$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbeeb848-9f9f-314b-a89a-f47633d07307.roa File: dbeeb848-9f9f-314b-a89a-f47633d07307.roa (raw, json) Hash identifier: lx/SFRiVZ/HDak1BhXhTgqCTlt0AjfdzhqwHFveVmwM= Subject key identifier: 29:03:10:D8:75:28:58:81:2A:5E:EB:56:90:46:5C:63:F7:12:4C:C6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EE7BCB5B6C510EB5D5B663A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbeeb848-9f9f-314b-a89a-f47633d07307.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 3223 IP address blocks: 206.123.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b5:b6:c5:10:eb:5d:5b:66:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=ad94b114-652a-4b36-b818-290b8b49f854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:e3:c7:04:2d:33:f4:95:5f:2e:3f:c6:34: f0:1a:fb:87:a7:f6:ac:76:24:87:51:15:b0:4f:85: 21:d7:5c:6c:82:57:aa:c9:d5:9a:26:67:93:ea:4e: eb:8e:be:e4:f3:5f:ee:f7:69:15:2c:b1:d9:aa:1c: d0:84:3e:71:9a:da:cb:9e:c3:1c:5b:8c:e0:dd:a6: 3d:0a:d3:42:79:24:3f:c5:6e:f2:4c:40:6a:d4:8a: a2:92:f3:09:8d:07:6e:bc:8c:96:82:9a:5f:c0:39: 1b:66:db:9e:be:a3:34:27:51:05:3a:29:78:9b:17: 9d:f8:f8:d5:dd:3c:5b:6d:d8:b3:76:43:11:a2:8e: b3:0a:9d:4a:dc:4f:f9:60:fd:29:f7:ca:ae:f4:b0: 2d:09:4a:e0:9a:1c:83:78:69:45:ad:30:07:d5:e5: a6:21:bf:e4:e9:60:f9:58:b1:54:5d:59:65:37:1b: 65:4a:f6:ca:a1:39:8d:47:53:22:4b:47:2b:e2:04: a6:73:aa:69:06:17:e5:96:f6:a8:2f:72:35:22:8e: 66:0d:9c:bc:9b:6b:d2:5a:29:0f:dd:de:36:ac:44: 95:ea:49:9e:de:c5:c4:d8:e9:51:c1:57:67:c1:80: 01:2f:c4:98:45:e5:c1:4d:81:99:34:49:86:bc:bd: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:10:D8:75:28:58:81:2A:5E:EB:56:90:46:5C:63:F7:12:4C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbeeb848-9f9f-314b-a89a-f47633d07307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b3:96:d7:94:0c:0e:4d:ae:b5:41:22:0a:5b:d2:43:a9:41: 1b:6a:a4:5a:1c:9e:8d:64:60:2c:25:fc:3b:44:40:06:b8:52: 64:a1:94:ea:21:ee:40:cb:1d:06:e0:b4:35:21:7f:c3:00:26: bb:fa:c8:c6:67:13:2b:8d:72:3e:1d:29:a6:02:11:45:3e:06: a1:55:bf:8e:a5:99:32:de:9f:04:5a:e4:6a:a2:86:08:29:22: 54:69:f8:ed:bd:4b:be:56:e8:1e:87:aa:6b:84:df:7f:16:b4: 6c:0a:bb:8e:1a:42:09:ac:58:d1:c4:d3:8b:3e:60:9e:b5:71: 52:e4:27:2d:53:95:fa:38:94:29:d1:5f:fe:e1:57:2f:aa:9e: 32:f3:b9:ea:70:01:d9:24:d7:a5:a2:cb:c4:9d:93:e3:e1:1e: 95:2f:aa:01:62:dd:d2:68:54:e6:7c:05:f5:08:73:fd:bb:25: 1f:6f:2d:28:98:60:f2:5b:8b:14:64:67:e9:59:8e:3a:a2:b1: 04:7e:83:ab:63:ae:99:0c:83:5f:e7:ba:f0:5b:3c:33:9b:94: ed:a6:f5:07:53:8c:8f:99:da:7d:10:ac:cf:e8:1e:4c:9c:f0: 32:d7:e8:56:5d:9d:50:84:54:26:dd:6b:0d:ef:1e:bd:31:2f: d0:2e:25:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLW2xRDrXVtmOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YWQ5NGIxMTQtNjUyYS00YjM2LWI4MTgtMjkwYjhiNDlmODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPLjxwQtM/SVXy4/xjTwGvuHp/asdiSHURWw T4Uh11xsgleqydWaJmeT6k7rjr7k81/u92kVLLHZqhzQhD5xmtrLnsMcW4zg3aY9 CtNCeSQ/xW7yTEBq1IqikvMJjQduvIyWgppfwDkbZtuevqM0J1EFOil4mxed+PjV 3TxbbdizdkMRoo6zCp1K3E/5YP0p98qu9LAtCUrgmhyDeGlFrTAH1eWmIb/k6WD5 WLFUXVllNxtlSvbKoTmNR1MiS0cr4gSmc6ppBhfllvaoL3I1Io5mDZy8m2vSWikP 3d42rESV6kme3sXE2OlRwVdnwYABL8SYReXBTYGZNEmGvL1HxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkDENh1KFiBKl7rVpBGXGP3EkzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGJlZWI4NDgtOWY5Zi0z MTRiLWE4OWEtZjQ3NjMzZDA3MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWzlteUDA5NrrVBIgpb0kOpQRtqpFocno1kYCwl/DtEQAa4UmShlOoh 7kDLHQbgtDUhf8MAJrv6yMZnEyuNcj4dKaYCEUU+BqFVv46lmTLenwRa5Gqihggp IlRp+O29S75W6B6HqmuE338WtGwKu44aQgmsWNHE04s+YJ61cVLkJy1Tlfo4lCnR X/7hVy+qnjLzuepwAdkk16Wiy8Sdk+PhHpUvqgFi3dJoVOZ8BfUIc/27JR9vLSiY YPJbixRkZ+lZjjqisQR+g6tjrpkMg1/nuvBbPDOblO2m9QdTjI+Z2n0QrM/oHkyc 8DLX6FZdnVCEVCbdaw3vHr0xL9AuJVs= -----END CERTIFICATE-----Generated at Fri Sep 4 20:18:26 2026 by rpki-client