$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91f85b8f-0728-38e1-80e7-38f4a7c49927.roa File: 91f85b8f-0728-38e1-80e7-38f4a7c49927.roa (raw, json) Hash identifier: XU8Tk6bbzuSvJ/RWgKR95Glk7y3FnRQvQFmUOTzJFM8= Subject key identifier: 08:4B:B6:B7:D1:B2:28:D8:9A:2B:31:E4:84:E1:6D:B8:C1:85:90:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F4472D4755C4BDA53E41432C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91f85b8f-0728-38e1-80e7-38f4a7c49927.roa Signing time: Wed 23 Sep 2026 06:01:47 +0000 ROA not before: Wed 23 Sep 2026 06:01:47 +0000 ROA not after: Tue 22 Dec 2026 07:01:47 +0000 asID: 141323 IP address blocks: 172.111.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:44:72:d4:75:5c:4b:da:53:e4:14:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 23 06:01:47 2026 GMT Not After : Dec 22 07:01:47 2026 GMT Subject: CN=8a8bd552-647f-4af9-9039-67ef0977a517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:29:b4:10:82:16:06:29:00:d5:a4:0b:fe: 31:ae:0f:95:b0:0e:96:32:99:9f:a2:44:c1:58:a1: 90:ae:4e:9f:78:f0:81:d8:4a:68:f8:38:21:f1:85: b2:32:1c:99:2e:2e:72:ef:57:3c:0a:d8:08:87:77: 6b:89:f4:74:f7:a8:01:92:9f:c2:69:43:e4:42:05: 31:05:1a:b2:07:8a:3d:85:d0:cf:91:c7:e5:07:2b: c8:f8:79:47:30:23:b9:7b:54:34:85:ae:f1:01:de: d3:cc:53:c4:f1:08:b4:13:34:57:73:92:3d:cc:c6: f3:ec:c6:b8:8f:d4:f9:5d:ab:bb:f8:0e:32:40:42: ad:20:c7:3a:0b:c9:c4:22:da:9a:25:f4:3c:1c:3b: fb:1e:67:45:73:63:09:5b:10:1e:e6:02:a1:c3:33: 55:be:f1:5c:35:9e:a2:19:2d:42:a4:42:eb:ca:ee: 16:74:bf:1f:d9:08:f9:2d:b0:2b:eb:d0:9e:6e:ff: 89:d0:a9:b4:f6:9d:e6:b9:53:a5:48:d1:a1:fb:20: c1:25:c4:f5:38:73:8c:dd:02:9e:8b:c6:1c:4a:5a: 31:2e:6c:2f:03:dc:4c:e1:0a:8c:fb:6f:db:8b:89: 63:2b:82:3b:75:8d:4a:d7:9b:7e:f8:47:7f:7e:7a: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4B:B6:B7:D1:B2:28:D8:9A:2B:31:E4:84:E1:6D:B8:C1:85:90:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91f85b8f-0728-38e1-80e7-38f4a7c49927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ea:b0:29:df:19:35:dd:13:f0:f3:58:6c:d1:5b:3c:c7:91: 88:9f:d7:a1:67:fa:91:21:7e:d5:c7:25:d4:1d:1f:fb:6a:a4: 6f:58:fb:7d:fd:8d:fe:85:2b:49:36:d2:e9:bc:4a:39:cf:42: dd:54:9e:3f:df:11:e6:b7:46:e4:ed:f2:9d:d8:b0:87:3d:07: cc:9f:9f:e2:a1:ec:4b:23:7a:af:22:fc:36:78:1e:a9:f1:d1: 2a:9d:3f:21:a5:f7:b6:d8:84:a1:a3:6e:a3:77:b0:27:4a:0f: e2:b5:6a:97:6f:a3:31:58:74:98:24:ab:f6:ce:ad:91:27:b6: 04:5e:12:77:78:19:df:6d:c6:53:72:5e:a8:4d:5a:c0:c7:15: 12:83:63:cf:05:b9:d9:54:43:e9:94:d4:3c:d2:5b:5d:30:9c: 4a:ec:91:1c:bf:10:5d:a2:dc:db:db:14:f3:7a:a9:38:eb:32: 9c:9f:c5:9f:5a:56:7e:bd:de:81:4f:be:1a:41:e4:6c:bc:ed: 9c:ec:3d:de:07:0f:46:a0:28:12:76:7f:79:b7:40:13:0f:78: bc:02:83:23:b5:b9:47:43:a1:6a:81:73:47:48:ce:62:d8:d0: 0e:9e:5d:85:fd:1a:7e:8a:89:95:89:4e:d9:8c:cb:2d:f3:7f: 66:c8:23:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9EctR1XEvaU+QUMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyMzA2MDE0N1oXDTI2MTIyMjA3MDE0N1owLzEtMCsGA1UEAxMk OGE4YmQ1NTItNjQ3Zi00YWY5LTkwMzktNjdlZjA5NzdhNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoUptBCCFgYpANWkC/4xrg+VsA6WMpmfokTB WKGQrk6fePCB2Epo+Dgh8YWyMhyZLi5y71c8CtgIh3drifR096gBkp/CaUPkQgUx BRqyB4o9hdDPkcflByvI+HlHMCO5e1Q0ha7xAd7TzFPE8Qi0EzRXc5I9zMbz7Ma4 j9T5Xau7+A4yQEKtIMc6C8nEItqaJfQ8HDv7HmdFc2MJWxAe5gKhwzNVvvFcNZ6i GS1CpELryu4WdL8f2Qj5LbAr69Cebv+J0Km09p3muVOlSNGh+yDBJcT1OHOM3QKe i8YcSloxLmwvA9xM4QqM+2/bi4ljK4I7dY1K15t++Ed/fnofEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhLtrfRsijYmisx5IThbbjBhZDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTFmODViOGYtMDcyOC0z OGUxLTgwZTctMzhmNGE3YzQ5OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbqsCnfGTXdE/DzWGzRWzzHkYif16Fn+pEhftXHJdQdH/tqpG9Y+339 jf6FK0k20um8SjnPQt1Unj/fEea3RuTt8p3YsIc9B8yfn+Kh7Esjeq8i/DZ4Hqnx 0SqdPyGl97bYhKGjbqN3sCdKD+K1apdvozFYdJgkq/bOrZEntgReEnd4Gd9txlNy XqhNWsDHFRKDY88FudlUQ+mU1DzSW10wnErskRy/EF2i3NvbFPN6qTjrMpyfxZ9a Vn693oFPvhpB5Gy87ZzsPd4HD0agKBJ2f3m3QBMPeLwCgyO1uUdDoWqBc0dIzmLY 0A6eXYX9Gn6KiZWJTtmMyy3zf2bIIww= -----END CERTIFICATE-----Generated at Fri Sep 25 03:48:31 2026 by rpki-client