$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/131f86e5-3574-36a6-be31-a5ea8a4d4890.roa File: 131f86e5-3574-36a6-be31-a5ea8a4d4890.roa (raw, json) Hash identifier: B4/G7n69vhvog/lW3JhAT/y8xmVUY/GuMhbFcXHnPzM= Subject key identifier: EF:24:39:3D:64:A1:22:32:EC:C3:C8:90:C4:5B:25:20:48:D0:30:39 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EF941A91E508212D764846C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/131f86e5-3574-36a6-be31-a5ea8a4d4890.roa Signing time: Thu 27 Aug 2026 07:37:05 +0000 ROA not before: Thu 27 Aug 2026 07:37:05 +0000 ROA not after: Wed 25 Nov 2026 08:37:05 +0000 asID: 205960 IP address blocks: 206.123.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:41:a9:1e:50:82:12:d7:64:84:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 27 07:37:05 2026 GMT Not After : Nov 25 08:37:05 2026 GMT Subject: CN=a1d1574a-02c1-44ee-bb24-5c64fe94680a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:de:f2:ce:e6:f7:bf:7f:ad:c6:fd:78:9a:65: dc:43:90:2e:91:9e:43:e7:4d:e6:dd:c8:15:83:a1: 81:90:25:41:dd:9f:08:1e:b7:87:05:d6:65:f9:66: 3d:91:11:c1:3e:18:62:48:60:da:33:23:18:fb:bc: ea:f4:42:73:d8:a6:66:ba:aa:f8:c5:5f:6f:77:a7: 99:1f:94:76:a0:a5:e1:54:7d:04:0b:2c:f7:c5:cb: 64:b9:8e:fa:78:9e:3c:ba:d4:fc:ee:ad:48:ab:92: ef:d0:19:38:26:1a:d7:e5:53:73:0b:a1:3e:9c:38: f9:23:ba:b6:37:73:54:ce:a1:18:5a:96:b0:f4:14: 89:6e:e2:cb:d9:8d:58:4b:a1:17:50:d5:87:28:3a: e4:27:28:32:fb:11:2d:c6:91:ea:d3:6f:1d:dc:dc: 5a:1c:93:a0:17:3b:6e:73:56:92:ed:54:64:d9:62: 25:6c:c1:87:7e:4e:cc:8c:1c:14:d0:e5:75:fe:68: 56:25:61:ed:44:ab:4b:c2:82:01:4b:68:33:56:8a: 0a:7c:86:d7:16:3e:5d:97:d2:1c:15:6f:61:fc:f7: 70:0e:d8:7f:a7:d1:ff:49:b4:7a:b0:17:52:54:01: 5c:62:c9:0b:01:2e:8b:ae:c3:7a:05:16:40:22:11: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:24:39:3D:64:A1:22:32:EC:C3:C8:90:C4:5B:25:20:48:D0:30:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/131f86e5-3574-36a6-be31-a5ea8a4d4890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cf:d0:3f:6b:61:64:d8:36:15:62:ec:15:82:d7:96:52:15: b9:a1:42:2d:79:93:ef:17:74:a0:99:be:fa:86:3d:e6:50:d2: db:b6:76:34:72:a5:91:26:e4:9b:eb:f9:9b:c0:39:5e:7c:ff: 3e:19:5f:fc:25:81:82:55:d1:2c:f2:81:41:4d:76:13:78:c3: a2:54:a9:39:5d:1b:7c:7f:e2:7b:6e:99:1a:fd:70:d7:18:06: 8e:c8:15:f0:6d:a9:ba:63:03:46:54:b8:9f:a8:c6:bc:71:29: b3:97:df:9a:81:f7:be:12:24:d0:b1:cd:16:27:bd:f2:b6:95: 8d:1f:22:f5:fe:44:73:6c:0f:a5:cd:6e:a9:2f:02:ed:0a:86: 1b:06:f7:77:3f:57:c9:1e:08:43:42:57:75:2a:a0:df:13:82: 0f:01:13:d8:5b:a1:1a:e5:b2:c6:43:ba:7f:b0:bd:03:c4:5a: 5f:c7:ba:d4:45:ad:cc:b5:31:2b:3d:1b:22:9d:ca:94:f0:22: 35:42:18:2c:63:ed:06:e1:62:53:6a:1b:8b:6e:9d:46:cd:d1: 49:c9:3f:84:41:bb:5d:f4:5c:bd:28:f5:01:98:d0:e0:b0:ed: 7e:77:44:19:16:6e:38:ad:1f:df:cc:6b:74:55:97:c4:b4:24: 3b:8c:34:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE75QakeUIIS12SEbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyNzA3MzcwNVoXDTI2MTEyNTA4MzcwNVowLzEtMCsGA1UEAxMk YTFkMTU3NGEtMDJjMS00NGVlLWJiMjQtNWM2NGZlOTQ2ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN7yzub3v3+txv14mmXcQ5AukZ5D503m3cgV g6GBkCVB3Z8IHreHBdZl+WY9kRHBPhhiSGDaMyMY+7zq9EJz2KZmuqr4xV9vd6eZ H5R2oKXhVH0ECyz3xctkuY76eJ48utT87q1Iq5Lv0Bk4JhrX5VNzC6E+nDj5I7q2 N3NUzqEYWpaw9BSJbuLL2Y1YS6EXUNWHKDrkJygy+xEtxpHq028d3NxaHJOgFztu c1aS7VRk2WIlbMGHfk7MjBwU0OV1/mhWJWHtRKtLwoIBS2gzVooKfIbXFj5dl9Ic FW9h/PdwDth/p9H/SbR6sBdSVAFcYskLAS6LrsN6BRZAIhFTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8kOT1koSIy7MPIkMRbJSBI0DA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTMxZjg2ZTUtMzU3NC0z NmE2LWJlMzEtYTVlYThhNGQ0ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLP0D9rYWTYNhVi7BWC15ZSFbmhQi15k+8XdKCZvvqGPeZQ0tu2djRy pZEm5Jvr+ZvAOV58/z4ZX/wlgYJV0SzygUFNdhN4w6JUqTldG3x/4ntumRr9cNcY Bo7IFfBtqbpjA0ZUuJ+oxrxxKbOX35qB974SJNCxzRYnvfK2lY0fIvX+RHNsD6XN bqkvAu0KhhsG93c/V8keCENCV3UqoN8Tgg8BE9hboRrlssZDun+wvQPEWl/HutRF rcy1MSs9GyKdypTwIjVCGCxj7QbhYlNqG4tunUbN0UnJP4RBu130XL0o9QGY0OCw 7X53RBkWbjitH9/Ma3RVl8S0JDuMNNc= -----END CERTIFICATE-----Generated at Fri Sep 4 22:48:40 2026 by rpki-client