$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e88f833-9887-31a0-bb33-3151d7b9f803.roa File: 2e88f833-9887-31a0-bb33-3151d7b9f803.roa (raw, json) Hash identifier: Egq4xhN9oE26oKu2IhYgeJDJUwyKFUicLp6KHKNhiug= Subject key identifier: 92:BD:3B:E5:94:97:37:88:47:85:14:A1:62:92:03:08:35:05:9F:DF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E842A331E6E5B3E078EDF3780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e88f833-9887-31a0-bb33-3151d7b9f803.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 207083 IP address blocks: 206.123.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:33:1e:6e:5b:3e:07:8e:df:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=06e20a39-06e7-4c7d-b58c-76561952392a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:27:32:1a:d2:cd:2a:a2:ac:a7:75:13:78: 04:c5:9e:32:21:cc:4f:a5:2f:1a:1e:5c:9f:38:d0: bd:ba:af:85:b5:fb:71:b3:97:ac:8f:8f:c9:21:17: 3f:2d:0d:16:78:2a:d4:e4:cd:3e:fa:7e:e0:b9:ab: c7:67:0b:94:0b:19:8e:1a:c5:5f:39:cf:a9:76:44: 21:c5:71:7a:62:2a:57:e8:cd:04:d7:04:c3:a4:3d: 03:08:37:c6:4d:69:4b:67:9f:45:2c:4f:ac:dc:86: 4f:48:1f:dc:2e:b8:56:8d:66:2b:69:ee:a0:1b:82: ba:72:98:b5:5d:b8:c7:5b:25:7b:52:8d:90:58:7f: 32:7e:b7:72:10:dc:6f:ad:db:8c:fa:d6:7d:24:42: 21:4c:d4:5a:ae:a1:85:a3:2a:e7:cf:22:dd:63:24: 64:42:d3:5b:1d:ce:41:83:7f:50:d8:a6:87:be:28: 30:07:69:51:fa:82:e0:ed:3a:a5:f2:38:a2:78:d4: 91:a0:7a:3d:4b:2d:45:b3:df:22:d9:83:6c:9a:99: e1:20:63:0c:e2:b5:88:1f:be:16:c4:1e:1d:c0:0d: e3:f0:10:33:b8:cc:c5:2d:11:58:77:85:03:b7:27: c2:ec:b9:71:64:84:eb:56:94:f2:f0:b0:a9:74:a2: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BD:3B:E5:94:97:37:88:47:85:14:A1:62:92:03:08:35:05:9F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e88f833-9887-31a0-bb33-3151d7b9f803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:42:63:97:44:2a:5b:be:a1:76:6a:eb:1b:bd:30:ca:37:68: bd:f5:b6:ca:7c:c8:87:78:44:be:e6:2c:f6:be:68:21:54:58: 70:4d:54:92:6a:dd:6f:c6:01:1a:65:b4:86:57:2c:35:cf:32: f1:c9:29:2d:5d:77:ce:2a:2c:e0:c0:69:43:57:11:f9:e5:78: b7:5b:64:4b:8f:a6:c4:77:14:6d:9a:46:24:2a:94:e2:58:5d: 5a:d1:f1:dd:c9:bc:a0:e5:dc:cf:ad:67:48:87:54:1e:53:71: da:1a:69:ff:54:51:2c:a4:76:92:f0:b9:f8:2a:08:5d:d8:27: 12:82:a2:c5:15:dd:1e:f9:5a:fc:a6:72:3f:df:d2:eb:ac:fd: e1:a2:71:c9:ec:d1:ce:bd:40:2d:f0:fb:d5:77:20:8c:73:07: eb:d6:6f:ec:0f:f9:23:d7:60:1e:76:9c:b1:15:c0:d8:2c:53: 5d:c2:58:06:42:a9:2e:be:5d:3b:ce:e4:59:0d:25:62:d6:6c: 03:b0:b0:6c:cd:a7:36:70:bb:cd:4a:6d:c8:8e:f1:a3:48:5b: 81:c4:3a:c9:ce:9b:a2:c8:c0:59:b6:05:57:52:ea:0e:b2:57: 25:46:98:bc:3f:bb:cb:e5:ba:eb:c5:18:4f:17:6a:a0:29:5c: 1f:4f:9b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjMebls+B47fN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk MDZlMjBhMzktMDZlNy00YzdkLWI1OGMtNzY1NjE5NTIzOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P0nMhrSzSqirKd1E3gExZ4yIcxPpS8aHlyf ONC9uq+Ftftxs5esj4/JIRc/LQ0WeCrU5M0++n7guavHZwuUCxmOGsVfOc+pdkQh xXF6YipX6M0E1wTDpD0DCDfGTWlLZ59FLE+s3IZPSB/cLrhWjWYrae6gG4K6cpi1 XbjHWyV7Uo2QWH8yfrdyENxvrduM+tZ9JEIhTNRarqGFoyrnzyLdYyRkQtNbHc5B g39Q2KaHvigwB2lR+oLg7Tql8jiieNSRoHo9Sy1Fs98i2YNsmpnhIGMM4rWIH74W xB4dwA3j8BAzuMzFLRFYd4UDtyfC7LlxZITrVpTy8LCpdKIjoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK9O+WUlzeIR4UUoWKSAwg1BZ/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmU4OGY4MzMtOTg4Ny0z MWEwLWJiMzMtMzE1MWQ3YjlmODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVCY5dEKlu+oXZq6xu9MMo3aL31tsp8yId4RL7mLPa+aCFUWHBNVJJq 3W/GARpltIZXLDXPMvHJKS1dd84qLODAaUNXEfnleLdbZEuPpsR3FG2aRiQqlOJY XVrR8d3JvKDl3M+tZ0iHVB5Tcdoaaf9UUSykdpLwufgqCF3YJxKCosUV3R75Wvym cj/f0uus/eGiccns0c69QC3w+9V3IIxzB+vWb+wP+SPXYB52nLEVwNgsU13CWAZC qS6+XTvO5FkNJWLWbAOwsGzNpzZwu81KbciO8aNIW4HEOsnOm6LIwFm2BVdS6g6y VyVGmLw/u8vluuvFGE8XaqApXB9Pm8U= -----END CERTIFICATE-----Generated at Tue Jul 21 14:57:40 2026 by rpki-client