$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa File: 98c89c7a-b014-3805-924d-4831141ca4b6.roa (raw, json) Hash identifier: uZ8d7FA+IEtbItV527Dayozn8JQyDYuqIAmqm0n1UYg= Subject key identifier: 75:0C:A7:98:06:1F:94:C4:B8:1D:4F:43:E4:BD:1A:8B:AC:A9:CA:45 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA6B01EC5E9226800B89CD9C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 137409 IP address blocks: 172.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1e:c5:e9:22:68:00:b8:9c:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=867182a9-3d58-4242-a84b-61782346e2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:d2:10:ec:76:31:da:e8:88:0d:94:cc:ea: 5e:51:cd:08:4d:c5:f3:24:dd:be:1d:37:04:35:1e: cd:ce:df:8d:bc:0a:10:08:2f:7a:13:09:16:f3:8e: ff:0a:93:b3:71:dc:09:3b:c3:36:d0:0a:12:58:b6: cf:2d:ad:88:aa:07:18:ae:92:32:3e:03:52:d8:a0: 12:52:63:88:fb:37:8b:4c:a2:79:f8:7c:9a:6c:28: 8a:32:28:bc:a8:35:09:0e:40:8f:c0:61:96:3f:db: f0:2f:20:56:3e:3b:2e:8f:30:0c:39:a2:7b:4e:b7: 0c:f9:c9:e5:53:a3:2a:5c:21:b8:ac:bb:53:90:c0: 25:38:81:52:da:18:66:92:71:62:4e:81:39:73:ab: 40:d0:fc:f4:d6:08:c3:fd:ad:80:0b:d0:8a:f2:cc: d6:ec:e8:5d:46:66:2c:c8:c2:37:53:2d:e0:6f:7a: 86:4e:7e:18:83:e4:8b:58:92:1b:c7:bf:90:8e:d3: 25:d4:3a:dc:19:0c:d3:72:04:c0:66:0e:74:18:84: 79:6c:ab:02:b0:41:c3:4a:9a:18:89:76:fb:9d:26: 3b:be:8a:29:20:aa:07:15:8e:91:c9:75:6c:8b:4c: 47:78:4e:4f:a8:44:4e:f6:6b:99:5d:b2:70:15:66: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0C:A7:98:06:1F:94:C4:B8:1D:4F:43:E4:BD:1A:8B:AC:A9:CA:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:92:86:de:0c:48:c2:03:53:d0:a0:43:3a:e5:b6:5f:59:85: d1:4e:3a:f5:cb:d0:23:bc:7e:3e:40:5e:93:03:f5:a8:41:e7: 12:af:fe:3d:10:a1:fb:92:9e:0c:47:24:ee:de:00:ca:a9:99: c3:a5:5b:35:aa:4d:c8:ff:ec:b1:76:a1:c4:6b:e1:42:4c:85: 75:91:82:cc:c3:dc:95:2c:27:fd:8e:3b:7e:89:68:62:33:94: 1a:21:50:77:bd:25:da:76:5c:61:6f:32:28:94:5c:70:28:8f: 2e:4f:87:28:d3:e5:61:88:72:4f:90:65:73:09:a8:56:be:b4: 12:ed:80:44:1e:df:9c:3d:12:cc:90:47:34:b9:21:30:bb:e2: ac:f6:31:31:a2:e3:c3:55:5c:68:f1:02:e0:62:a1:03:84:e0: a2:15:db:52:af:e6:6a:bd:f7:e8:90:f7:5a:c1:35:ca:55:c3: f3:72:fe:3f:3c:97:a3:ea:06:47:96:27:5a:08:de:57:a4:73: 52:bb:01:27:f7:80:65:d8:7c:23:6f:c9:65:fd:02:4e:3f:e3: 8a:05:48:f8:1a:56:b6:9f:08:47:4c:d1:9b:19:ed:8c:31:00: 68:f6:c7:6d:52:c8:4d:6d:92:4b:f8:80:92:c9:83:c4:76:35: 4a:98:e0:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB7F6SJoALic2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ODY3MTgyYTktM2Q1OC00MjQyLWE4NGItNjE3ODIzNDZlMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4jSEOx2MdroiA2UzOpeUc0ITcXzJN2+HTcE NR7Nzt+NvAoQCC96EwkW847/CpOzcdwJO8M20AoSWLbPLa2IqgcYrpIyPgNS2KAS UmOI+zeLTKJ5+HyabCiKMii8qDUJDkCPwGGWP9vwLyBWPjsujzAMOaJ7TrcM+cnl U6MqXCG4rLtTkMAlOIFS2hhmknFiToE5c6tA0Pz01gjD/a2AC9CK8szW7OhdRmYs yMI3Uy3gb3qGTn4Yg+SLWJIbx7+QjtMl1DrcGQzTcgTAZg50GIR5bKsCsEHDSpoY iXb7nSY7voopIKoHFY6RyXVsi0xHeE5PqERO9muZXbJwFWYg5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUMp5gGH5TEuB1PQ+S9GousqcpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOThjODljN2EtYjAxNC0z ODA1LTkyNGQtNDgzMTE0MWNhNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Sht4MSMIDU9CgQzrltl9ZhdFOOvXL0CO8fj5AXpMD9ahB5xKv/j0Q ofuSngxHJO7eAMqpmcOlWzWqTcj/7LF2ocRr4UJMhXWRgszD3JUsJ/2OO36JaGIz lBohUHe9Jdp2XGFvMiiUXHAojy5PhyjT5WGIck+QZXMJqFa+tBLtgEQe35w9EsyQ RzS5ITC74qz2MTGi48NVXGjxAuBioQOE4KIV21Kv5mq99+iQ91rBNcpVw/Ny/j88 l6PqBkeWJ1oI3lekc1K7ASf3gGXYfCNvyWX9Ak4/44oFSPgaVrafCEdM0ZsZ7Ywx AGj2x21SyE1tkkv4gJLJg8R2NUqY4KA= -----END CERTIFICATE-----Generated at Wed May 13 09:13:50 2026 by rpki-client