$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa File: bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa (raw, json) Hash identifier: gFOjHV8HzUJgalJyQSz6an36czezX5Kg/aGK0ug6BhY= Subject key identifier: D0:EC:08:7C:3F:1F:6F:96:E0:5C:49:9B:7E:A2:EF:15:9F:8A:85:88 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F31B7C43C1320A8D5C13AFCC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 396356 IP address blocks: 172.111.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c4:3c:13:20:a8:d5:c1:3a:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=2043fed5-5e8a-4696-b681-01580574aeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3e:b6:2c:20:f0:c8:83:4e:ae:6c:05:a1:68: e4:5c:54:86:ec:2c:9d:9b:6b:5a:24:79:a9:9f:8c: 3d:ba:7b:f8:c6:3c:9c:32:33:fd:9e:6b:8b:15:fb: 43:fe:2e:ee:41:61:93:c3:78:2c:4d:31:37:dc:8c: c7:d2:7a:df:f3:22:04:c1:b0:0c:2b:92:16:a8:c7: 7f:04:ad:64:84:ee:05:ff:b5:21:86:e3:e8:a9:a7: 5d:f5:9e:1b:21:ea:6a:77:c7:48:15:35:e3:1c:08: df:c3:cb:b4:20:c5:ad:00:02:6a:41:d9:46:e9:d8: d1:0b:d0:45:58:46:39:c3:85:c4:44:e8:93:a4:f7: 22:f9:63:30:7f:69:06:b0:8a:12:7d:37:76:01:5e: c5:2b:01:83:b7:76:47:4b:8e:dc:a1:d1:bb:17:a4: db:70:48:d2:dd:21:d0:d9:9b:f9:e3:7e:f2:db:7e: e7:d7:f8:44:79:49:39:7b:52:89:8f:1a:bb:f1:2e: be:4b:b3:47:86:27:ec:d7:e4:52:4e:4c:ee:65:24: 16:55:77:67:1b:3c:ab:1f:af:18:43:a6:ef:88:78: 8e:1c:68:65:56:9e:05:b3:89:97:d5:29:0e:7b:b6: 4f:e8:a6:97:19:9c:ca:7d:34:47:ac:5e:a8:4a:2e: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EC:08:7C:3F:1F:6F:96:E0:5C:49:9B:7E:A2:EF:15:9F:8A:85:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:42:e7:4a:a0:67:df:ce:4a:98:ff:eb:8e:87:91:e8:2d:ad: 29:82:71:58:ce:db:9c:04:a7:f0:ba:a7:a8:c5:43:a5:f6:a5: 3d:ff:36:af:6f:80:af:2f:3b:75:72:d3:2a:07:f2:22:76:d9: 41:40:df:04:05:02:6d:75:84:c8:05:f7:6b:31:72:a7:1c:d2: 15:9c:56:97:91:80:81:58:73:4f:3a:3b:00:69:30:8e:78:50: c4:98:45:99:a5:4c:f3:3a:cb:ae:9b:83:74:1c:ef:e9:5e:25: 73:8d:36:cd:14:83:0e:13:b3:db:29:d1:20:af:6f:5a:8f:de: 17:41:bc:2b:76:05:a4:b0:28:89:f9:3b:d7:93:3f:f5:8d:ec: 9a:c7:d9:65:d1:ef:d0:8a:72:60:38:dc:3c:87:d3:1a:ca:7e: a6:c3:9e:1f:eb:c9:c5:d0:48:a4:8f:35:7f:0d:f7:3a:62:43: 11:56:34:1d:57:d9:b7:b3:87:0f:73:ea:13:d6:15:9d:73:b5: f7:95:4b:2f:65:67:da:10:a7:bf:52:60:3c:0d:c6:b8:3f:00: e0:84:6f:44:51:3a:5f:ad:07:92:92:bc:7e:57:a6:9c:87:7f: d8:99:58:b8:c4:fd:92:7d:ba:0f:c3:d7:96:2a:c2:9f:35:6e: 62:07:c7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8Q8EyCo1cE6/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MjA0M2ZlZDUtNWU4YS00Njk2LWI2ODEtMDE1ODA1NzRhZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T62LCDwyINOrmwFoWjkXFSG7Cydm2taJHmp n4w9unv4xjycMjP9nmuLFftD/i7uQWGTw3gsTTE33IzH0nrf8yIEwbAMK5IWqMd/ BK1khO4F/7UhhuPoqadd9Z4bIepqd8dIFTXjHAjfw8u0IMWtAAJqQdlG6djRC9BF WEY5w4XEROiTpPci+WMwf2kGsIoSfTd2AV7FKwGDt3ZHS47codG7F6TbcEjS3SHQ 2Zv5437y237n1/hEeUk5e1KJjxq78S6+S7NHhifs1+RSTkzuZSQWVXdnGzyrH68Y Q6bviHiOHGhlVp4Fs4mX1SkOe7ZP6KaXGZzKfTRHrF6oSi6SSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDsCHw/H2+W4FxJm36i7xWfioWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY5ZTQ5MjItMTg1OS0z N2IwLWJmNjItMmUxZWU2YWIyZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJC50qgZ9/OSpj/646HkegtrSmCcVjO25wEp/C6p6jFQ6X2pT3/Nq9v gK8vO3Vy0yoH8iJ22UFA3wQFAm11hMgF92sxcqcc0hWcVpeRgIFYc086OwBpMI54 UMSYRZmlTPM6y66bg3Qc7+leJXONNs0Ugw4Ts9sp0SCvb1qP3hdBvCt2BaSwKIn5 O9eTP/WN7JrH2WXR79CKcmA43DyH0xrKfqbDnh/rycXQSKSPNX8N9zpiQxFWNB1X 2bezhw9z6hPWFZ1ztfeVSy9lZ9oQp79SYDwNxrg/AOCEb0RROl+tB5KSvH5XppyH f9iZWLjE/ZJ9ug/D15Yqwp81bmIHx28= -----END CERTIFICATE-----Generated at Tue Sep 22 16:33:41 2026 by rpki-client