$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa File: 5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa (raw, json) Hash identifier: NpJ2OL6kvVe2LLuwlurf64fFE6zXAqRl5LUpVALkpk0= Subject key identifier: E8:C5:56:D1:23:62:63:55:0D:AD:16:16:7F:56:50:16:63:0A:B8:57 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584FB3AADB57F4F147A3A8160000 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 400529 IP address blocks: 172.111.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:aa:db:57:f4:f1:47:a3:a8:16:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=18b2ccb7-bc62-48af-b8c5-d08da2031e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:a0:6b:8b:50:8c:1d:6f:4c:60:96:8e:d4: c6:82:a4:b0:9c:7e:82:9d:6a:88:49:d1:a6:21:c1: d6:73:db:64:c2:f4:c3:4b:f8:63:da:60:a4:af:17: 69:eb:4e:e2:90:4b:ba:17:8c:f6:90:3f:43:86:8e: ad:5e:79:01:f3:8b:03:a6:42:c5:c4:f9:34:5d:66: d3:4f:a2:d1:55:90:db:71:9e:cd:10:45:84:0a:eb: 56:4b:71:14:67:fc:a4:27:d0:29:8b:02:5e:fb:cc: 18:ba:8a:d6:7a:c2:df:a1:7b:06:ca:04:d3:3b:b9: e8:54:3a:9f:74:ba:0e:c2:f9:67:9f:0c:ab:27:0a: 49:cb:87:98:67:e2:5d:7c:cc:31:d2:4e:ee:8d:64: 7b:61:0c:c3:c9:28:0c:6c:b4:7d:6f:e7:d3:44:df: e1:bf:a8:e1:c0:bc:13:00:b3:fb:a5:03:a2:9e:9b: d6:8a:59:83:42:6c:ef:07:a9:e9:3a:2c:88:11:fd: c4:50:37:66:07:7a:ea:69:16:dc:34:06:8c:90:79: cc:e3:49:63:53:f2:e7:59:d3:86:4a:2b:66:e3:d7: b2:0b:6a:6c:a0:31:f8:09:51:e7:f9:32:64:36:a7: cb:8a:51:94:ae:9c:6d:50:ea:02:81:8d:18:f1:7e: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C5:56:D1:23:62:63:55:0D:AD:16:16:7F:56:50:16:63:0A:B8:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5d5849e2-2cff-3849-b38f-3165fd8e6dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:73:e4:e0:17:8b:91:d2:db:8e:0e:11:af:a2:80:46:2b:be: 7a:4c:fa:7a:8e:52:8f:62:c8:40:52:bb:8c:c9:84:2d:28:18: 82:55:2a:eb:9b:c1:0a:2b:ca:07:b4:45:88:24:87:e4:87:18: 9a:e4:23:92:55:60:75:c5:6f:6b:b7:e5:e6:e6:12:98:25:a9: a3:de:f1:67:3d:cc:10:58:fc:1b:e5:f3:64:be:8e:a3:e9:f1: 1c:97:7e:15:dc:82:a2:d4:5b:72:32:84:07:56:ab:72:72:4f: dd:f9:a7:9b:df:de:30:9f:da:34:19:13:c7:fb:ba:fa:0b:77: aa:7c:3b:9c:de:d3:e3:bf:6c:19:96:4e:df:bc:db:b4:cd:49: b5:8f:64:de:df:f5:c2:de:60:c7:b1:b5:1a:56:bb:26:00:85: cd:4d:24:ce:ff:8b:f1:94:a0:cc:0a:ea:bf:4f:06:1c:6b:20: 3a:90:6a:94:8b:8a:37:16:c8:db:e4:1f:14:d6:42:38:6d:bd: 3e:af:0b:c9:5f:81:c9:b4:81:5f:71:d3:87:4a:d6:68:a3:ce: 06:9c:2a:46:0c:b3:47:02:22:ff:4c:0c:26:9f:f9:e1:b3:c2: f9:22:1e:6c:69:ee:96:01:39:bb:2f:ba:2e:20:9f:76:f0:bd: 6a:5d:55:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zqttX9PFHo6gWAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MThiMmNjYjctYmM2Mi00OGFmLWI4YzUtZDA4ZGEyMDMxZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWGga4tQjB1vTGCWjtTGgqSwnH6CnWqISdGm IcHWc9tkwvTDS/hj2mCkrxdp607ikEu6F4z2kD9Dho6tXnkB84sDpkLFxPk0XWbT T6LRVZDbcZ7NEEWECutWS3EUZ/ykJ9ApiwJe+8wYuorWesLfoXsGygTTO7noVDqf dLoOwvlnnwyrJwpJy4eYZ+JdfMwx0k7ujWR7YQzDySgMbLR9b+fTRN/hv6jhwLwT ALP7pQOinpvWilmDQmzvB6npOiyIEf3EUDdmB3rqaRbcNAaMkHnM40ljU/LnWdOG Sitm49eyC2psoDH4CVHn+TJkNqfLilGUrpxtUOoCgY0Y8X4fkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjFVtEjYmNVDa0WFn9WUBZjCrhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNWQ1ODQ5ZTItMmNmZi0z ODQ5LWIzOGYtMzE2NWZkOGU2ZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpz5OAXi5HS244OEa+igEYrvnpM+nqOUo9iyEBSu4zJhC0oGIJVKuub wQoryge0RYgkh+SHGJrkI5JVYHXFb2u35ebmEpglqaPe8Wc9zBBY/Bvl82S+jqPp 8RyXfhXcgqLUW3IyhAdWq3JyT935p5vf3jCf2jQZE8f7uvoLd6p8O5ze0+O/bBmW Tt+827TNSbWPZN7f9cLeYMextRpWuyYAhc1NJM7/i/GUoMwK6r9PBhxrIDqQapSL ijcWyNvkHxTWQjhtvT6vC8lfgcm0gV9x04dK1mijzgacKkYMs0cCIv9MDCaf+eGz wvkiHmxp7pYBObsvui4gn3bwvWpdVXc= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:14 2026 by rpki-client