$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa File: a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa (raw, json) Hash identifier: L72no9/I4VexDIw9wMoF9/9EkoYYRJWJQI7gTzibOWs= Subject key identifier: FE:5F:21:F7:F2:0B:A4:42:83:31:BC:CF:DE:2C:B7:72:A0:B0:A9:23 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EABB6E61CAEB3DF9A908945F8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 834 IP address blocks: 206.123.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:e6:1c:ae:b3:df:9a:90:89:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=9b3dd80c-75ef-4e8d-b887-c6c8d25c11e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ae:ad:4c:23:8e:a9:83:e8:9d:db:5a:1e:cb: 9b:b8:f4:93:4f:22:c6:aa:f1:92:dc:40:4c:00:3f: 0a:9d:6c:27:35:57:ec:25:5e:15:0e:99:19:f5:bb: 94:39:bd:3a:8a:8a:76:b8:5b:cf:76:52:c7:71:2a: 56:b8:f8:2e:5f:e0:82:5d:8e:40:8c:f5:0a:2c:11: 0f:47:e7:b8:50:75:93:d9:fa:b3:50:bc:18:ac:28: e2:d6:b1:42:4d:56:a6:3e:df:94:d6:5e:50:6a:16: df:2c:17:75:ae:25:7d:14:ca:bc:f5:d6:15:65:9f: 0e:2f:40:c0:3b:49:e0:0e:6e:cd:70:8a:74:a7:ed: 6b:de:45:13:61:1c:c5:ef:4a:59:12:6b:85:05:f7: 8c:e4:49:80:2a:d1:cd:1d:4c:e5:42:49:1e:60:e8: b3:16:27:0b:9e:2a:7c:7b:52:fe:15:22:af:e3:f7: 0f:bb:21:3c:05:42:26:48:b5:4e:7d:d6:23:56:57: ac:2e:3c:09:f2:00:61:21:c9:42:16:29:aa:83:73: c3:c9:5b:e5:ed:1e:0f:a9:0d:3d:77:52:1f:34:ce: 08:e1:6d:9f:ae:81:62:0d:8f:9b:69:6d:78:89:88: 07:c8:d8:4f:60:81:50:7d:e0:c8:1d:a9:70:ae:da: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5F:21:F7:F2:0B:A4:42:83:31:BC:CF:DE:2C:B7:72:A0:B0:A9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:35:51:e8:f9:d1:70:2f:e4:c8:db:e3:84:b4:02:d4:bd:89: 25:a8:c7:be:c0:98:57:8e:56:41:a0:ba:31:f2:fd:ba:6a:f5: 22:95:bf:35:3d:22:ea:2b:91:a4:0a:12:e3:ac:02:69:99:80: 8a:02:90:19:f5:ab:e4:00:b4:33:54:ad:ae:14:06:a3:d0:fc: d3:80:a1:e6:13:fe:3a:30:f8:fb:61:ce:f8:2f:5a:52:a1:df: 86:d1:05:20:e0:6c:e7:c6:93:e7:8c:05:71:be:07:0d:00:c3: fe:89:eb:83:17:be:a0:57:4c:ae:8e:9e:26:01:4b:f8:ba:c2: a9:1d:a8:8f:bc:26:3c:e1:93:c9:6d:7d:ec:5e:d6:f5:35:b6: 95:73:d0:15:74:8b:51:b2:11:15:cd:84:7c:30:17:80:c1:b8: 47:ad:16:42:75:f9:a2:20:0c:2a:20:6a:5f:a3:a2:d2:17:e2: 1d:3b:05:9b:1b:da:8a:2e:49:d8:ca:d4:31:29:4d:00:04:05: 6d:47:0e:fb:80:a2:b6:e9:0a:2f:98:03:60:b3:5e:b1:be:1c: 06:b8:9e:38:7b:06:3f:23:bc:12:3e:28:d6:2c:fc:9a:31:28: 9e:2e:85:fc:0b:94:33:3d:7a:52:2a:27:6b:88:7b:92:d1:53: e3:bd:22:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtuYcrrPfmpCJRfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk OWIzZGQ4MGMtNzVlZi00ZThkLWI4ODctYzZjOGQyNWMxMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK6tTCOOqYPondtaHsubuPSTTyLGqvGS3EBM AD8KnWwnNVfsJV4VDpkZ9buUOb06iop2uFvPdlLHcSpWuPguX+CCXY5AjPUKLBEP R+e4UHWT2fqzULwYrCji1rFCTVamPt+U1l5QahbfLBd1riV9FMq89dYVZZ8OL0DA O0ngDm7NcIp0p+1r3kUTYRzF70pZEmuFBfeM5EmAKtHNHUzlQkkeYOizFicLnip8 e1L+FSKv4/cPuyE8BUImSLVOfdYjVlesLjwJ8gBhIclCFimqg3PDyVvl7R4PqQ09 d1IfNM4I4W2froFiDY+baW14iYgHyNhPYIFQfeDIHalwrtqM4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5fIffyC6RCgzG8z94st3KgsKkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYThlNzNmNGYtMjFlYi0z NmE3LTk5YzktOTczYWM4MGU4ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC81Uej50XAv5Mjb44S0AtS9iSWox77AmFeOVkGgujHy/bpq9SKVvzU9 IuorkaQKEuOsAmmZgIoCkBn1q+QAtDNUra4UBqPQ/NOAoeYT/jow+PthzvgvWlKh 34bRBSDgbOfGk+eMBXG+Bw0Aw/6J64MXvqBXTK6OniYBS/i6wqkdqI+8Jjzhk8lt fexe1vU1tpVz0BV0i1GyERXNhHwwF4DBuEetFkJ1+aIgDCogal+jotIX4h07BZsb 2oouSdjK1DEpTQAEBW1HDvuAorbpCi+YA2CzXrG+HAa4njh7Bj8jvBI+KNYs/Jox KJ4uhfwLlDM9elIqJ2uIe5LRU+O9In4= -----END CERTIFICATE-----Generated at Fri Sep 4 22:16:47 2026 by rpki-client