$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa File: 98c89c7a-b014-3805-924d-4831141ca4b6.roa (raw, json) Hash identifier: R4x2zAZ4838nB6MY3U1g/WZg0oCxA5ghpWQg873RF1U= Subject key identifier: 66:6B:1A:40:97:57:01:38:F2:62:39:0C:ED:67:64:F7:B9:62:90:07 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E86F4FA86B59895079D5D7080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 137409 IP address blocks: 172.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:fa:86:b5:98:95:07:9d:5d:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=f4a16d94-e1e1-4f51-95dd-c3fa985c9cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8c:28:88:0b:6a:5d:15:6b:d3:88:63:42:11: ba:1f:2f:48:01:73:4b:ea:6f:94:77:44:4f:61:32: 1b:f8:ee:a9:3d:61:12:80:dd:16:9a:85:26:f4:85: 79:29:48:21:b9:1b:9c:98:79:d9:95:04:e3:cd:ed: 3d:fc:e7:10:a3:18:9e:e9:d2:4f:f3:18:a2:13:50: 11:28:9d:6a:23:ae:2b:bf:e3:2d:e0:fd:ce:de:14: 18:d0:df:29:f7:4b:8c:33:1d:f8:3f:24:16:e8:12: 15:77:dc:65:65:80:05:4a:fa:78:af:b4:4b:aa:41: 99:50:ec:09:cc:2d:cf:ab:39:ff:40:80:d3:21:8b: 3f:68:8d:1e:34:02:03:fb:69:ac:6e:ce:0b:cc:1c: c2:bc:5d:d8:1d:d1:82:61:13:cb:63:27:45:f4:78: fc:58:09:36:f4:01:39:0e:d5:6b:67:ec:77:44:eb: 30:b0:15:d5:f8:39:a6:b6:2c:5d:c9:9f:6f:6d:32: e7:07:91:36:4c:49:3a:4d:d1:0e:78:64:7f:83:c4: 8b:85:41:30:f4:49:54:0e:ad:23:f2:b5:78:0e:21: f5:bb:7a:0c:5a:a3:c1:b5:6f:6d:b2:ec:c9:be:f7: a9:a3:dc:5f:3e:f0:7b:3d:79:78:bc:4c:70:8f:e8: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6B:1A:40:97:57:01:38:F2:62:39:0C:ED:67:64:F7:B9:62:90:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:08:7f:15:9a:0f:0e:b2:78:ab:15:4a:70:68:bc:7a:f7:7a: 08:5a:a5:44:10:dc:28:f0:d4:7a:02:6a:44:fc:dd:54:e7:f6: 87:d7:ee:2e:aa:8c:91:96:4a:6d:c7:03:02:e3:9c:99:ac:35: eb:46:dc:39:72:08:b1:cc:e4:25:af:d3:4c:a1:f8:0f:e2:fa: 18:c3:3a:24:54:a1:04:53:da:98:be:b9:09:20:b0:99:59:c5: b0:37:a8:fa:ad:8b:89:25:e7:3c:5e:0a:99:72:6f:8b:9f:b8: e1:d9:79:ca:46:4c:ba:58:e8:00:4a:31:93:77:78:2e:78:0d: e7:58:72:49:6a:6f:54:35:ee:9c:25:d5:ed:63:f8:b1:c5:aa: 3d:43:1c:36:13:9a:9b:55:37:66:94:7a:2b:08:27:31:ce:e4: 8c:ae:ad:35:eb:d3:b1:d1:49:a9:6b:48:21:2c:24:5d:46:b0: 93:85:47:0c:b7:1c:df:54:2a:25:75:73:00:15:06:d0:6c:c5: 1b:6e:a4:62:0c:24:b5:3a:74:6b:c2:b8:61:b5:ff:0b:75:15: 87:67:2b:a9:bd:e0:ee:d1:d0:1c:ad:de:c7:2b:6a:e2:01:b6: bc:24:f3:94:a5:ff:a8:bf:cb:71:d5:ab:ce:6e:91:f6:97:20: f1:73:aa:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PqGtZiVB51dcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZjRhMTZkOTQtZTFlMS00ZjUxLTk1ZGQtYzNmYTk4NWM5Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYwoiAtqXRVr04hjQhG6Hy9IAXNL6m+Ud0RP YTIb+O6pPWESgN0WmoUm9IV5KUghuRucmHnZlQTjze09/OcQoxie6dJP8xiiE1AR KJ1qI64rv+Mt4P3O3hQY0N8p90uMMx34PyQW6BIVd9xlZYAFSvp4r7RLqkGZUOwJ zC3Pqzn/QIDTIYs/aI0eNAID+2msbs4LzBzCvF3YHdGCYRPLYydF9Hj8WAk29AE5 DtVrZ+x3ROswsBXV+DmmtixdyZ9vbTLnB5E2TEk6TdEOeGR/g8SLhUEw9ElUDq0j 8rV4DiH1u3oMWqPBtW9tsuzJvvepo9xfPvB7PXl4vExwj+h0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZrGkCXVwE48mI5DO1nZPe5YpAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOThjODljN2EtYjAxNC0z ODA1LTkyNGQtNDgzMTE0MWNhNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoIfxWaDw6yeKsVSnBovHr3eghapUQQ3Cjw1HoCakT83VTn9ofX7i6q jJGWSm3HAwLjnJmsNetG3DlyCLHM5CWv00yh+A/i+hjDOiRUoQRT2pi+uQkgsJlZ xbA3qPqti4kl5zxeCplyb4ufuOHZecpGTLpY6ABKMZN3eC54DedYcklqb1Q17pwl 1e1j+LHFqj1DHDYTmptVN2aUeisIJzHO5IyurTXr07HRSalrSCEsJF1GsJOFRwy3 HN9UKiV1cwAVBtBsxRtupGIMJLU6dGvCuGG1/wt1FYdnK6m94O7R0Byt3scrauIB trwk85Sl/6i/y3HVq85ukfaXIPFzqtk= -----END CERTIFICATE-----Generated at Tue Jul 21 01:39:49 2026 by rpki-client