$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa File: a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa (raw, json) Hash identifier: pSR4jg4JcoJtY94Cz860O/ww4zLHHWW0djC2PRta4Hs= Subject key identifier: 8F:E9:68:44:63:2E:D0:32:FF:17:DC:AE:BB:03:4B:78:2E:59:5F:70 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AFD812E744E3D0237F1EA6C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa Signing time: Wed 27 Aug 2025 01:00:32 +0000 ROA not before: Wed 27 Aug 2025 01:00:32 +0000 ROA not after: Tue 25 Nov 2025 02:00:32 +0000 asID: 137409 IP address blocks: 206.123.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:81:2e:74:4e:3d:02:37:f1:ea:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 27 01:00:32 2025 GMT Not After : Nov 25 02:00:32 2025 GMT Subject: CN=bb832475-632a-46c3-b1b1-48bec01ce2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f3:90:4f:da:ac:59:33:40:8a:bd:d5:83:01: 61:f4:61:68:07:6d:8c:0c:c8:7b:f6:79:28:83:83: 7d:15:5c:27:da:3e:2f:28:7d:77:19:c7:8d:2d:81: 7d:6d:6e:71:e5:5e:10:f1:7d:1f:f2:e5:c5:f3:03: fb:bd:8b:42:a9:98:3e:c8:8e:4f:9a:33:07:a7:5c: a9:84:aa:b3:30:a9:14:76:b8:71:3e:7c:89:25:4c: 5a:d3:6c:06:33:2f:80:55:16:b3:4f:30:3d:71:82: 5e:0a:7c:78:d0:fd:7a:b1:34:7c:78:95:c3:8e:aa: af:7a:aa:01:3a:6d:fc:0e:86:d5:5e:2a:80:f1:b1: 04:4a:83:af:53:3c:be:e5:c2:c7:bb:50:8a:e6:6b: 34:00:88:c6:c3:e2:ab:5c:99:40:bf:6a:e2:ca:cd: c1:88:06:18:f3:1c:c4:bd:8c:81:12:04:2a:49:bf: 8b:c5:7f:80:40:15:de:1f:9a:4e:33:82:a8:0f:13: 13:ae:c3:55:d3:e2:57:6d:4b:7b:8b:07:5f:b8:d4: 92:33:7a:d2:17:6e:72:b6:03:15:45:4d:e8:37:4a: 91:c9:b1:fb:29:8e:25:b8:6f:c2:3a:71:91:3c:5d: 85:94:3d:b2:f4:98:e0:25:59:89:f3:ad:ce:67:a6: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E9:68:44:63:2E:D0:32:FF:17:DC:AE:BB:03:4B:78:2E:59:5F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:43:57:fb:f7:d1:00:2f:0c:74:52:81:8d:df:da:a1:d2:f6: db:c3:53:98:ed:49:ab:e1:cf:d4:ec:77:14:74:bc:8e:0b:cc: 78:91:1e:38:60:d5:03:d9:64:17:4f:ff:ae:47:6b:8a:a0:97: a6:2f:6d:85:68:1f:77:28:d0:05:dc:14:e5:4c:68:2f:e6:68: c8:8b:2a:b6:cc:21:df:84:90:05:70:ab:5d:6d:5c:3a:0d:ad: 27:6c:37:e2:f2:dc:fe:c7:91:b7:96:ec:4e:ef:7d:d8:1b:fe: d2:50:6e:a3:3c:c8:62:99:bc:58:81:27:b6:d8:cd:56:92:6e: 35:4a:a4:9c:a0:c1:58:66:ba:8f:76:eb:15:5c:33:e4:e4:32: 85:da:9a:a8:c8:55:cf:5b:87:33:41:57:32:61:13:7f:a4:b6: 06:03:ac:6d:a2:4e:9c:58:f3:c1:83:77:88:47:0c:45:e6:e8: c4:34:a5:d8:1a:fe:ce:a4:c0:90:58:f3:9d:b2:1c:ca:0d:18: 06:66:0e:e5:46:5b:70:f3:e9:29:16:34:c9:b5:34:d3:f5:e5: a0:47:32:77:aa:2c:bc:d1:28:eb:42:b4:34:7b:39:1a:80:73: 51:76:3b:cc:42:8b:05:d1:51:1e:0a:1a:61:f1:49:b6:d6:bd: ee:40:b2:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9gS50Tj0CN/HqbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNzAxMDAzMloXDTI1MTEyNTAyMDAzMlowLzEtMCsGA1UEAxMk YmI4MzI0NzUtNjMyYS00NmMzLWIxYjEtNDhiZWMwMWNlMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivOQT9qsWTNAir3VgwFh9GFoB22MDMh79nko g4N9FVwn2j4vKH13GceNLYF9bW5x5V4Q8X0f8uXF8wP7vYtCqZg+yI5PmjMHp1yp hKqzMKkUdrhxPnyJJUxa02wGMy+AVRazTzA9cYJeCnx40P16sTR8eJXDjqqveqoB Om38DobVXiqA8bEESoOvUzy+5cLHu1CK5ms0AIjGw+KrXJlAv2riys3BiAYY8xzE vYyBEgQqSb+LxX+AQBXeH5pOM4KoDxMTrsNV0+JXbUt7iwdfuNSSM3rSF25ytgMV RU3oN0qRybH7KY4luG/COnGRPF2FlD2y9JjgJVmJ863OZ6bneQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/paERjLtAy/xfcrrsDS3guWV9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTBmMjkwZTktZmQ2My0z ZWY2LTlmMzUtYjI1MmY2ZjRlNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJDV/v30QAvDHRSgY3f2qHS9tvDU5jtSavhz9TsdxR0vI4LzHiRHjhg 1QPZZBdP/65Ha4qgl6YvbYVoH3co0AXcFOVMaC/maMiLKrbMId+EkAVwq11tXDoN rSdsN+Ly3P7HkbeW7E7vfdgb/tJQbqM8yGKZvFiBJ7bYzVaSbjVKpJygwVhmuo92 6xVcM+TkMoXamqjIVc9bhzNBVzJhE3+ktgYDrG2iTpxY88GDd4hHDEXm6MQ0pdga /s6kwJBY852yHMoNGAZmDuVGW3Dz6SkWNMm1NNP15aBHMneqLLzRKOtCtDR7ORqA c1F2O8xCiwXRUR4KGmHxSbbWve5Asug= -----END CERTIFICATE-----Generated at Sun Sep 7 12:42:18 2025 by rpki-client