$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa File: 98c89c7a-b014-3805-924d-4831141ca4b6.roa (raw, json) Hash identifier: n6ZZi1dtWNN7kzHvUZwSvgRbO2qmFqic0HYD29Rz5u0= Subject key identifier: E4:9C:AC:A1:FA:9F:D4:C6:21:77:06:18:9F:31:47:E9:B1:34:F8:4E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CC611F87FF2BF221E7001D620 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 137409 IP address blocks: 172.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:f8:7f:f2:bf:22:1e:70:01:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=5d9e5660-f49c-4d99-82fd-79a937f1c086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:31:ed:1a:7f:e1:79:b9:16:ce:b2:da:a7: 5c:0a:cf:76:e4:86:44:87:f4:9b:90:80:a4:cf:e8: a2:41:c3:b4:ee:1c:20:4d:81:56:c1:15:eb:e3:f8: fe:b7:2a:c3:ea:60:5c:66:4a:09:c0:a8:a6:aa:09: 21:27:7f:0f:51:c3:fc:f2:a6:3b:c9:68:64:aa:eb: 67:72:4a:3a:7d:90:f9:2a:ea:be:52:2c:04:e7:73: 34:e6:97:5d:f4:36:2d:cb:02:2c:43:14:f8:99:d2: 88:1a:2c:55:d2:fd:1a:67:05:69:1c:33:f6:36:ed: e7:4f:ba:82:2c:8d:5d:84:64:3e:d9:5c:c2:f2:b2: 0e:42:4f:76:2a:c7:53:fb:f4:ec:eb:1d:48:6e:fe: 1e:6d:54:07:34:f5:ad:f8:96:0b:cf:05:29:3c:8f: f5:d1:0a:d3:e9:fc:09:ca:66:e6:8b:41:43:d0:b0: da:1b:21:70:42:5f:8f:84:03:0d:25:c4:4c:6f:aa: 9d:d8:6d:52:98:c2:85:dc:55:58:b4:f9:18:5f:c1: b4:0d:62:bc:9c:4c:20:6b:76:53:1a:d4:1e:98:55: 88:46:32:a4:7d:fd:40:89:38:f3:a7:e5:ed:26:66: 48:40:39:c9:58:09:9d:9c:48:de:2a:a2:0e:89:c5: 5f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9C:AC:A1:FA:9F:D4:C6:21:77:06:18:9F:31:47:E9:B1:34:F8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:08:b0:90:a8:c5:2d:88:47:23:d4:29:0b:d4:8a:7d:47:93: 37:0c:48:41:61:6c:8e:ed:eb:42:df:fc:a6:93:19:b4:f0:bf: 90:4a:b1:b7:bb:5d:8f:72:1e:4d:b0:4c:a5:f4:4a:2e:d0:a9: 3b:95:e4:b3:cd:f5:42:05:ac:c2:65:57:db:c3:f8:2b:c7:37: 33:69:a3:b5:f5:1b:75:97:20:dc:a0:eb:9a:e8:46:9f:35:04: 39:3b:9c:ec:5f:14:ae:6a:b4:d9:a7:7b:4e:74:b5:ca:7c:d0: 53:29:df:24:10:c4:5f:37:b5:8f:17:4f:fa:9c:07:7b:5e:27: 77:ea:3e:0b:f1:a9:bb:33:b5:59:17:36:4d:8a:bd:77:a9:6b: 09:a9:44:70:11:42:79:08:8b:d3:74:4e:8a:3e:96:fc:44:ab: 09:db:21:0a:61:34:a1:32:2c:ba:94:50:d9:4a:5f:0e:0a:dd: 36:28:5e:a6:96:8a:7d:d3:5c:5e:63:5e:4f:5e:93:b8:9b:f0: d8:a3:a2:8b:05:c8:41:a9:83:c3:b0:86:a0:a3:48:84:85:71: b5:27:b0:75:eb:bd:df:76:6b:a0:96:d7:41:a9:56:a4:19:ed: e7:d4:80:4b:42:d2:36:a9:a7:57:79:f4:e2:72:c6:41:55:1c: 6d:e3:3a:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEfh/8r8iHnAB1iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NWQ5ZTU2NjAtZjQ5Yy00ZDk5LTgyZmQtNzlhOTM3ZjFjMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE0x7Rp/4Xm5Fs6y2qdcCs925IZEh/SbkICk z+iiQcO07hwgTYFWwRXr4/j+tyrD6mBcZkoJwKimqgkhJ38PUcP88qY7yWhkqutn cko6fZD5Kuq+UiwE53M05pdd9DYtywIsQxT4mdKIGixV0v0aZwVpHDP2Nu3nT7qC LI1dhGQ+2VzC8rIOQk92KsdT+/Ts6x1Ibv4ebVQHNPWt+JYLzwUpPI/10QrT6fwJ ymbmi0FD0LDaGyFwQl+PhAMNJcRMb6qd2G1SmMKF3FVYtPkYX8G0DWK8nEwga3ZT GtQemFWIRjKkff1AiTjzp+XtJmZIQDnJWAmdnEjeKqIOicVflQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOScrKH6n9TGIXcGGJ8xR+mxNPhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOThjODljN2EtYjAxNC0z ODA1LTkyNGQtNDgzMTE0MWNhNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMIsJCoxS2IRyPUKQvUin1HkzcMSEFhbI7t60Lf/KaTGbTwv5BKsbe7 XY9yHk2wTKX0Si7QqTuV5LPN9UIFrMJlV9vD+CvHNzNpo7X1G3WXINyg65roRp81 BDk7nOxfFK5qtNmne050tcp80FMp3yQQxF83tY8XT/qcB3teJ3fqPgvxqbsztVkX Nk2KvXepawmpRHARQnkIi9N0Too+lvxEqwnbIQphNKEyLLqUUNlKXw4K3TYoXqaW in3TXF5jXk9ek7ib8NijoosFyEGpg8OwhqCjSISFcbUnsHXrvd92a6CW10GpVqQZ 7efUgEtC0japp1d59OJyxkFVHG3jOmw= -----END CERTIFICATE-----Generated at Sun Mar 1 20:50:19 2026 by rpki-client