$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa File: f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa (raw, json) Hash identifier: 2RqFsSCrpvdn42ZDD3N40F0mWPSRY8Yuz4+H1N7j38M= Subject key identifier: B2:10:AE:D5:C1:55:7A:75:C7:1B:1D:C4:92:5A:95:02:15:E6:BD:33 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F15CCEC5006D1A0E2EB683580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 172.111.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:ec:50:06:d1:a0:e2:eb:68:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=58f6c0bc-9689-403b-883f-7bb39a9fd8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:98:d4:79:90:2a:ff:19:31:ed:46:f0:2a:6c: e3:fb:a7:13:de:3d:3a:2c:13:61:c6:69:38:bc:59: 5a:be:79:1a:48:c8:e2:80:88:6e:1f:ae:61:8e:6b: 7a:7d:09:04:c4:16:e8:27:fc:28:41:65:08:99:fe: a4:c2:09:cf:69:9f:16:2e:7d:f1:e2:21:8b:e8:a7: c8:da:7c:d9:98:74:34:7b:38:9f:d3:12:7a:33:e7: 71:7d:d0:9b:0a:e5:04:c7:da:34:d2:8a:5c:58:c1: 4e:af:fe:ae:f3:90:af:e4:fc:42:b3:50:ee:5a:40: cf:38:03:47:86:a4:15:b6:85:ca:46:65:1b:08:82: 0b:2d:fb:bb:b8:e2:c2:ad:b4:88:19:c4:ca:b8:05: ed:16:26:17:0d:f1:62:64:1d:1d:9f:a9:e4:5e:0e: 30:2d:f9:8f:28:3a:6e:9e:06:c4:52:51:96:6e:e7: d4:ec:a3:98:90:ac:f3:1d:13:77:78:c4:33:1c:9e: 87:27:99:ab:18:d3:2c:0a:40:d0:cb:74:01:fc:78: 3d:f3:e3:65:68:54:c8:f4:9a:94:31:10:a8:80:d6: 27:45:ff:52:05:aa:08:f5:c0:de:d8:40:6a:7e:14: dc:7c:50:b1:c0:f7:03:11:c2:a6:9f:b9:84:9e:92: 34:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:10:AE:D5:C1:55:7A:75:C7:1B:1D:C4:92:5A:95:02:15:E6:BD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8ddb6a8-2e70-371d-93e4-72fcd3363345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c1:79:ca:30:a8:f2:37:4b:1c:8b:ac:6f:92:da:b3:5f:84: e7:af:24:70:97:42:ea:25:0d:78:de:40:d6:f6:4c:32:36:81: f5:6f:4e:10:15:0b:ef:9b:ae:55:d4:20:e5:15:27:5b:d1:6e: 1f:ed:f4:3c:3a:2d:2a:28:19:7c:a2:de:46:e4:19:47:99:d2: eb:51:df:fa:87:59:8f:78:83:06:ef:78:14:fa:32:a4:bd:b9: 40:e3:4a:6b:ae:0f:8f:16:51:98:17:2e:85:d0:2a:14:10:de: 1e:29:4d:8d:fe:5b:7b:ab:36:5b:47:da:2d:ad:fb:63:26:1d: e5:d5:a0:81:09:82:f6:a3:dd:fa:74:f1:08:8c:69:28:fd:88: 2f:c9:57:74:19:3d:1e:ee:e7:d4:fb:90:85:53:88:32:d4:e9: 7d:f6:f7:04:32:38:e4:3d:6c:4f:5d:bb:b9:b4:0b:45:27:26: 25:0f:e0:d9:1b:a6:48:99:c4:ce:96:b3:d0:68:3b:08:27:12: 3c:c9:25:83:27:bc:64:46:c7:c1:fe:dc:a2:0b:15:f2:7c:38: 4e:ff:04:dc:03:b0:3d:f5:2d:ed:6f:5e:39:1d:b8:31:8d:b5: a3:9f:56:f4:d6:ef:c2:04:2a:ba:cc:f1:66:c7:95:26:42:1d: ee:ae:e9:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOxQBtGg4utoNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NThmNmMwYmMtOTY4OS00MDNiLTg4M2YtN2JiMzlhOWZkOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpjUeZAq/xkx7UbwKmzj+6cT3j06LBNhxmk4 vFlavnkaSMjigIhuH65hjmt6fQkExBboJ/woQWUImf6kwgnPaZ8WLn3x4iGL6KfI 2nzZmHQ0ezif0xJ6M+dxfdCbCuUEx9o00opcWMFOr/6u85Cv5PxCs1DuWkDPOANH hqQVtoXKRmUbCIILLfu7uOLCrbSIGcTKuAXtFiYXDfFiZB0dn6nkXg4wLfmPKDpu ngbEUlGWbufU7KOYkKzzHRN3eMQzHJ6HJ5mrGNMsCkDQy3QB/Hg98+NlaFTI9JqU MRCogNYnRf9SBaoI9cDe2EBqfhTcfFCxwPcDEcKmn7mEnpI0eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIQrtXBVXp1xxsdxJJalQIV5r0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjhkZGI2YTgtMmU3MC0z NzFkLTkzZTQtNzJmY2QzMzYzMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzBecowqPI3SxyLrG+S2rNfhOevJHCXQuolDXjeQNb2TDI2gfVvThAV C++brlXUIOUVJ1vRbh/t9Dw6LSooGXyi3kbkGUeZ0utR3/qHWY94gwbveBT6MqS9 uUDjSmuuD48WUZgXLoXQKhQQ3h4pTY3+W3urNltH2i2t+2MmHeXVoIEJgvaj3fp0 8QiMaSj9iC/JV3QZPR7u59T7kIVTiDLU6X329wQyOOQ9bE9du7m0C0UnJiUP4Nkb pkiZxM6Ws9BoOwgnEjzJJYMnvGRGx8H+3KILFfJ8OE7/BNwDsD31Le1vXjkduDGN taOfVvTW78IEKrrM8WbHlSZCHe6u6Zw= -----END CERTIFICATE-----Generated at Tue Sep 22 10:26:55 2026 by rpki-client