$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json) Hash identifier: MSHF+M3+Yv2/PPc7mCvkgvhT567IvbAJ2ibSZ8rDKeo= Subject key identifier: 47:E3:24:24:B6:16:EC:17:0E:66:C7:25:B0:31:C1:DD:8A:EE:54:1D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F1467A05D6C5AE2497470A030 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 212238 IP address blocks: 172.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a0:5d:6c:5a:e2:49:74:70:a0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=2ca79aff-c07e-45e6-9c70-b1e104458e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:dd:5d:ab:05:1b:a9:bd:32:42:99:6d:81: 21:2f:ac:af:14:16:c1:ee:ad:4b:6c:f3:85:65:6a: f7:7a:93:71:1c:6e:c9:8f:b9:62:dd:1a:02:70:a6: 98:50:ee:d5:f3:9f:40:ea:17:cd:5a:b3:0b:9c:f9: e8:34:3a:4f:8b:a7:47:f8:22:c5:56:06:04:ea:41: b0:e7:23:0c:7a:b5:1e:6d:c3:be:1f:0d:eb:ba:6e: 86:59:8a:fa:e5:0d:4e:f4:cb:a6:c0:ab:c5:db:3a: e0:a2:3b:d6:67:0e:4b:3c:b8:80:bb:32:ba:b4:2d: 30:58:b4:46:ac:21:a0:a5:5e:d7:6a:86:b4:ee:dc: 19:d5:19:d3:a9:33:8c:b5:0a:1e:94:8f:f7:21:e3: ed:4b:21:e9:98:bc:1a:63:c1:ec:5a:33:b1:45:5f: 70:92:8b:3f:fd:b0:80:69:c5:47:a2:2f:da:3b:0c: b8:a4:74:48:92:98:b9:7d:e2:01:b9:27:cc:a0:fc: fd:d7:bf:80:dc:12:3a:22:a7:75:9c:21:19:0e:41: 3e:f9:ad:aa:40:02:a5:2f:fb:c4:64:5a:d4:07:75: f6:ae:57:2f:be:af:38:76:af:dd:ef:ab:59:bf:63: ba:db:ad:77:f9:c9:a8:9a:c6:a1:0b:48:31:7f:15: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E3:24:24:B6:16:EC:17:0E:66:C7:25:B0:31:C1:DD:8A:EE:54:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:28:ee:80:6e:c9:8e:97:52:f5:a6:7e:03:0c:e0:62:88:ba: 15:f5:a8:9c:05:38:aa:71:4e:50:9e:c6:90:9e:b8:c3:db:6d: 5c:54:29:bd:a1:1c:7c:eb:a8:82:69:be:18:7a:69:94:d9:4b: 11:d3:e8:3b:d1:66:62:fd:ae:94:be:38:bf:07:ba:2f:55:c0: 6a:79:fb:33:41:5e:29:60:29:bc:56:32:66:02:97:f5:08:b8: 76:8c:29:90:92:0c:05:ba:eb:fb:f8:3f:db:77:4d:d0:54:62: 1f:b0:5e:fc:64:70:b2:94:98:a6:8e:ae:f7:f9:47:ff:41:98: 25:5e:17:f3:d5:86:76:7f:75:c9:a2:bb:a4:5c:86:9f:b6:85: 22:5a:13:52:df:44:76:1b:6f:60:18:78:98:de:dd:95:e1:8c: 54:d0:cf:a0:23:f2:95:1c:c1:a6:96:fa:4c:65:60:fd:b1:9d: 3b:31:18:51:3e:b2:cc:a9:bc:b9:aa:83:c5:9c:07:21:4b:a4: 89:7b:4d:eb:79:0a:78:79:9c:94:04:fc:c8:a6:4f:a7:f4:b2: d8:4c:59:d8:ec:02:4e:82:76:f5:82:8d:fd:d6:1b:a5:6b:fa: 10:57:ba:c4:be:2b:a6:85:0e:83:41:13:28:5d:4e:da:b9:6e: 25:74:14:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6BdbFriSXRwoDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MmNhNzlhZmYtYzA3ZS00NWU2LTljNzAtYjFlMTA0NDU4ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+3dXasFG6m9MkKZbYEhL6yvFBbB7q1LbPOF ZWr3epNxHG7Jj7li3RoCcKaYUO7V859A6hfNWrMLnPnoNDpPi6dH+CLFVgYE6kGw 5yMMerUebcO+Hw3rum6GWYr65Q1O9MumwKvF2zrgojvWZw5LPLiAuzK6tC0wWLRG rCGgpV7Xaoa07twZ1RnTqTOMtQoelI/3IePtSyHpmLwaY8HsWjOxRV9wkos//bCA acVHoi/aOwy4pHRIkpi5feIBuSfMoPz917+A3BI6Iqd1nCEZDkE++a2qQAKlL/vE ZFrUB3X2rlcvvq84dq/d76tZv2O62613+cmomsahC0gxfxW/zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfjJCS2FuwXDmbHJbAxwd2K7lQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzlhMzQ2YjEtZTYwZC0z MjIzLTkxZDQtZTE0YjEzMjZhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4o7oBuyY6XUvWmfgMM4GKIuhX1qJwFOKpxTlCexpCeuMPbbVxUKb2h HHzrqIJpvhh6aZTZSxHT6DvRZmL9rpS+OL8Hui9VwGp5+zNBXilgKbxWMmYCl/UI uHaMKZCSDAW66/v4P9t3TdBUYh+wXvxkcLKUmKaOrvf5R/9BmCVeF/PVhnZ/dcmi u6Rchp+2hSJaE1LfRHYbb2AYeJje3ZXhjFTQz6Aj8pUcwaaW+kxlYP2xnTsxGFE+ ssypvLmqg8WcByFLpIl7Tet5Cnh5nJQE/MimT6f0sthMWdjsAk6CdvWCjf3WG6Vr +hBXusS+K6aFDoNBEyhdTtq5biV0FDw= -----END CERTIFICATE-----Generated at Sun Sep 20 15:51:49 2026 by rpki-client