$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27b28b00-07b8-3b86-9122-8a3fd680dabd.roa File: 27b28b00-07b8-3b86-9122-8a3fd680dabd.roa (raw, json) Hash identifier: bCD68MDavKo1Z/8QCiS2FsmWoRfZ4RIBEntBelzyPbo= Subject key identifier: 11:D1:3A:8A:66:3C:EF:00:C9:4D:20:3A:6A:8B:E1:BC:9C:77:65:BC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BAEC7BFB79601482464BC5E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27b28b00-07b8-3b86-9122-8a3fd680dabd.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 206.123.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bf:b7:96:01:48:24:64:bc:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=d521d10a-52f4-4e62-b5ae-2f26fe1daefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:92:8a:76:60:29:2d:1c:7e:ba:40:44:44: 2d:8d:20:e7:93:ef:4b:ab:3e:24:a2:47:2c:5d:f1: 60:93:a8:49:81:1d:08:60:cd:0b:a2:62:87:ef:ff: 9a:fd:eb:47:25:b7:d8:8c:8b:50:45:53:4b:c0:ad: 87:6a:c3:9b:82:5b:ed:99:50:29:52:63:44:f7:26: 42:ea:68:42:91:68:76:d1:6f:0b:ac:55:5c:db:46: 34:fb:6d:40:e1:6e:8a:94:6a:e2:89:0c:22:68:03: 56:c3:77:ad:bb:8a:e2:f6:68:32:bf:97:c1:94:b9: c9:3f:7d:eb:cc:56:94:b5:e9:7d:dc:10:b4:b6:2e: 0b:93:56:cf:3f:2b:59:14:1c:9b:b2:21:7b:d1:3e: 84:09:11:41:9a:99:c0:2c:49:4d:85:8d:4c:a8:35: 5d:bd:79:1b:5f:55:76:b7:52:80:69:25:bb:82:0c: 4a:d4:de:2b:40:15:d4:98:bb:3d:52:cf:1c:c8:c8: f8:09:ce:12:a6:6a:72:bc:1c:ea:45:47:44:7e:0f: c5:0c:bd:63:33:b9:5d:10:e5:3f:9e:8d:f1:fd:09: db:15:43:b5:2a:6f:94:52:20:41:f7:5d:87:81:b7: f4:7d:57:c4:86:ea:90:3f:b9:45:0d:31:0e:9c:f8: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D1:3A:8A:66:3C:EF:00:C9:4D:20:3A:6A:8B:E1:BC:9C:77:65:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27b28b00-07b8-3b86-9122-8a3fd680dabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:12:88:27:b4:9f:7d:b4:fd:89:39:d2:83:da:64:9c:40:98: aa:7c:d4:82:b7:2d:72:f3:1e:2b:03:ae:27:dd:63:48:16:58: d3:7c:82:54:23:9a:12:47:6b:98:79:3d:7d:be:a8:03:6d:e4: 2f:89:1c:19:d5:7e:e3:37:93:8e:c5:35:1e:b9:be:cc:2d:21: 22:b1:35:60:8f:30:ef:09:2d:16:01:b6:e5:7c:0d:51:89:9e: c2:e0:20:d8:54:16:c4:c7:b4:c9:5d:6a:c5:6f:9b:1e:bc:53: 03:6e:7d:a0:aa:b5:1f:ee:89:57:bf:45:44:2a:b0:ed:2e:e6: 6d:17:f3:fb:18:1a:04:40:5e:a1:5a:91:e6:17:5b:a6:d0:a0: a0:51:2e:6e:c5:7e:03:77:a3:82:98:b5:c7:41:71:32:36:ec: 57:f9:0a:08:46:8b:71:08:86:17:b7:a4:b2:f5:88:48:9d:ca: ef:fb:c7:e7:c5:0c:f3:72:9a:29:ef:23:00:69:e8:6e:c7:72: 25:5c:c1:ef:8c:fb:db:2e:66:21:40:dc:96:0d:04:3c:ad:99: b3:d0:c7:68:e2:09:a9:57:ae:ef:29:02:20:24:ef:55:5e:ae: ba:18:bb:74:0a:f3:18:f5:2a:94:5c:e3:b6:d8:62:af:72:b4: 21:93:10:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7+3lgFIJGS8XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDUyMWQxMGEtNTJmNC00ZTYyLWI1YWUtMmYyNmZlMWRhZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG2SinZgKS0cfrpAREQtjSDnk+9Lqz4kokcs XfFgk6hJgR0IYM0LomKH7/+a/etHJbfYjItQRVNLwK2HasObglvtmVApUmNE9yZC 6mhCkWh20W8LrFVc20Y0+21A4W6KlGriiQwiaANWw3etu4ri9mgyv5fBlLnJP33r zFaUtel93BC0ti4Lk1bPPytZFBybsiF70T6ECRFBmpnALElNhY1MqDVdvXkbX1V2 t1KAaSW7ggxK1N4rQBXUmLs9Us8cyMj4Cc4SpmpyvBzqRUdEfg/FDL1jM7ldEOU/ no3x/QnbFUO1Km+UUiBB912Hgbf0fVfEhuqQP7lFDTEOnPgJGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHROopmPO8AyU0gOmqL4bycd2W8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjdiMjhiMDAtMDdiOC0z Yjg2LTkxMjItOGEzZmQ2ODBkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkSiCe0n320/Yk50oPaZJxAmKp81IK3LXLzHisDrifdY0gWWNN8glQj mhJHa5h5PX2+qANt5C+JHBnVfuM3k47FNR65vswtISKxNWCPMO8JLRYBtuV8DVGJ nsLgINhUFsTHtMldasVvmx68UwNufaCqtR/uiVe/RUQqsO0u5m0X8/sYGgRAXqFa keYXW6bQoKBRLm7FfgN3o4KYtcdBcTI27Ff5CghGi3EIhhe3pLL1iEidyu/7x+fF DPNyminvIwBp6G7HciVcwe+M+9suZiFA3JYNBDytmbPQx2jiCalXru8pAiAk71Ve rroYu3QK8xj1KpRc47bYYq9ytCGTEKE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:16 2025 by rpki-client