$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa File: 3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa (raw, json) Hash identifier: 6GlPA48yfOCuGm8Dpstcw5vYqLNl5OlL/h699/dvK+Y= Subject key identifier: 5D:A6:41:95:24:19:DD:D0:B7:3C:F6:5C:14:B1:A6:6A:46:7B:F0:7E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AFD812F2F51D539A19A1F0A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa Signing time: Wed 27 Aug 2025 01:00:32 +0000 ROA not before: Wed 27 Aug 2025 01:00:32 +0000 ROA not after: Tue 25 Nov 2025 02:00:32 +0000 asID: 137409 IP address blocks: 206.123.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:81:2f:2f:51:d5:39:a1:9a:1f:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 27 01:00:32 2025 GMT Not After : Nov 25 02:00:32 2025 GMT Subject: CN=3828c1e4-0afb-4998-b4e8-c1c356756eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:32:43:cf:1a:31:ca:82:18:31:24:c2:e4: 7c:c9:53:eb:e4:ad:0b:00:da:cd:df:bb:25:d7:b8: d7:11:5f:c2:93:4f:a6:84:ba:94:cb:8c:c4:5f:ec: 8a:a2:ec:f2:fa:75:76:f4:1d:06:27:3d:8d:c7:bd: b0:3f:4b:6f:e6:9a:0e:7e:6f:b2:9f:3f:0e:d9:1a: ca:cc:a8:3c:f4:de:cb:a8:1e:7c:92:1c:00:92:eb: 1e:af:c7:92:cd:05:01:40:83:bb:96:36:09:94:69: 3a:d5:1a:7c:73:cd:15:7d:83:bc:fb:0f:60:97:e8: 51:9e:aa:ca:b9:0d:06:83:d5:1d:3a:46:a4:57:89: 7d:24:a3:bd:85:04:23:3e:7b:a4:ba:8c:1e:af:3f: 44:50:f1:ec:28:cd:c2:80:da:7e:f0:03:8a:73:cc: 69:ee:04:b0:f7:fb:8d:97:37:07:ad:d9:ca:33:37: 9b:33:e4:15:ef:c4:81:26:d6:f6:a7:b4:e4:ec:a9: d7:e5:a2:b3:0d:81:a9:d8:35:20:00:fc:60:97:e8: 04:4c:ee:46:f7:5b:3b:1e:79:41:ae:ce:0e:7f:8c: b8:0d:7f:4c:8b:24:96:75:e6:92:89:7d:6d:94:7f: 97:da:37:88:4c:7f:56:cc:6a:ca:d8:cb:01:c3:c4: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:41:95:24:19:DD:D0:B7:3C:F6:5C:14:B1:A6:6A:46:7B:F0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c648c2a-11dd-3a6f-908c-a4d1816c695e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:64:17:8d:07:64:0b:00:e4:09:89:f9:da:b5:39:6d:d9:ff: fb:1a:92:d5:c4:84:9a:37:51:af:0c:14:b1:fc:0a:57:ed:ab: d4:e1:af:d2:53:d2:79:fa:b2:06:da:1e:24:07:54:f7:fa:e3: d2:66:98:3c:c4:cd:d9:91:ff:25:17:71:1d:8d:50:ba:49:86: 98:56:fc:db:c3:db:cb:94:be:a0:ff:b6:09:ee:b5:c3:63:d3: bc:b8:e6:32:34:ee:48:84:7a:e0:65:ac:4f:77:6b:24:78:3f: d3:23:73:82:bf:ff:d0:59:91:05:50:6d:62:c7:52:1f:22:fc: f2:14:56:89:75:40:54:38:47:ea:01:2e:75:af:56:9e:eb:48: 10:5a:88:54:b8:51:e3:f0:c0:9b:37:c4:35:79:67:c5:db:e8: 69:a2:cf:9e:b5:5d:5b:fe:02:ad:14:a6:7e:42:9c:ed:14:a9: b3:f0:61:19:4d:6c:96:b0:04:8c:9f:85:dc:82:81:c6:09:d3: 6c:b0:e5:28:da:58:40:77:46:4e:71:a3:3a:b3:8a:b9:d6:38: 6c:ed:82:66:54:e7:70:cf:17:fe:7f:c6:cd:3e:42:cc:29:ce: ed:e4:ff:50:8d:db:0b:24:4c:d2:5c:fb:51:33:d8:f0:3d:58: c8:70:2a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9gS8vUdU5oZofCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNzAxMDAzMloXDTI1MTEyNTAyMDAzMlowLzEtMCsGA1UEAxMk MzgyOGMxZTQtMGFmYi00OTk4LWI0ZTgtYzFjMzU2NzU2ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLcyQ88aMcqCGDEkwuR8yVPr5K0LANrN37sl 17jXEV/Ck0+mhLqUy4zEX+yKouzy+nV29B0GJz2Nx72wP0tv5poOfm+ynz8O2RrK zKg89N7LqB58khwAkuser8eSzQUBQIO7ljYJlGk61Rp8c80VfYO8+w9gl+hRnqrK uQ0Gg9UdOkakV4l9JKO9hQQjPnukuowerz9EUPHsKM3CgNp+8AOKc8xp7gSw9/uN lzcHrdnKMzebM+QV78SBJtb2p7Tk7KnX5aKzDYGp2DUgAPxgl+gETO5G91s7HnlB rs4Of4y4DX9MiySWdeaSiX1tlH+X2jeITH9WzGrK2MsBw8Q0MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2mQZUkGd3Qtzz2XBSxpmpGe/B+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2M2NDhjMmEtMTFkZC0z YTZmLTkwOGMtYTRkMTgxNmM2OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlkF40HZAsA5AmJ+dq1OW3Z//saktXEhJo3Ua8MFLH8Clftq9Thr9JT 0nn6sgbaHiQHVPf649JmmDzEzdmR/yUXcR2NULpJhphW/NvD28uUvqD/tgnutcNj 07y45jI07kiEeuBlrE93ayR4P9Mjc4K//9BZkQVQbWLHUh8i/PIUVol1QFQ4R+oB LnWvVp7rSBBaiFS4UePwwJs3xDV5Z8Xb6Gmiz561XVv+Aq0Upn5CnO0UqbPwYRlN bJawBIyfhdyCgcYJ02yw5SjaWEB3Rk5xozqzirnWOGztgmZU53DPF/5/xs0+Qswp zu3k/1CN2wskTNJc+1Ez2PA9WMhwKuE= -----END CERTIFICATE-----Generated at Sat Sep 6 02:46:16 2025 by rpki-client