$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa File: 27d260f7-208f-3bd1-a06b-3da7f77567a0.roa (raw, json) Hash identifier: tC2yFHAObwbXIDDf7+dOjOyIvyWOshr9cYTH2H3Kz4c= Subject key identifier: E0:F2:EB:F7:83:3A:2A:B9:CF:97:42:AB:5A:44:82:10:AF:7A:DC:9E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E9D4A667F4D064A81D1B386A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 9009 IP address blocks: 206.123.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:66:7f:4d:06:4a:81:d1:b3:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=fb13e84d-f972-4ef6-9d4d-2fe87ac10d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6f:3a:44:97:48:99:f2:cf:c6:0b:e0:0a:8a: 1d:d4:6a:4a:84:88:e6:a9:86:5c:9b:fe:67:79:cf: 68:b4:ac:18:ed:06:8c:ec:b9:c7:23:e2:00:30:76: 55:c2:90:5e:6a:5e:59:d4:46:61:6e:90:b0:ec:87: 42:b6:12:11:3a:a4:6e:f9:e5:b4:ef:82:36:fe:43: 06:b5:56:15:ba:a9:c0:9a:d2:47:21:67:bc:de:5a: 2c:8d:39:48:8c:f6:90:48:b6:3c:c7:66:46:9c:8f: 6e:aa:4f:9e:f7:44:83:9e:90:fa:20:67:41:e6:87: 75:13:a7:58:a6:1d:3b:5e:3c:60:27:45:35:21:bb: ee:ea:7f:81:c5:b5:e3:96:f9:31:b0:2e:f0:09:31: e1:a0:cd:3b:51:66:7b:26:9e:55:da:7a:9a:0c:b8: 4d:f1:13:76:ae:d9:2e:f3:66:fb:c1:4b:67:db:50: 5b:79:00:91:35:b2:98:04:a0:8c:99:4e:23:ee:14: 46:67:79:cb:f9:d6:52:54:ce:da:5b:83:91:b1:87: c7:00:4b:bb:bb:83:ef:78:f7:6a:60:fa:bf:b4:68: bd:5b:2d:b4:19:b9:59:3a:9b:3e:8a:a6:6c:28:1c: e0:cc:90:06:68:57:85:2e:66:ef:9e:0d:e6:6f:21: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F2:EB:F7:83:3A:2A:B9:CF:97:42:AB:5A:44:82:10:AF:7A:DC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:79:60:1a:41:2f:41:20:0f:82:9e:c4:69:24:a8:96:14:92: 5a:7d:99:f3:b2:88:a5:6a:3a:e4:dc:ad:11:86:fc:46:78:70: a6:0a:58:1d:32:d8:8a:3c:65:76:0c:83:3b:0f:97:ad:3c:e4: df:cc:76:05:9a:26:a6:24:c7:9c:b1:ac:da:42:c9:a0:ca:72: db:c0:c1:2b:32:65:5c:65:04:6d:4f:9b:14:8e:4c:74:e1:21: 5b:fc:c0:71:19:8c:19:a8:c7:45:fb:07:82:07:02:51:87:1b: e3:cb:02:b4:66:ea:e1:b3:d4:dd:4a:a0:66:9f:34:5c:66:d9: 52:05:52:40:61:cc:c7:7a:69:99:32:59:7e:d2:df:37:4d:1b: 98:cb:3d:ba:ed:92:bb:c1:ad:43:5e:a2:2c:e4:54:42:b2:47: d1:fe:56:90:39:f5:46:21:42:71:b4:55:9b:83:fa:62:38:64: 9a:90:b6:ba:25:8d:ad:83:2d:ec:94:82:dd:fa:d6:5e:23:6f: 87:a4:fa:3d:6e:af:6f:cf:c6:83:68:ba:43:4c:21:f2:d7:47: 3d:15:37:84:39:f8:6c:9d:fb:cd:2d:12:97:97:65:c8:82:75: 54:16:de:a8:54:31:ae:39:2f:f2:00:fc:75:8b:fd:c9:f1:bd: da:e3:76:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmZ/TQZKgdGzhqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZmIxM2U4NGQtZjk3Mi00ZWY2LTlkNGQtMmZlODdhYzEwZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW86RJdImfLPxgvgCood1GpKhIjmqYZcm/5n ec9otKwY7QaM7LnHI+IAMHZVwpBeal5Z1EZhbpCw7IdCthIROqRu+eW074I2/kMG tVYVuqnAmtJHIWe83losjTlIjPaQSLY8x2ZGnI9uqk+e90SDnpD6IGdB5od1E6dY ph07XjxgJ0U1Ibvu6n+BxbXjlvkxsC7wCTHhoM07UWZ7Jp5V2nqaDLhN8RN2rtku 82b7wUtn21BbeQCRNbKYBKCMmU4j7hRGZ3nL+dZSVM7aW4ORsYfHAEu7u4PvePdq YPq/tGi9Wy20GblZOps+iqZsKBzgzJAGaFeFLmbvng3mbyGWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODy6/eDOiq5z5dCq1pEghCvetyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjdkMjYwZjctMjA4Zi0z YmQxLWEwNmItM2RhN2Y3NzU2N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV5YBpBL0EgD4KexGkkqJYUklp9mfOyiKVqOuTcrRGG/EZ4cKYKWB0y 2Io8ZXYMgzsPl6085N/MdgWaJqYkx5yxrNpCyaDKctvAwSsyZVxlBG1PmxSOTHTh IVv8wHEZjBmox0X7B4IHAlGHG+PLArRm6uGz1N1KoGafNFxm2VIFUkBhzMd6aZky WX7S3zdNG5jLPbrtkrvBrUNeoizkVEKyR9H+VpA59UYhQnG0VZuD+mI4ZJqQtrol ja2DLeyUgt361l4jb4ek+j1ur2/PxoNoukNMIfLXRz0VN4Q5+Gyd+80tEpeXZciC dVQW3qhUMa45L/IA/HWL/cnxvdrjdnc= -----END CERTIFICATE-----Generated at Tue Jul 28 18:15:19 2026 by rpki-client