$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa File: 1693deb8-1531-33fd-925a-247e8cd7c80d.roa (raw, json) Hash identifier: O7T0EPtet1QgqT0msF7d05wMBcGVxm5QfCK/LrX/bpM= Subject key identifier: C3:47:93:8A:E0:C4:3C:5E:2F:03:F6:C3:5A:60:B4:C8:17:97:E6:73 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F14679FCD3C8FB40676807B40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 212238 IP address blocks: 172.111.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9f:cd:3c:8f:b4:06:76:80:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=f76bd40e-18f7-49c6-b7a6-4445d2dd7b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:38:f7:5c:4b:03:83:c2:6b:78:7b:ef:d7: 80:e6:c1:9d:14:64:a9:1e:15:cc:a6:d6:d0:29:ed: ab:cf:4f:55:e5:f6:09:3c:f7:b9:8b:79:61:dd:17: d7:1a:d3:62:08:12:08:8e:a6:72:f9:84:75:f5:c3: 44:7a:c6:95:10:76:68:08:33:ae:28:0a:ed:70:3e: 43:a4:a0:00:86:a9:f2:d8:c5:25:ef:d6:48:8e:5d: 7a:0e:cd:6f:de:c4:55:b9:63:ff:1b:38:f6:9b:9a: 35:77:1f:7b:dc:85:57:ce:a6:46:4d:60:21:58:36: fe:92:68:37:82:75:8a:e7:78:9e:e1:bb:bf:58:4d: a2:3b:02:f6:be:ac:4d:2a:36:b1:78:9e:56:33:8b: 1c:5a:b6:b2:6b:be:f7:90:b8:37:5d:ba:80:c5:11: 4e:97:79:e2:f8:f2:e8:55:8c:c2:0b:33:58:10:59: c3:23:0e:93:b2:91:be:50:12:be:84:aa:c2:0a:aa: b1:01:a3:6a:d4:9b:84:49:0d:19:11:f2:11:58:2c: 75:c2:b0:ba:f2:4b:d9:99:e4:e6:08:78:19:73:97: 20:6d:65:d0:97:1c:54:93:ea:d2:b9:58:e3:f5:74: e5:ce:51:da:4e:31:30:5e:3d:ce:db:94:0a:e8:c6: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:47:93:8A:E0:C4:3C:5E:2F:03:F6:C3:5A:60:B4:C8:17:97:E6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b2:64:ff:42:75:e0:68:f7:82:b0:f6:5c:9c:dc:8b:a3:0d: 69:3e:f6:37:67:28:e4:31:37:30:09:ff:3c:b0:04:8f:e5:ff: 55:a2:3f:d4:c8:9e:74:4b:ba:fd:43:14:4a:cd:ad:aa:a2:7f: cd:7e:07:95:c9:4b:15:7b:b3:b4:cd:07:9a:fd:48:b2:ab:d5: ed:0c:2b:b6:c2:b8:37:27:7b:cd:ba:db:64:ff:0b:03:ba:c9: 02:2a:9b:ba:ee:5b:1a:3b:37:3b:bd:07:66:89:42:8e:f8:23: 00:78:5c:d4:ea:81:40:6b:a1:c2:fe:20:e9:1c:e1:4b:6a:20: 76:c3:a3:42:43:58:0a:55:99:7e:df:4e:7e:89:00:5c:76:f4: 2b:9a:a8:5d:ca:8a:30:83:64:2c:65:cd:28:b3:f7:e9:54:28: 5b:18:4b:25:81:c7:cc:77:c7:55:f8:37:f3:56:5f:69:42:c3: 25:68:9f:9f:ad:77:8a:50:1c:98:34:ec:5a:e2:58:60:8f:2c: 33:2c:d1:62:6e:45:29:6c:ad:ed:3e:d1:ee:20:43:44:ab:f2: 2d:d8:6e:b8:a9:34:d9:87:f9:0e:41:56:34:9d:31:c8:f9:30: ac:12:79:47:29:a2:bb:9b:d2:cf:94:99:ba:3e:24:54:92:57: 40:fe:1c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5/NPI+0BnaAe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Zjc2YmQ0MGUtMThmNy00OWM2LWI3YTYtNDQ0NWQyZGQ3YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2A491xLA4PCa3h779eA5sGdFGSpHhXMptbQ Ke2rz09V5fYJPPe5i3lh3RfXGtNiCBIIjqZy+YR19cNEesaVEHZoCDOuKArtcD5D pKAAhqny2MUl79ZIjl16Ds1v3sRVuWP/Gzj2m5o1dx973IVXzqZGTWAhWDb+kmg3 gnWK53ie4bu/WE2iOwL2vqxNKjaxeJ5WM4scWraya773kLg3XbqAxRFOl3ni+PLo VYzCCzNYEFnDIw6TspG+UBK+hKrCCqqxAaNq1JuESQ0ZEfIRWCx1wrC68kvZmeTm CHgZc5cgbWXQlxxUk+rSuVjj9XTlzlHaTjEwXj3O25QK6MZDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNHk4rgxDxeLwP2w1pgtMgXl+ZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTY5M2RlYjgtMTUzMS0z M2ZkLTkyNWEtMjQ3ZThjZDdjODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+yZP9CdeBo94Kw9lyc3IujDWk+9jdnKOQxNzAJ/zywBI/l/1WiP9TI nnRLuv1DFErNraqif81+B5XJSxV7s7TNB5r9SLKr1e0MK7bCuDcne82622T/CwO6 yQIqm7ruWxo7Nzu9B2aJQo74IwB4XNTqgUBrocL+IOkc4UtqIHbDo0JDWApVmX7f Tn6JAFx29CuaqF3KijCDZCxlzSiz9+lUKFsYSyWBx8x3x1X4N/NWX2lCwyVon5+t d4pQHJg07FriWGCPLDMs0WJuRSlsre0+0e4gQ0Sr8i3YbripNNmH+Q5BVjSdMcj5 MKwSeUcporub0s+Umbo+JFSSV0D+HNQ= -----END CERTIFICATE-----Generated at Fri Sep 25 06:36:40 2026 by rpki-client