$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c54ece9f-1fac-38db-a915-4959537dbe08.roa File: c54ece9f-1fac-38db-a915-4959537dbe08.roa (raw, json) Hash identifier: gC7YwE6TI1tkEjZTdCEQLf3HMOJWnKOTd6x8dnZkqMw= Subject key identifier: 6F:2F:96:37:64:0A:96:9E:C5:80:52:63:9A:06:1C:9F:05:00:E7:01 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AFC2D21BA2D978E47BC3D6000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c54ece9f-1fac-38db-a915-4959537dbe08.roa Signing time: Tue 26 Aug 2025 13:35:24 +0000 ROA not before: Tue 26 Aug 2025 13:35:24 +0000 ROA not after: Mon 24 Nov 2025 14:35:24 +0000 asID: 34450 IP address blocks: 206.123.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:2d:21:ba:2d:97:8e:47:bc:3d:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 26 13:35:24 2025 GMT Not After : Nov 24 14:35:24 2025 GMT Subject: CN=3b7d5efa-c296-4f1d-9d5f-853dc6043ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:23:21:c9:f0:ad:d2:ad:d9:ab:5f:4f:d0: 75:db:33:b6:96:cc:f7:36:59:ed:46:f4:5f:3b:16: cc:1f:74:97:e8:3a:e6:5d:81:fe:4a:6c:fd:12:e7: 30:b7:f3:fd:ac:7b:91:a2:50:6f:a0:df:25:af:80: c5:3b:ed:7a:31:a8:c7:a2:1d:67:cb:3d:5a:57:cd: dd:b0:68:38:ec:d6:16:20:e8:28:19:d0:e3:4f:06: 59:95:9b:13:f6:5a:8f:73:75:fa:db:e9:9c:47:b1: b0:73:ca:97:bf:b7:b2:1f:63:c8:98:a1:44:16:60: 5a:da:a6:23:20:33:58:27:b1:10:46:3c:25:bd:43: 48:e1:0c:5e:ff:48:e4:dc:dc:f2:bf:da:93:46:7a: e7:93:c3:79:64:89:53:a4:54:d4:6a:e6:4f:ee:32: bb:50:8e:71:1f:9d:94:66:20:4d:90:42:89:c4:81: ea:5a:b9:82:9c:7f:4f:6e:47:85:29:f4:6d:46:e6: 50:1a:c5:a2:c2:de:33:af:63:b4:b2:8f:46:e5:70: b5:fb:15:85:86:91:3c:d1:f4:5d:4d:78:19:b3:15: 69:1c:d0:75:c7:f8:b6:15:66:e1:71:1c:11:22:80: 77:2e:3f:6b:dc:e9:e0:f8:18:41:b9:72:7b:68:c9: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:96:37:64:0A:96:9E:C5:80:52:63:9A:06:1C:9F:05:00:E7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c54ece9f-1fac-38db-a915-4959537dbe08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:48:e3:cb:fb:3b:b0:a2:a1:81:60:29:4f:f4:ad:58:2e:be: 85:94:99:51:c4:9a:3b:e2:f9:70:64:fd:b4:98:06:23:c0:33: 33:57:a0:ce:c4:ac:91:43:3d:e0:5e:36:d8:82:ae:6a:c4:52: 91:ca:0e:b9:c6:5c:be:57:86:09:44:4d:45:5e:2a:64:74:95: f3:a7:32:06:e3:a4:e1:a2:74:b5:05:f8:a6:44:fd:f9:75:65: 2d:ee:9f:3c:6e:46:53:09:9a:f7:ff:c1:d5:fb:25:9e:11:fb: 3d:2b:ac:b7:f4:70:e5:23:bb:0a:62:58:7d:c4:89:a4:2f:68: b2:4f:18:47:84:c2:fd:1a:fe:27:6e:a1:eb:bb:3b:6e:10:4c: 26:a1:7b:f6:54:fa:48:03:19:4b:6b:e7:c3:90:d2:dd:bd:b3: 3d:a0:68:00:55:54:82:4f:6a:ec:8b:d4:79:7d:d8:51:7a:52: 3a:d5:78:1c:d6:26:42:b1:54:5c:f2:ff:4a:2b:8d:77:2e:11: 29:86:53:5e:9c:0e:5e:c9:7a:69:84:57:df:01:a9:85:74:cc: ef:a1:83:d9:69:2d:2e:e2:3d:04:7c:92:51:ab:fd:f2:e9:21: e4:33:f1:59:ca:ac:4b:3f:41:34:d5:7b:85:27:12:fa:1b:43: c3:ac:0e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8LSG6LZeOR7w9YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNjEzMzUyNFoXDTI1MTEyNDE0MzUyNFowLzEtMCsGA1UEAxMk M2I3ZDVlZmEtYzI5Ni00ZjFkLTlkNWYtODUzZGM2MDQzZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumcjIcnwrdKt2atfT9B12zO2lsz3NlntRvRf OxbMH3SX6DrmXYH+Smz9Eucwt/P9rHuRolBvoN8lr4DFO+16MajHoh1nyz1aV83d sGg47NYWIOgoGdDjTwZZlZsT9lqPc3X62+mcR7Gwc8qXv7eyH2PImKFEFmBa2qYj IDNYJ7EQRjwlvUNI4Qxe/0jk3Nzyv9qTRnrnk8N5ZIlTpFTUauZP7jK7UI5xH52U ZiBNkEKJxIHqWrmCnH9PbkeFKfRtRuZQGsWiwt4zr2O0so9G5XC1+xWFhpE80fRd TXgZsxVpHNB1x/i2FWbhcRwRIoB3Lj9r3Ong+BhBuXJ7aMmG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8vljdkCpaexYBSY5oGHJ8FAOcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzU0ZWNlOWYtMWZhYy0z OGRiLWE5MTUtNDk1OTUzN2RiZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9I48v7O7CioYFgKU/0rVguvoWUmVHEmjvi+XBk/bSYBiPAMzNXoM7E rJFDPeBeNtiCrmrEUpHKDrnGXL5XhglETUVeKmR0lfOnMgbjpOGidLUF+KZE/fl1 ZS3unzxuRlMJmvf/wdX7JZ4R+z0rrLf0cOUjuwpiWH3EiaQvaLJPGEeEwv0a/idu oeu7O24QTCahe/ZU+kgDGUtr58OQ0t29sz2gaABVVIJPauyL1Hl92FF6UjrVeBzW JkKxVFzy/0orjXcuESmGU16cDl7JemmEV98BqYV0zO+hg9lpLS7iPQR8klGr/fLp IeQz8VnKrEs/QTTVe4UnEvobQ8OsDsY= -----END CERTIFICATE-----Generated at Sun Sep 7 12:35:32 2025 by rpki-client