$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa File: a71e0638-78b5-3914-8d96-9db194d3fc38.roa (raw, json) Hash identifier: fzgmUD08hfr9NvvDC5VNNoTSQRO+94KhSob3QV1m4hQ= Subject key identifier: 36:57:3E:10:51:40:AF:12:A1:05:B2:7E:FE:56:66:DD:A0:22:9F:B4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F2957BC3B5204D27237642840 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 9009 IP address blocks: 172.111.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bc:3b:52:04:d2:72:37:64:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=a4f5fbf8-7697-4e85-ab5d-c19027624fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:1d:d7:13:ec:4d:6f:71:d1:f4:12:34:75: 8f:bf:41:c8:86:e3:31:41:f1:71:0c:94:91:1d:86: 62:bc:97:d2:1d:52:8f:dc:ed:aa:88:ca:15:37:29: 4a:ee:df:fb:4f:43:f8:7c:27:24:fd:59:78:70:15: c1:c9:95:43:dd:c3:b4:03:64:6a:ec:11:7c:73:78: e4:df:66:c5:eb:f2:49:d3:ac:fa:fb:5f:17:b6:67: c8:30:16:bb:31:72:dc:af:c8:39:35:7e:dc:3b:8b: 7f:15:c3:c8:26:20:93:cc:40:a7:d2:22:7b:2d:4d: e0:d3:f7:dc:8c:a2:23:ad:e4:de:98:10:ba:ed:78: 89:57:e1:07:a7:cb:9a:4c:f0:e7:90:e7:89:59:80: e3:ab:9d:74:f7:40:8c:05:55:01:c0:b8:0d:b7:cf: bd:0b:7a:86:f0:41:32:fa:13:d7:f5:5c:82:bf:aa: 70:0c:f2:ef:6a:9c:86:e9:57:ec:b3:96:bb:3c:fb: c0:c4:45:96:d0:c3:83:f6:52:bd:7b:5d:78:14:98: 7b:92:80:85:5e:10:87:de:26:54:1a:51:42:c3:58: 05:e7:55:e7:25:81:0b:bd:65:bd:d3:08:c7:0a:07: 39:41:35:c7:40:53:d6:cd:31:89:48:b4:13:08:1f: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:57:3E:10:51:40:AF:12:A1:05:B2:7E:FE:56:66:DD:A0:22:9F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:0c:95:ff:62:7c:3a:44:ac:a9:71:62:34:40:e0:1a:91: 05:6f:9a:5c:c7:84:4c:74:92:cf:26:ab:46:1e:7e:10:23:45: af:f5:f2:97:57:ca:10:dd:e2:34:f3:16:14:df:2a:d4:62:48: 97:bb:af:16:1c:14:16:c6:09:45:39:02:72:bc:ae:65:7f:28: 96:60:6f:85:da:a1:32:49:bb:3e:8b:3f:ea:9b:39:c0:cc:91: 53:6b:e9:41:c7:7a:e6:7c:26:c8:2e:90:38:6c:52:f4:3e:d2: c2:07:15:36:cc:f4:10:43:39:b4:7e:f7:85:04:7a:22:6b:9c: 59:cd:43:38:12:94:0c:27:85:87:80:3f:08:6e:12:a5:17:a0: 02:5e:3e:9d:42:bb:bb:e2:79:6f:9a:4e:ba:c6:47:91:ad:29: e8:0c:34:0d:40:a3:e5:09:cb:88:ac:7b:09:cd:a2:b5:6b:57: 01:bc:55:8c:43:72:1c:e1:9d:7d:6c:11:d9:fa:a4:43:02:e6: c5:93:98:73:1f:a0:0a:16:57:5d:13:89:1d:89:89:b0:07:96: 7b:8d:0c:b6:54:d3:bb:00:82:9b:59:70:f1:3d:ee:4c:e5:ac: f5:56:4c:7a:c2:b6:71:09:05:53:f5:13:b2:af:6a:3e:23:ce: 67:d9:87:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7w7UgTScjdkKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YTRmNWZiZjgtNzY5Ny00ZTg1LWFiNWQtYzE5MDI3NjI0ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRYd1xPsTW9x0fQSNHWPv0HIhuMxQfFxDJSR HYZivJfSHVKP3O2qiMoVNylK7t/7T0P4fCck/Vl4cBXByZVD3cO0A2Rq7BF8c3jk 32bF6/JJ06z6+18XtmfIMBa7MXLcr8g5NX7cO4t/FcPIJiCTzECn0iJ7LU3g0/fc jKIjreTemBC67XiJV+EHp8uaTPDnkOeJWYDjq51090CMBVUBwLgNt8+9C3qG8EEy +hPX9VyCv6pwDPLvapyG6Vfss5a7PPvAxEWW0MOD9lK9e114FJh7koCFXhCH3iZU GlFCw1gF51XnJYELvWW90wjHCgc5QTXHQFPWzTGJSLQTCB9ZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZXPhBRQK8SoQWyfv5WZt2gIp+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTcxZTA2MzgtNzhiNS0z OTE0LThkOTYtOWRiMTk0ZDNmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw1DJX/Ynw6RKypcWI0QOAakQVvmlzHhEx0ks8mq0YefhAjRa/18pdX yhDd4jTzFhTfKtRiSJe7rxYcFBbGCUU5AnK8rmV/KJZgb4XaoTJJuz6LP+qbOcDM kVNr6UHHeuZ8JsgukDhsUvQ+0sIHFTbM9BBDObR+94UEeiJrnFnNQzgSlAwnhYeA PwhuEqUXoAJePp1Cu7vieW+aTrrGR5GtKegMNA1Ao+UJy4isewnNorVrVwG8VYxD chzhnX1sEdn6pEMC5sWTmHMfoAoWV10TiR2JibAHlnuNDLZU07sAgptZcPE97kzl rPVWTHrCtnEJBVP1E7Kvaj4jzmfZh4s= -----END CERTIFICATE-----Generated at Mon Sep 21 14:13:20 2026 by rpki-client