Go6kVcXpr/uqufHuNRRixaqEu SO8Rqm9q1ZIsSUaZPiQpNPbbNByRSadv450dbOJUzonTLnS1CzEcG3D7RQkMqYrI xprmUZgnFNGq03uiLBh9QJAj0XtdOROH6aEfdc1yYzSO6uZTCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTHYoJgaIBri5JXF+VSk8CTghgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTI4OTQ5OTQtZmM0NS0z MWVmLTk0NDMtZTZlMTEzM2ExMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0+L9XPLqtaT8rFmg7Pn9nWN6Z5BpcYCwZOYzHkkuS7dxaK53od3zVw ibh4vAqLufaP8Pob36zwVNg0mVd6wZjPY/phD84c5CNnss7Pf58V5fkDyuXMnsH/ +ZsYn6I3cUfXHujvJ/49DbRiQun+HMzRVNL9wH6nrc9PBtBUJf2vjaBhaHaYTHYR Y1XIYGHKV0CPIJoj2xg+luNMOtDWz76H7wLDJmLnSICgGYW/6pps9aVAS7cbK9Ms ASI+y6JzUeU6rCD398S3CL0wchK6wXpERX2fOLOHtTIOVK8udc789nakDvYF85yB ti+K7XUl1Axy6CWnXPBw2ZGFVnijML8= -----END CERTIFICATE-----Generated at Sat Oct 10 23:08:58 2026 by rpki-client