$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a101586e-d66c-3895-9373-91d9497be697.roa File: a101586e-d66c-3895-9373-91d9497be697.roa (raw, json) Hash identifier: TDVPHZ4jLFjP+u65gmv/hdiuxaWpAf1MZDZGgiduKFA= Subject key identifier: CC:F5:F2:AD:F1:5C:26:6D:B5:34:12:3C:7B:15:0A:15:66:F2:22:70 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D624A657440BD218D41C2B900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a101586e-d66c-3895-9373-91d9497be697.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 132372 IP address blocks: 172.111.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:65:74:40:bd:21:8d:41:c2:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=5d3821d4-5571-485c-85b5-b2adf2627725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:83:b5:3d:de:77:0a:74:c3:23:54:e1:aa: f2:93:90:82:9a:57:34:fe:31:0c:6a:2c:50:bf:38: d6:5d:0a:d9:a3:4a:39:68:cd:74:1d:63:08:3f:e5: d5:ac:6f:90:f6:57:ed:ad:be:7b:42:8e:b9:7b:7c: 07:17:fa:7d:c4:ba:8d:e3:df:90:00:3c:cf:8a:6c: c2:2c:14:27:74:63:82:7c:7f:06:3b:b0:98:94:f4: 14:71:d4:ba:df:6b:94:f6:c5:5c:40:4b:73:06:e6: 8c:a4:5b:db:90:c1:e0:a0:79:68:2a:97:df:bb:5b: 99:cf:c5:3e:c9:67:29:49:91:49:b3:9f:ec:ca:9d: 7a:43:b1:25:7b:eb:3e:1b:59:0e:10:2e:cc:87:71: 56:bb:40:8c:4e:ee:6e:3a:6e:e0:10:c7:09:e8:58: c9:22:41:b7:a5:11:f1:cc:43:b6:23:5a:20:e7:5e: 90:14:10:5e:83:48:1d:95:12:f7:a4:2b:3c:5d:cd: 9e:c6:34:ca:70:32:53:0a:74:8b:03:f3:13:2a:91: 6b:80:81:a5:e3:04:20:dc:cb:91:62:4d:a0:a7:f8: 90:1f:a5:e6:8e:6a:38:bb:9f:60:36:5d:6c:c8:71: 8d:dd:8f:4a:e0:40:39:30:a2:63:59:f3:dc:2e:dc: e1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F5:F2:AD:F1:5C:26:6D:B5:34:12:3C:7B:15:0A:15:66:F2:22:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a101586e-d66c-3895-9373-91d9497be697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cf:cd:05:a5:19:73:c9:4c:cb:98:6e:cb:9b:c2:cc:37:b2: 44:7d:cc:df:e4:58:5a:0a:97:e1:07:05:1b:18:8a:f3:14:3b: c4:82:3c:9b:72:a9:b0:d5:81:17:95:23:e2:40:8b:b8:4d:ca: 76:45:91:00:8b:28:d3:27:4f:9c:73:ee:aa:68:9f:1f:95:91: 2a:3d:ce:3f:01:c0:8d:a1:33:ea:3a:ee:3c:7d:f6:04:98:34: 5f:71:8a:0a:65:52:be:0f:8a:2d:4a:03:2e:20:e9:10:9c:5a: 70:6a:3c:58:39:ac:bf:67:79:a7:b8:d0:2f:b1:6a:6f:63:4f: da:7e:d0:94:a8:d2:d2:0a:79:ac:d1:d3:98:8a:5a:ab:18:17: a2:c0:7f:64:2e:d7:b1:1c:77:53:6b:43:58:dd:fc:e3:70:8e: 27:89:90:52:71:cf:71:43:9d:a8:73:62:55:40:75:6f:46:8a: 71:14:4f:2f:cf:18:6a:fa:89:59:4f:dd:8f:89:2f:bf:9b:2c: 53:40:fb:eb:14:cc:45:c7:79:17:4f:db:13:53:a1:b1:3b:87: cc:e8:37:7c:1a:20:7e:35:ee:b8:62:78:22:a6:98:cd:1c:12: 14:04:41:e4:10:0d:92:b4:9e:11:42:6e:7f:e2:5e:e7:03:29: 3c:40:7f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSmV0QL0hjUHCuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk NWQzODIxZDQtNTU3MS00ODVjLTg1YjUtYjJhZGYyNjI3NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b+DtT3edwp0wyNU4aryk5CCmlc0/jEMaixQ vzjWXQrZo0o5aM10HWMIP+XVrG+Q9lftrb57Qo65e3wHF/p9xLqN49+QADzPimzC LBQndGOCfH8GO7CYlPQUcdS632uU9sVcQEtzBuaMpFvbkMHgoHloKpffu1uZz8U+ yWcpSZFJs5/syp16Q7Ele+s+G1kOEC7Mh3FWu0CMTu5uOm7gEMcJ6FjJIkG3pRHx zEO2I1og516QFBBeg0gdlRL3pCs8Xc2exjTKcDJTCnSLA/MTKpFrgIGl4wQg3MuR Yk2gp/iQH6Xmjmo4u59gNl1syHGN3Y9K4EA5MKJjWfPcLtzhkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz18q3xXCZttTQSPHsVChVm8iJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTEwMTU4NmUtZDY2Yy0z ODk1LTkzNzMtOTFkOTQ5N2JlNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrPzQWlGXPJTMuYbsubwsw3skR9zN/kWFoKl+EHBRsYivMUO8SCPJty qbDVgReVI+JAi7hNynZFkQCLKNMnT5xz7qponx+VkSo9zj8BwI2hM+o67jx99gSY NF9xigplUr4Pii1KAy4g6RCcWnBqPFg5rL9neae40C+xam9jT9p+0JSo0tIKeazR 05iKWqsYF6LAf2Qu17Ecd1NrQ1jd/ONwjieJkFJxz3FDnahzYlVAdW9GinEUTy/P GGr6iVlP3Y+JL7+bLFNA++sUzEXHeRdP2xNTobE7h8zoN3waIH417rhieCKmmM0c EhQEQeQQDZK0nhFCbn/iXucDKTxAf0c= -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:38 2026 by rpki-client