$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a6966b5c-bdf4-3957-a9f6-5fe30113fdf2.roa File: a6966b5c-bdf4-3957-a9f6-5fe30113fdf2.roa (raw, json) Hash identifier: R0XivIU38Y+e5z5sD3JoRvv27B1YlPj1tsWuqzlw/LM= Subject key identifier: 55:06:BD:D5:EF:53:A7:FF:32:DE:C5:37:27:3F:5E:65:C0:B0:3E:45 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B395BEC61FA07C657BAE03800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a6966b5c-bdf4-3957-a9f6-5fe30113fdf2.roa Signing time: Wed 17 Sep 2025 11:33:59 +0000 ROA not before: Wed 17 Sep 2025 11:33:59 +0000 ROA not after: Tue 16 Dec 2025 12:33:59 +0000 asID: 9009 IP address blocks: 206.123.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:5b:ec:61:fa:07:c6:57:ba:e0:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 17 11:33:59 2025 GMT Not After : Dec 16 12:33:59 2025 GMT Subject: CN=df524068-caca-4305-a41a-d7ea49f59f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:6a:82:3c:d2:23:7f:bf:34:28:b5:5e:6c: 0d:94:c5:6e:0c:68:d0:49:c8:54:96:78:6b:7c:02: ea:62:e3:d1:81:8d:b9:82:17:55:64:5c:40:e8:e7: f3:5a:30:73:a2:2f:fb:41:9f:9e:ed:36:eb:c3:5e: 85:fc:4c:60:89:82:35:fa:17:64:94:c8:75:a9:24: 73:71:a6:1d:c5:69:74:a9:41:de:37:af:b5:e9:7a: d9:a6:52:97:ad:7c:3b:e1:8d:81:50:83:9b:b5:37: bb:1e:3d:c2:00:a5:3d:4f:7e:ee:16:1e:f7:4a:a4: df:ad:11:06:1a:8f:e2:69:a8:56:45:55:d7:9f:89: 3a:be:c0:cb:39:43:49:73:21:19:ea:8d:fd:0f:c9: 90:5c:c7:44:f5:27:1e:15:3a:bc:e9:c9:9f:1c:8a: 16:2d:6b:c5:35:66:1e:a8:65:88:dd:c1:75:b9:88: 58:36:8c:54:2f:9c:9a:90:29:ee:ca:15:cc:cd:4e: 05:96:4e:e6:e6:2b:93:92:a6:8a:fe:23:f4:41:53: 5c:1d:25:a9:8d:70:6e:a7:0d:b0:aa:68:51:53:38: 5d:22:43:33:6c:80:1d:bb:d5:5f:d9:0c:a5:73:82: 55:b7:00:84:18:a8:52:e0:73:9e:b9:8a:2f:51:d3: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:06:BD:D5:EF:53:A7:FF:32:DE:C5:37:27:3F:5E:65:C0:B0:3E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a6966b5c-bdf4-3957-a9f6-5fe30113fdf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:68:8b:8b:7b:44:7f:89:55:4d:37:72:1a:5d:d0:0d:93:82: 99:c5:e9:7c:b1:d9:12:a1:fc:fa:a6:b0:f2:bc:a1:3e:72:2e: dd:01:1a:ce:21:f7:82:de:ef:8e:37:01:a0:ac:ad:1b:93:b8: 45:12:b3:3f:b4:ab:86:71:fb:5f:09:6d:1e:e8:23:7f:53:42: 50:5e:24:53:e2:4f:bb:33:62:b3:80:f8:8c:d4:81:df:94:71: 20:b0:16:8e:ea:1a:0a:4e:96:d0:5d:9e:f8:b6:b5:91:a6:a2: 79:40:c0:6b:3d:7a:28:32:36:7b:b1:35:ad:7a:8e:ac:be:24: 0a:8d:9d:9e:c7:04:c9:28:83:5e:af:24:71:93:83:56:8b:aa: c7:10:10:64:b9:0e:0e:70:7b:08:06:b8:c3:c4:bc:db:c0:b9: e4:1e:af:b9:86:6d:fd:c8:1a:4a:e2:95:d2:23:85:98:91:ed: e3:95:ec:fd:44:10:57:de:9c:9c:9e:78:f4:d7:0a:ac:f7:b9: 14:3f:18:cc:46:5e:5f:d2:84:de:c6:3b:8c:e4:2f:56:23:c0: 0c:f0:f3:18:e0:f0:c2:23:d7:91:19:b7:a8:ff:ac:f1:af:55: 62:17:6b:48:02:fd:a7:90:fe:e6:16:12:79:b0:7f:db:6a:da: ff:fb:e0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5W+xh+gfGV7rgOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNzExMzM1OVoXDTI1MTIxNjEyMzM1OVowLzEtMCsGA1UEAxMk ZGY1MjQwNjgtY2FjYS00MzA1LWE0MWEtZDdlYTQ5ZjU5ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oNqgjzSI3+/NCi1XmwNlMVuDGjQSchUlnhr fALqYuPRgY25ghdVZFxA6OfzWjBzoi/7QZ+e7Tbrw16F/ExgiYI1+hdklMh1qSRz caYdxWl0qUHeN6+16XrZplKXrXw74Y2BUIObtTe7Hj3CAKU9T37uFh73SqTfrREG Go/iaahWRVXXn4k6vsDLOUNJcyEZ6o39D8mQXMdE9SceFTq86cmfHIoWLWvFNWYe qGWI3cF1uYhYNoxUL5yakCnuyhXMzU4Flk7m5iuTkqaK/iP0QVNcHSWpjXBupw2w qmhRUzhdIkMzbIAdu9Vf2Qylc4JVtwCEGKhS4HOeuYovUdMfxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUGvdXvU6f/Mt7FNyc/XmXAsD5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTY5NjZiNWMtYmRmNC0z OTU3LWE5ZjYtNWZlMzAxMTNmZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFoi4t7RH+JVU03chpd0A2TgpnF6Xyx2RKh/PqmsPK8oT5yLt0BGs4h 94Le7443AaCsrRuTuEUSsz+0q4Zx+18JbR7oI39TQlBeJFPiT7szYrOA+IzUgd+U cSCwFo7qGgpOltBdnvi2tZGmonlAwGs9eigyNnuxNa16jqy+JAqNnZ7HBMkog16v JHGTg1aLqscQEGS5Dg5wewgGuMPEvNvAueQer7mGbf3IGkrildIjhZiR7eOV7P1E EFfenJyeePTXCqz3uRQ/GMxGXl/ShN7GO4zkL1YjwAzw8xjg8MIj15EZt6j/rPGv VWIXa0gC/aeQ/uYWEnmwf9tq2v/74NQ= -----END CERTIFICATE-----Generated at Sun Oct 19 07:06:00 2025 by rpki-client