$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa File: a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa (raw, json) Hash identifier: g58IZGiffX21VEZmkr/eC3KChDvtYmfra4gLkPhAIeo= Subject key identifier: 8E:98:80:4F:40:56:A7:9F:A1:C4:0E:5C:8B:1B:3B:AC:6A:58:14:59 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E09C6E2FEA4F55E5B028AF680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa Signing time: Tue 02 Jun 2026 12:51:31 +0000 ROA not before: Tue 02 Jun 2026 12:51:31 +0000 ROA not after: Mon 31 Aug 2026 12:51:31 +0000 asID: 834 IP address blocks: 206.123.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:c6:e2:fe:a4:f5:5e:5b:02:8a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 2 12:51:31 2026 GMT Not After : Aug 31 12:51:31 2026 GMT Subject: CN=9f31c4ab-d250-4d34-81f8-c4ed15de1a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:86:d6:18:ba:4f:a3:9c:28:7f:14:50:21: 31:8a:88:d3:22:cf:97:e4:b5:41:df:49:c8:e9:8e: 43:d5:2b:67:81:2a:d9:7c:19:fe:21:d8:90:cf:79: fe:51:9d:ac:d9:e0:13:99:97:56:0b:eb:31:65:2c: 03:ea:13:96:37:7f:b0:b6:10:a7:3f:97:5e:07:99: 56:7a:fa:84:03:90:16:55:48:3e:d3:2f:f9:fe:7b: ab:81:93:17:46:5a:e3:90:ac:35:5a:8d:3d:f7:5c: 06:be:2d:5b:2b:82:cd:07:c9:59:32:28:9c:35:5b: 24:c3:56:ce:8c:fe:5d:3a:09:c0:ca:09:3f:dd:11: dd:e3:db:af:ea:2b:ef:a5:36:3d:49:8e:1c:fb:0d: ba:8f:9f:8c:82:6a:c2:c9:63:2f:4f:f4:25:8f:62: e2:ea:08:ae:ba:26:69:c1:6b:a3:21:75:bc:8c:fa: 5b:17:5a:c9:f6:75:8a:d9:f0:26:e1:6e:be:0e:0d: 6c:31:8e:39:13:25:d1:eb:60:1f:82:e0:28:23:dc: 77:f5:32:61:b0:c3:a2:5d:b1:0f:85:2b:82:00:4b: 46:f1:23:5d:09:af:91:2b:e7:6c:73:7d:f1:17:5b: 7d:3f:a9:23:c1:15:e7:3f:e0:3b:eb:1e:1c:f5:3c: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:80:4F:40:56:A7:9F:A1:C4:0E:5C:8B:1B:3B:AC:6A:58:14:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8e73f4f-21eb-36a7-99c9-973ac80e8e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:55:20:f7:a4:9f:99:c5:bf:58:b3:8f:3d:30:9c:81:1d:f4: 1a:9a:48:68:58:ef:ee:48:74:26:14:93:d4:2e:55:17:2e:cd: 83:0f:11:51:f8:03:5c:97:17:c0:d7:1a:46:2f:e9:d8:8c:77: 08:ba:c8:29:d4:37:88:ca:f8:83:bc:f3:c7:20:2b:2d:9f:d4: 8a:4b:53:8b:48:c6:f1:0b:b7:34:e5:b1:7f:c7:41:94:c8:ae: 90:e6:1e:ee:03:23:45:69:42:d8:07:ba:7f:9d:26:be:5e:fd: 6c:71:b1:b2:76:3d:0e:a3:3f:02:83:b6:d0:1e:fe:d8:53:6d: 56:1b:f2:e5:48:67:4e:57:a4:6a:68:37:1d:e9:19:24:58:ea: 9c:d7:63:2b:5a:97:50:68:91:e3:a0:96:d5:f9:67:e9:c1:ef: 1c:92:b9:eb:0b:df:6f:de:91:86:5e:6b:f8:5f:2e:79:6c:fb: 8b:27:3f:a4:d8:44:fe:20:d8:e2:03:32:d6:6e:a8:3a:37:4e: 9d:72:57:1d:a7:dd:3a:4b:0c:c6:6e:d5:18:9a:36:4e:eb:12: b7:67:85:43:ce:b3:ac:58:6c:bb:11:84:d9:e0:3d:9b:04:b2: 36:46:de:be:e9:e3:a7:a2:a6:58:57:68:f7:08:96:a7:76:0f: 06:3f:8b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4JxuL+pPVeWwKK9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMjEyNTEzMVoXDTI2MDgzMTEyNTEzMVowLzEtMCsGA1UEAxMk OWYzMWM0YWItZDI1MC00ZDM0LTgxZjgtYzRlZDE1ZGUxYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqyG1hi6T6OcKH8UUCExiojTIs+X5LVB30nI 6Y5D1StngSrZfBn+IdiQz3n+UZ2s2eATmZdWC+sxZSwD6hOWN3+wthCnP5deB5lW evqEA5AWVUg+0y/5/nurgZMXRlrjkKw1Wo0991wGvi1bK4LNB8lZMiicNVskw1bO jP5dOgnAygk/3RHd49uv6ivvpTY9SY4c+w26j5+MgmrCyWMvT/Qlj2Li6giuuiZp wWujIXW8jPpbF1rJ9nWK2fAm4W6+Dg1sMY45EyXR62AfguAoI9x39TJhsMOiXbEP hSuCAEtG8SNdCa+RK+dsc33xF1t9P6kjwRXnP+A76x4c9TxR6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6YgE9AVqefocQOXIsbO6xqWBRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYThlNzNmNGYtMjFlYi0z NmE3LTk5YzktOTczYWM4MGU4ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElVIPekn5nFv1izjz0wnIEd9BqaSGhY7+5IdCYUk9QuVRcuzYMPEVH4 A1yXF8DXGkYv6diMdwi6yCnUN4jK+IO888cgKy2f1IpLU4tIxvELtzTlsX/HQZTI rpDmHu4DI0VpQtgHun+dJr5e/WxxsbJ2PQ6jPwKDttAe/thTbVYb8uVIZ05XpGpo Nx3pGSRY6pzXYytal1BokeOgltX5Z+nB7xySuesL32/ekYZea/hfLnls+4snP6TY RP4g2OIDMtZuqDo3Tp1yVx2n3TpLDMZu1RiaNk7rErdnhUPOs6xYbLsRhNngPZsE sjZG3r7p46eiplhXaPcIlqd2DwY/i2k= -----END CERTIFICATE-----Generated at Thu Jun 4 09:01:22 2026 by rpki-client