$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd23e2a5-1ded-3c5e-a244-f65f3c8349f0.roa File: cd23e2a5-1ded-3c5e-a244-f65f3c8349f0.roa (raw, json) Hash identifier: HAw1LPDTeDshNYfNny6VtSbp93moXA9Do2ohffrAIwk= Subject key identifier: 0F:26:B2:9B:95:6B:CF:71:78:CD:62:2A:D5:CA:49:23:FA:85:F4:20 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F44B2D61485140F1A009F4A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd23e2a5-1ded-3c5e-a244-f65f3c8349f0.roa Signing time: Wed 23 Sep 2026 08:10:45 +0000 ROA not before: Wed 23 Sep 2026 08:10:45 +0000 ROA not after: Tue 22 Dec 2026 09:10:45 +0000 asID: 211422 IP address blocks: 172.111.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:44:b2:d6:14:85:14:0f:1a:00:9f:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 23 08:10:45 2026 GMT Not After : Dec 22 09:10:45 2026 GMT Subject: CN=09f4d2b2-ae75-4a19-9040-482593a5e21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5c:96:6c:1d:ad:0c:ae:86:8f:99:46:bd:9b: 30:b4:4b:52:08:dd:fd:76:0b:be:da:bb:40:27:42: 9a:23:31:86:fb:b2:fa:df:1e:10:d1:45:bf:c7:b5: b8:e5:a1:6f:2e:57:26:02:3e:21:86:64:f5:af:b0: 3d:ce:ea:d1:da:86:9f:c1:ec:b4:b9:5c:69:0e:b2: 94:bc:b1:f4:f3:5a:76:7e:8e:44:57:03:9b:88:b0: 18:95:61:96:fb:e7:b7:f5:24:eb:74:d8:4b:64:a3: 23:ab:d2:9d:d0:1e:79:b2:1c:79:a5:cf:89:bb:70: 3f:3b:83:44:f6:ef:bf:8c:65:6d:8a:20:e3:4a:b2: b0:7e:d1:ac:6c:a3:32:67:57:fe:a6:bc:f1:f7:4a: 47:3f:cb:af:df:52:54:0d:6f:77:ce:bc:27:22:84: f1:9c:93:79:e7:f9:6f:77:1c:6b:3a:4d:e6:62:5c: 41:65:b0:24:ca:f8:f1:0e:14:a3:e6:1e:e2:cd:ca: 96:77:82:5e:ae:5b:a0:46:bc:7f:e2:87:2b:63:43: 2a:80:dc:98:0e:c9:3f:4c:72:d8:9d:49:0d:19:eb: cf:12:f6:65:19:24:50:13:92:33:61:a7:88:59:b5: 6a:64:12:1e:c7:ce:ab:0f:4e:cf:66:53:18:39:3e: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:26:B2:9B:95:6B:CF:71:78:CD:62:2A:D5:CA:49:23:FA:85:F4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd23e2a5-1ded-3c5e-a244-f65f3c8349f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:fb:40:5f:2d:ef:18:cc:5f:c6:f2:8c:ea:98:68:71:c4:c5: 07:18:e9:a1:f1:22:58:af:fe:8d:c2:dd:2b:cd:31:4c:2d:27: 3a:be:cd:30:b1:1a:e0:a4:5f:20:dc:9d:37:a4:ab:22:3c:c2: 7b:6e:37:4f:66:88:7a:28:fe:19:d9:16:bc:72:b2:17:19:cf: aa:b9:b0:db:ee:e8:e3:f1:07:40:2e:bf:3d:e7:b4:c8:8a:15: 2f:35:d9:5a:c9:6d:4a:ac:21:4a:3c:83:5a:b7:b6:50:3a:1f: dd:89:39:e9:76:d2:6c:fa:c6:35:da:33:80:d2:31:b3:a0:1a: ea:05:e4:3a:a7:24:69:46:5b:40:b9:86:af:5d:6a:27:bf:57: 4c:da:0c:9b:dc:8e:10:58:08:59:b4:ca:ae:f1:bd:f9:18:af: bd:a8:22:ab:32:b8:a8:3a:26:3c:39:d8:77:1b:47:25:b4:d1: 80:2c:2f:8f:a2:4d:1f:bf:58:18:57:7f:e9:6d:02:c9:3d:38: 1a:d2:3b:ba:80:fc:b4:67:83:70:cc:6a:2c:48:2f:d3:bf:e8: 3b:c8:35:1f:cb:a9:89:76:6b:fd:1c:63:18:65:88:ef:55:17: a3:2c:c5:12:4c:b6:8f:57:06:7f:28:fe:5b:e2:14:0d:2e:05: ec:e5:e4:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9EstYUhRQPGgCfSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyMzA4MTA0NVoXDTI2MTIyMjA5MTA0NVowLzEtMCsGA1UEAxMk MDlmNGQyYjItYWU3NS00YTE5LTkwNDAtNDgyNTkzYTVlMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FyWbB2tDK6Gj5lGvZswtEtSCN39dgu+2rtA J0KaIzGG+7L63x4Q0UW/x7W45aFvLlcmAj4hhmT1r7A9zurR2oafwey0uVxpDrKU vLH081p2fo5EVwObiLAYlWGW++e39STrdNhLZKMjq9Kd0B55shx5pc+Ju3A/O4NE 9u+/jGVtiiDjSrKwftGsbKMyZ1f+przx90pHP8uv31JUDW93zrwnIoTxnJN55/lv dxxrOk3mYlxBZbAkyvjxDhSj5h7izcqWd4JerlugRrx/4ocrY0MqgNyYDsk/THLY nUkNGevPEvZlGSRQE5IzYaeIWbVqZBIex86rD07PZlMYOT5jUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8mspuVa89xeM1iKtXKSSP6hfQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2QyM2UyYTUtMWRlZC0z YzVlLWEyNDQtZjY1ZjNjODM0OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL7QF8t7xjMX8byjOqYaHHExQcY6aHxIliv/o3C3SvNMUwtJzq+zTCx GuCkXyDcnTekqyI8wntuN09miHoo/hnZFrxyshcZz6q5sNvu6OPxB0Auvz3ntMiK FS812VrJbUqsIUo8g1q3tlA6H92JOel20mz6xjXaM4DSMbOgGuoF5DqnJGlGW0C5 hq9daie/V0zaDJvcjhBYCFm0yq7xvfkYr72oIqsyuKg6Jjw52HcbRyW00YAsL4+i TR+/WBhXf+ltAsk9OBrSO7qA/LRng3DMaixIL9O/6DvINR/LqYl2a/0cYxhliO9V F6MsxRJMto9XBn8o/lviFA0uBezl5HU= -----END CERTIFICATE-----Generated at Sat Sep 26 09:00:43 2026 by rpki-client