$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4997f418-1a22-3acf-bcdb-48e0337b3854.roa File: 4997f418-1a22-3acf-bcdb-48e0337b3854.roa (raw, json) Hash identifier: 4rDTddAOSaiaTOP6GxHAEqPGAPd4vMg25AlGJNkf0Xw= Subject key identifier: DA:9C:F4:22:79:B3:F4:70:F9:45:14:F2:19:39:63:31:A3:ED:72:6E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4974FB1C5429286D723D0400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4997f418-1a22-3acf-bcdb-48e0337b3854.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 132372 IP address blocks: 172.111.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:fb:1c:54:29:28:6d:72:3d:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=26195d47-a936-4d4f-b121-ad6d385d09a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c9:8a:00:f8:85:20:4a:95:8f:a0:ef:be:8d: bc:9e:09:d2:5d:ee:81:0e:22:14:8d:1c:cc:8d:b6: a4:49:98:3e:cf:f1:30:4b:8f:db:59:3b:6d:24:c4: 26:c8:52:24:79:12:68:95:dc:f2:bb:4c:b7:72:6f: 26:90:54:0f:e9:1a:34:71:81:1a:5e:65:a9:0f:26: 94:27:e1:d9:67:4c:30:fa:24:93:e5:1c:dd:77:e1: a7:c1:b5:d7:50:6c:43:56:83:3c:3a:2d:ae:1b:4c: 59:95:b4:c5:d5:57:3a:21:ac:41:9d:c3:57:c0:f0: fb:66:9f:cc:5c:52:ca:48:e3:99:fb:37:bc:d2:f5: 80:4d:a1:c7:ec:75:41:66:b5:00:aa:46:d4:88:51: 52:25:09:71:c1:67:ea:b0:8b:ae:5a:2b:49:1f:c7: 3e:83:c5:84:0a:85:bc:ef:9f:bf:2f:2e:2b:a7:7e: 78:e5:bb:2d:b0:17:7b:01:cd:da:65:b6:69:7c:cc: 12:d9:1c:33:db:d3:27:36:b5:68:59:9a:88:eb:e7: 34:c8:dc:9f:f9:e6:d9:54:ba:ac:27:04:a6:d5:fb: 68:39:74:fb:d5:6f:98:6a:7b:3d:79:71:2d:78:56: 9a:56:2a:e0:45:b3:f2:c3:95:f8:bf:6a:f3:d9:bb: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9C:F4:22:79:B3:F4:70:F9:45:14:F2:19:39:63:31:A3:ED:72:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4997f418-1a22-3acf-bcdb-48e0337b3854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9c:c7:6c:3e:ce:0a:b3:9e:d3:b9:7f:60:b1:39:07:ad:24: e7:17:b7:d8:63:e7:28:87:63:fe:3d:1d:d4:bc:f1:89:e9:b5: 9d:da:36:6c:05:bd:f7:76:73:0d:84:d0:bf:19:cc:86:e0:f3: 02:73:e4:a7:4a:04:83:7d:82:78:68:d8:62:d6:71:58:81:9e: 11:d4:29:0d:4d:7f:ea:b1:e5:ae:c5:3e:7c:5d:b7:1d:01:45: 0c:45:f6:76:40:0a:6a:e7:3a:8f:29:d6:46:95:72:9e:96:b1: 05:06:ff:f4:7a:38:27:0a:9e:20:5d:c8:56:c8:52:85:80:2f: e6:d5:5b:4f:54:76:a6:1a:76:d8:89:29:3f:5c:af:b9:4c:2f: d4:4a:33:ab:22:d3:a4:39:cd:6f:85:9b:8e:a8:ce:fe:da:fd: 9c:81:b7:e5:bf:07:b6:29:80:18:f1:84:4c:a0:d5:72:66:b2: 1a:0c:02:e3:1b:2a:55:ce:3e:5e:ee:d6:13:8b:63:86:41:b2: 92:6d:de:f1:61:cf:d4:c5:1f:10:85:5a:2d:b4:9c:ac:05:ad: a8:f8:c5:ed:33:0a:7a:a0:18:ff:35:04:38:d0:85:22:d5:25: c2:83:77:02:e2:31:03:58:1f:61:a6:d6:60:ec:15:54:16:c1: e5:b1:15:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPscVCkobXI9BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjYxOTVkNDctYTkzNi00ZDRmLWIxMjEtYWQ2ZDM4NWQwOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcmKAPiFIEqVj6Dvvo28ngnSXe6BDiIUjRzM jbakSZg+z/EwS4/bWTttJMQmyFIkeRJoldzyu0y3cm8mkFQP6Ro0cYEaXmWpDyaU J+HZZ0ww+iST5Rzdd+GnwbXXUGxDVoM8Oi2uG0xZlbTF1Vc6IaxBncNXwPD7Zp/M XFLKSOOZ+ze80vWATaHH7HVBZrUAqkbUiFFSJQlxwWfqsIuuWitJH8c+g8WECoW8 75+/Ly4rp3545bstsBd7Ac3aZbZpfMwS2Rwz29MnNrVoWZqI6+c0yNyf+ebZVLqs JwSm1ftoOXT71W+Yans9eXEteFaaVirgRbPyw5X4v2rz2bttNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqc9CJ5s/Rw+UUU8hk5YzGj7XJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDk5N2Y0MTgtMWEyMi0z YWNmLWJjZGItNDhlMDMzN2IzODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+cx2w+zgqzntO5f2CxOQetJOcXt9hj5yiHY/49HdS88YnptZ3aNmwF vfd2cw2E0L8ZzIbg8wJz5KdKBIN9gnho2GLWcViBnhHUKQ1Nf+qx5a7FPnxdtx0B RQxF9nZACmrnOo8p1kaVcp6WsQUG//R6OCcKniBdyFbIUoWAL+bVW09UdqYadtiJ KT9cr7lML9RKM6si06Q5zW+Fm46ozv7a/ZyBt+W/B7YpgBjxhEyg1XJmshoMAuMb KlXOPl7u1hOLY4ZBspJt3vFhz9TFHxCFWi20nKwFraj4xe0zCnqgGP81BDjQhSLV JcKDdwLiMQNYH2Gm1mDsFVQWweWxFXk= -----END CERTIFICATE-----Generated at Fri Sep 25 20:28:15 2026 by rpki-client