$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa File: 5ced4112-3f87-3644-b991-99ff69b18b89.roa (raw, json) Hash identifier: 8lU0UY9JlIekhHt+UspQuwd5xuZ9RylCkmp0xE1tnH8= Subject key identifier: 00:9E:8A:D6:CB:45:52:AB:31:50:BF:2B:0F:A3:70:6F:EE:8B:E8:C8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F49889663719986B49488E8D0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:96:63:71:99:86:b4:94:88:e8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ebf63c7a-6572-49bd-948b-cba317385689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:8d:44:03:32:97:07:70:5c:84:43:64:5e: 98:a8:fa:e6:01:0e:8a:fd:93:a6:e2:69:9e:b0:a1: a9:be:2c:13:bd:5a:10:47:b5:dd:27:3b:eb:5c:b0: f4:44:05:6b:1c:47:d6:db:d9:3f:f6:8c:84:92:e2: c0:24:fc:03:d7:19:b4:2b:b2:b1:4d:f5:55:f4:68: e6:30:35:b2:8c:f9:d6:8d:1c:0e:de:8f:d7:1c:f7: be:a4:f9:f4:2f:cd:3a:19:d4:7a:95:30:b0:1c:8d: 0f:96:17:8e:29:f5:9e:26:48:a0:65:34:c0:06:b8: 34:4f:2b:ef:13:f5:a0:98:92:0e:af:36:a3:18:44: eb:7a:10:dd:30:80:40:94:24:b6:c2:10:37:e8:a1: 9d:9b:ec:57:fc:95:b7:e1:a5:57:4b:2c:10:cf:99: fd:e2:33:ed:41:2b:1c:ab:bf:56:a8:88:5f:45:1f: 92:6c:95:f0:a1:ed:3b:94:46:62:33:48:32:3e:51: 64:3a:c9:bf:ea:91:fa:fc:10:da:2f:dc:5b:9d:d6: 99:df:12:ec:0b:6b:17:a9:c7:00:ea:8d:6e:d9:9d: 23:2a:d4:8f:86:1e:24:99:89:d1:ad:64:0a:49:f1: ad:a2:9c:c8:5b:8c:0e:c3:9e:6e:52:e2:c3:17:0e: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:8A:D6:CB:45:52:AB:31:50:BF:2B:0F:A3:70:6F:EE:8B:E8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8f:31:c3:8c:25:9e:07:fc:ae:37:ca:38:37:f9:1c:2a:46: ee:7a:76:14:30:4e:73:09:38:c6:5a:cf:35:06:23:b3:1f:2f: 1f:1e:b1:3f:9d:01:6c:cd:5e:6a:45:b2:89:fc:8d:8b:8b:58: 7e:78:c0:72:c2:95:6c:4f:d2:74:71:64:f9:1c:59:87:90:c6: d1:f4:27:97:d4:28:61:11:bc:78:18:a3:83:02:eb:c8:9a:f9: 7e:2f:0e:0b:5c:bc:16:ff:2a:56:5c:67:1d:94:ac:12:c6:10: 3e:96:4f:2a:57:80:87:6c:ae:0a:41:0a:e2:73:e2:4e:af:87: d1:60:c1:bb:a9:16:10:b4:d6:d8:81:02:37:11:2a:03:53:4a: a2:22:8d:33:57:66:f8:dc:d6:46:73:97:35:dd:f6:46:00:bd: a0:91:05:28:69:82:14:5e:8a:b8:9b:1a:62:97:b0:f6:16:9b: b1:91:02:1e:1c:25:58:85:0e:32:cf:b9:68:5e:d6:b7:fb:ca: 25:bf:ed:09:85:95:b8:32:f6:9b:b8:6c:81:c7:ba:00:d4:67: a7:64:80:3f:15:f6:aa:f3:f5:ce:c9:57:4d:58:ba:0e:d9:22: f0:4e:e1:99:f5:9f:cb:3a:1e:38:0e:95:64:7d:58:d5:30:1d: 27:63:48:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiJZjcZmGtJSI6NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWJmNjNjN2EtNjU3Mi00OWJkLTk0OGItY2JhMzE3Mzg1Njg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtECNRAMylwdwXIRDZF6YqPrmAQ6K/ZOm4mme sKGpviwTvVoQR7XdJzvrXLD0RAVrHEfW29k/9oyEkuLAJPwD1xm0K7KxTfVV9Gjm MDWyjPnWjRwO3o/XHPe+pPn0L806GdR6lTCwHI0PlheOKfWeJkigZTTABrg0Tyvv E/WgmJIOrzajGETrehDdMIBAlCS2whA36KGdm+xX/JW34aVXSywQz5n94jPtQSsc q79WqIhfRR+SbJXwoe07lEZiM0gyPlFkOsm/6pH6/BDaL9xbndaZ3xLsC2sXqccA 6o1u2Z0jKtSPhh4kmYnRrWQKSfGtopzIW4wOw55uUuLDFw4yQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACeitbLRVKrMVC/Kw+jcG/ui+jIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWNlZDQxMTItM2Y4Ny0z NjQ0LWI5OTEtOTlmZjY5YjE4Yjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyPMcOMJZ4H/K43yjg3+RwqRu56dhQwTnMJOMZazzUGI7MfLx8esT+d AWzNXmpFson8jYuLWH54wHLClWxP0nRxZPkcWYeQxtH0J5fUKGERvHgYo4MC68ia +X4vDgtcvBb/KlZcZx2UrBLGED6WTypXgIdsrgpBCuJz4k6vh9FgwbupFhC01tiB AjcRKgNTSqIijTNXZvjc1kZzlzXd9kYAvaCRBShpghReiribGmKXsPYWm7GRAh4c JViFDjLPuWhe1rf7yiW/7QmFlbgy9pu4bIHHugDUZ6dkgD8V9qrz9c7JV01Yug7Z IvBO4Zn1n8s6HjgOlWR9WNUwHSdjSJY= -----END CERTIFICATE-----Generated at Fri Sep 25 22:37:54 2026 by rpki-client