$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6da34f7a-4c3e-384b-b842-cf106d0adec7.roa File: 6da34f7a-4c3e-384b-b842-cf106d0adec7.roa (raw, json) Hash identifier: dWTcjwFIXGh3HjaH0wyUMrU5Q7QYDmvRwx7DAo2WxzY= Subject key identifier: 84:13:5C:A5:C1:BB:33:78:CF:B7:F7:D5:A2:3C:ED:25:55:00:54:EE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DB8D58D54F06C863D94DAFB80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6da34f7a-4c3e-384b-b842-cf106d0adec7.roa Signing time: Mon 04 May 2026 13:00:30 +0000 ROA not before: Mon 04 May 2026 13:00:30 +0000 ROA not after: Sun 02 Aug 2026 13:00:30 +0000 asID: 134451 IP address blocks: 172.111.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b8:d5:8d:54:f0:6c:86:3d:94:da:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 4 13:00:30 2026 GMT Not After : Aug 2 13:00:30 2026 GMT Subject: CN=f5b5c8ad-5ef7-4aee-b353-b11a72560088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:69:cc:87:c2:98:3e:4c:7d:09:0e:cf:74: 15:25:41:29:4e:99:4a:e4:32:42:b8:93:c6:7e:07: e8:c9:59:c5:3c:dd:e1:9f:19:f3:dd:5d:38:db:ad: 05:a4:81:75:70:73:fc:99:d0:09:09:be:b1:7b:3d: 88:d2:5b:a0:96:2e:06:fa:0e:b2:c7:e7:62:e0:03: 68:b9:ef:33:7d:d1:3c:80:95:b5:ed:0e:20:09:26: 99:3d:ed:55:4a:e0:d8:d6:93:dc:db:86:b1:e5:fd: 04:5f:db:40:6a:cb:a5:b5:71:cc:20:94:8d:eb:83: 04:c6:2f:5d:f1:10:d0:19:5b:df:ee:5a:ea:9f:ac: 51:fc:bc:6c:9d:03:05:a6:44:a3:59:b7:13:da:da: b4:a8:c4:06:ca:fd:87:d0:5b:25:11:b2:57:11:da: e5:e9:1a:a3:fa:0c:ab:e5:70:7a:bd:df:d5:c7:c6: 30:85:38:74:46:cc:df:12:49:a2:8c:a2:65:98:a1: dd:9d:64:4f:25:e2:d3:08:c7:95:0b:7d:2e:e7:1f: 6d:7a:4d:2a:7e:cd:f7:1e:a6:23:1b:40:af:5e:e3: 1f:85:75:cb:5c:82:62:3d:24:42:b3:bc:c4:7a:06: 21:34:76:dc:b7:b7:47:2f:1a:3b:30:58:77:70:5c: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:13:5C:A5:C1:BB:33:78:CF:B7:F7:D5:A2:3C:ED:25:55:00:54:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6da34f7a-4c3e-384b-b842-cf106d0adec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:04:4c:eb:ee:56:5f:a5:21:dc:00:82:2c:de:dd:d5:1a:b4: f8:39:97:91:63:9d:f4:46:ba:e6:a2:b6:47:48:1b:d4:16:8f: b8:3b:a1:20:92:19:31:a4:19:f7:c2:f1:eb:a5:08:fa:c7:e6: 01:c7:46:bb:de:0b:db:ed:fa:dc:ab:b4:39:d5:16:7f:02:1b: 95:9f:e3:b0:06:f5:dd:9b:55:11:c5:25:09:88:0e:32:45:a6: 85:3d:ca:e8:86:0f:8f:ca:7c:b5:80:30:67:7c:33:72:9f:79: 12:f8:ba:d1:6f:e5:e6:34:b1:d7:b9:55:85:46:cb:3d:50:34: 65:4a:e7:4b:04:1c:c4:84:fa:07:d2:99:d4:91:1e:21:61:42: a2:48:72:09:67:1f:cf:aa:1d:0b:20:3d:f1:43:e4:23:a7:20: ec:b3:fe:17:a5:03:bc:e7:9d:3c:03:21:9f:e7:f3:c9:9a:ff: 44:d2:54:9f:03:93:54:51:5f:91:7d:5a:20:db:ce:64:88:c3: fb:dd:b1:18:8c:27:46:18:9a:9d:cc:66:ba:9d:90:72:f7:9a: da:66:ea:5d:53:82:67:f1:c0:02:7c:ce:ac:45:16:81:01:9b: c5:e5:a7:e7:4e:25:19:37:2b:f2:72:2c:2a:95:48:d1:d1:1c: 4f:f9:47:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE241Y1U8GyGPZTa+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUwNDEzMDAzMFoXDTI2MDgwMjEzMDAzMFowLzEtMCsGA1UEAxMk ZjViNWM4YWQtNWVmNy00YWVlLWIzNTMtYjExYTcyNTYwMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq9pzIfCmD5MfQkOz3QVJUEpTplK5DJCuJPG fgfoyVnFPN3hnxnz3V04260FpIF1cHP8mdAJCb6xez2I0lugli4G+g6yx+di4ANo ue8zfdE8gJW17Q4gCSaZPe1VSuDY1pPc24ax5f0EX9tAasultXHMIJSN64MExi9d 8RDQGVvf7lrqn6xR/LxsnQMFpkSjWbcT2tq0qMQGyv2H0FslEbJXEdrl6Rqj+gyr 5XB6vd/Vx8YwhTh0RszfEkmijKJlmKHdnWRPJeLTCMeVC30u5x9tek0qfs33HqYj G0CvXuMfhXXLXIJiPSRCs7zEegYhNHbct7dHLxo7MFh3cFx+JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQTXKXBuzN4z7f31aI87SVVAFTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNmRhMzRmN2EtNGMzZS0z ODRiLWI4NDItY2YxMDZkMGFkZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgETOvuVl+lIdwAgize3dUatPg5l5FjnfRGuuaitkdIG9QWj7g7oSCS GTGkGffC8eulCPrH5gHHRrveC9vt+tyrtDnVFn8CG5Wf47AG9d2bVRHFJQmIDjJF poU9yuiGD4/KfLWAMGd8M3KfeRL4utFv5eY0sde5VYVGyz1QNGVK50sEHMSE+gfS mdSRHiFhQqJIcglnH8+qHQsgPfFD5COnIOyz/helA7znnTwDIZ/n88ma/0TSVJ8D k1RRX5F9WiDbzmSIw/vdsRiMJ0YYmp3MZrqdkHL3mtpm6l1TgmfxwAJ8zqxFFoEB m8Xlp+dOJRk3K/JyLCqVSNHRHE/5R7I= -----END CERTIFICATE-----Generated at Wed May 13 06:55:01 2026 by rpki-client