$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa File: 901d7078-5ae0-31f8-a837-37437b50a24f.roa (raw, json) Hash identifier: dH469TA3vM86d3ufAAzojSeGKTuTmRIGsNAAS+daiNs= Subject key identifier: BD:63:65:E7:EE:B1:14:39:5E:8E:A3:1E:81:D9:F4:A4:12:53:88:3E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F549D54A8A550D1F164FC5C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 3223 IP address blocks: 172.111.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:54:a8:a5:50:d1:f1:64:fc:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d12fb00d-7ebc-4024-aeb9-a01748369b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:fd:d1:1e:9f:bd:6e:dd:14:d2:70:2f:fb: eb:88:c9:a4:2f:a9:f0:e4:5e:58:19:d3:67:42:01: b5:f1:46:ee:86:6f:33:1e:6b:e0:7c:76:53:ec:57: ac:cd:1e:b4:86:77:26:e2:c2:fa:11:08:d4:20:67: f9:4a:5b:4f:ec:6b:2b:f4:cc:39:5b:81:84:c5:30: ec:76:e7:58:59:06:81:e5:f8:fc:3d:90:a3:0c:d9: 88:18:03:f9:82:d6:9e:29:ba:94:a4:3c:4f:32:4e: d8:eb:81:b3:2e:d3:3d:bd:1d:4c:b5:6f:b3:c0:3b: 55:a4:5b:3c:da:aa:13:f7:a5:3d:9d:d3:eb:13:9b: 44:8f:07:b3:9f:23:51:b3:4e:7d:45:37:2f:9e:3b: 5f:1c:6a:15:f7:34:73:ae:90:9c:b7:4e:19:d1:57: 11:b6:17:a4:01:d2:06:29:b1:02:5f:ff:61:c9:ee: d8:3b:b6:d4:15:28:6f:15:9b:ed:2f:97:04:c2:d3: 34:6c:63:0c:f8:12:81:9c:08:c7:6a:06:64:2e:be: 40:4d:f5:a2:1e:c5:fe:71:af:a7:37:98:15:20:fe: db:ed:56:36:d2:e3:05:ba:76:8b:8f:5f:00:fc:e4: 17:f4:88:17:c4:2e:32:2a:8d:35:d6:99:6b:f9:46: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:63:65:E7:EE:B1:14:39:5E:8E:A3:1E:81:D9:F4:A4:12:53:88:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:81:4c:7d:db:91:18:28:a0:92:07:a5:13:d7:0d:b0:c4:26: df:62:a1:e5:0c:58:2b:af:3e:6d:0b:ba:45:78:9c:f4:d9:9d: 79:dd:33:c8:1c:2a:ba:de:33:e7:b1:e7:06:65:d8:c1:8f:b8: af:a7:9c:66:8a:ce:bf:44:af:c1:c3:00:7b:4a:82:6b:77:d0: 8f:f2:3c:d4:42:37:6d:6a:02:ea:86:36:b8:fc:2d:fe:12:64: ac:cb:69:67:cd:ba:00:74:1b:b0:b5:56:21:ec:cf:96:8a:eb: ee:b8:d2:f1:76:ae:8e:0c:0a:dc:85:ac:83:99:79:6e:0b:f3: 9b:a4:fd:bb:20:5d:bb:26:9f:c4:0d:b2:bf:7b:00:fb:67:d9: cc:39:3a:10:c0:c0:ce:b4:ba:18:a8:d7:b8:f2:60:b1:5a:09: 99:9b:d6:20:1b:87:df:e4:d8:12:ec:65:1b:9f:d1:e3:0f:0c: 70:cc:8c:7c:64:36:f6:5c:ab:45:53:e5:08:7b:d9:bf:76:c1: d3:c8:34:ff:c1:5d:8a:b7:45:a9:66:80:ae:50:f5:7b:de:f3: 87:cf:8d:28:84:8b:3f:dd:46:79:fc:a0:1d:4f:ce:ca:3d:88: cb:76:c9:35:17:74:59:26:b9:c1:fc:ce:c6:6f:71:22:31:da: 4b:d2:06:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVSopVDR8WT8XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDEyZmIwMGQtN2ViYy00MDI0LWFlYjktYTAxNzQ4MzY5YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlX90R6fvW7dFNJwL/vriMmkL6nw5F5YGdNn QgG18Ubuhm8zHmvgfHZT7FeszR60hncm4sL6EQjUIGf5SltP7Gsr9Mw5W4GExTDs dudYWQaB5fj8PZCjDNmIGAP5gtaeKbqUpDxPMk7Y64GzLtM9vR1MtW+zwDtVpFs8 2qoT96U9ndPrE5tEjweznyNRs059RTcvnjtfHGoV9zRzrpCct04Z0VcRthekAdIG KbECX/9hye7YO7bUFShvFZvtL5cEwtM0bGMM+BKBnAjHagZkLr5ATfWiHsX+ca+n N5gVIP7b7VY20uMFunaLj18A/OQX9IgXxC4yKo011plr+UZBjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1jZefusRQ5Xo6jHoHZ9KQSU4g+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxZDcwNzgtNWFlMC0z MWY4LWE4MzctMzc0MzdiNTBhMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGBTH3bkRgooJIHpRPXDbDEJt9ioeUMWCuvPm0LukV4nPTZnXndM8gc KrreM+ex5wZl2MGPuK+nnGaKzr9Er8HDAHtKgmt30I/yPNRCN21qAuqGNrj8Lf4S ZKzLaWfNugB0G7C1ViHsz5aK6+640vF2ro4MCtyFrIOZeW4L85uk/bsgXbsmn8QN sr97APtn2cw5OhDAwM60uhio17jyYLFaCZmb1iAbh9/k2BLsZRuf0eMPDHDMjHxk NvZcq0VT5Qh72b92wdPINP/BXYq3RalmgK5Q9Xve84fPjSiEiz/dRnn8oB1Pzso9 iMt2yTUXdFkmucH8zsZvcSIx2kvSBis= -----END CERTIFICATE-----Generated at Wed Sep 30 15:30:51 2026 by rpki-client