$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa File: bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa (raw, json) Hash identifier: QaP3M4G1TA4CMosrNIHNLSub8HnHXchDGp1im21hmow= Subject key identifier: 4D:31:2B:DA:33:83:97:CF:AB:01:FF:DE:80:F7:15:3D:48:32:1A:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DAF1020D2466A57C134216340 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 396356 IP address blocks: 172.111.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:20:d2:46:6a:57:c1:34:21:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=902cae20-a922-467a-a3e7-d8885f2c01d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:a7:8e:91:6b:e7:b2:bd:b1:44:23:09:65: 70:a2:4b:04:5b:74:10:33:79:4b:36:4e:6b:75:75: 97:bf:48:fb:ed:6f:6c:90:10:8b:ee:6e:c4:6c:92: 91:89:7b:8f:bf:df:70:a8:05:6e:d5:04:6c:fa:ba: c8:9b:e2:c4:4b:f2:5d:df:93:9d:00:20:2c:31:2e: b8:37:f6:56:d3:a6:41:05:be:cc:45:ca:91:23:77: a9:c1:6d:38:fb:2f:21:13:fe:e4:c1:a3:d0:ce:63: d8:21:33:29:72:38:90:6a:7d:b5:bd:1d:89:0e:3a: 1b:9c:8f:53:e5:d1:a4:16:88:ab:eb:f7:39:ea:32: f1:29:ae:2e:0e:2c:2e:e1:31:fb:77:e0:66:5e:9b: 8a:76:f5:55:c3:5e:f3:4c:c3:db:a9:80:4f:cb:8b: 8d:a1:67:09:43:cd:c2:56:95:9c:24:9a:ed:c2:ae: 99:4b:65:f0:c5:d0:d7:24:97:1d:41:b8:48:81:ce: 58:bb:0a:0c:70:ff:4b:b4:0f:b0:0a:32:e1:0b:ca: f5:cb:49:78:32:d5:d4:0e:8d:b2:8f:27:d2:71:f5: a7:2d:da:f7:79:26:6e:78:65:1d:2b:8d:02:41:fc: 2e:e9:b6:34:eb:dc:2e:1a:c1:0e:7d:bf:7f:ea:7c: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:2B:DA:33:83:97:CF:AB:01:FF:DE:80:F7:15:3D:48:32:1A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f3:cf:f1:15:d0:f1:43:08:b0:dc:13:6e:8e:81:ed:7f:23: 5f:e7:1a:60:89:a9:bc:79:1d:45:68:dc:ec:71:f9:91:89:62: 79:db:5a:28:f9:6a:b1:79:6e:0e:5d:64:42:f5:bc:6d:71:8d: 7a:b2:77:83:ca:7e:7a:83:bc:07:0e:d6:6f:2f:72:c6:98:b0: 3a:bc:4a:89:d8:73:91:07:cf:a8:b3:7a:a0:27:89:01:16:d1: 02:23:ad:80:86:05:9f:af:ea:56:ae:a6:b1:58:05:12:23:38: 4d:ae:31:2c:4a:95:04:e9:37:f3:04:9e:62:ed:91:8c:84:a6: 6f:1e:6a:a9:d5:f6:fc:9c:34:04:8c:77:ee:45:d7:2d:4c:64: 25:44:38:95:c7:cd:3b:71:bb:77:65:34:a2:cd:75:4d:30:a2: ac:6f:12:21:d6:fd:ee:23:2a:c0:4f:d6:66:13:16:da:02:a7: c7:16:4f:53:29:ed:d1:17:37:95:ca:06:83:76:ee:e8:ff:ef: 06:98:04:ec:e9:b5:df:24:28:46:d2:05:ed:12:62:50:5d:1d: 2f:bf:9a:63:43:d7:ef:06:3e:f7:27:4f:64:e4:d3:df:37:14: 78:c8:db:c0:30:dc:c3:b6:43:f5:5d:80:ff:7d:84:43:be:ab: bc:92:ce:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECDSRmpXwTQhY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk OTAyY2FlMjAtYTkyMi00NjdhLWEzZTctZDg4ODVmMmMwMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUenjpFr57K9sUQjCWVwoksEW3QQM3lLNk5r dXWXv0j77W9skBCL7m7EbJKRiXuPv99wqAVu1QRs+rrIm+LES/Jd35OdACAsMS64 N/ZW06ZBBb7MRcqRI3epwW04+y8hE/7kwaPQzmPYITMpcjiQan21vR2JDjobnI9T 5dGkFoir6/c56jLxKa4uDiwu4TH7d+BmXpuKdvVVw17zTMPbqYBPy4uNoWcJQ83C VpWcJJrtwq6ZS2XwxdDXJJcdQbhIgc5YuwoMcP9LtA+wCjLhC8r1y0l4MtXUDo2y jyfScfWnLdr3eSZueGUdK40CQfwu6bY069wuGsEOfb9/6nye3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0xK9ozg5fPqwH/3oD3FT1IMhrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY5ZTQ5MjItMTg1OS0z N2IwLWJmNjItMmUxZWU2YWIyZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjzz/EV0PFDCLDcE26Oge1/I1/nGmCJqbx5HUVo3Oxx+ZGJYnnbWij5 arF5bg5dZEL1vG1xjXqyd4PKfnqDvAcO1m8vcsaYsDq8SonYc5EHz6izeqAniQEW 0QIjrYCGBZ+v6lauprFYBRIjOE2uMSxKlQTpN/MEnmLtkYyEpm8eaqnV9vycNASM d+5F1y1MZCVEOJXHzTtxu3dlNKLNdU0woqxvEiHW/e4jKsBP1mYTFtoCp8cWT1Mp 7dEXN5XKBoN27uj/7waYBOzptd8kKEbSBe0SYlBdHS+/mmND1+8GPvcnT2Tk0983 FHjI28Aw3MO2Q/VdgP99hEO+q7ySzjk= -----END CERTIFICATE-----Generated at Wed May 13 06:54:56 2026 by rpki-client