$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa File: 9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa (raw, json) Hash identifier: KPbv0NxwgcgqiOWA4u2pjVY1wbmIpveEu9E1SA6J0Es= Subject key identifier: 83:11:A7:79:99:70:F2:AF:ED:73:BA:19:EB:6C:40:44:CD:67:F9:7E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA39D1B3EBA0F22ECDCE6C100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 3223 IP address blocks: 206.123.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1b:3e:ba:0f:22:ec:dc:e6:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=4c319aca-808a-4c7c-9909-0908ee87d5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1e:65:78:a8:a3:0f:ae:cf:0c:1d:91:81:d7: 91:89:b4:ab:84:ea:28:f3:ee:db:66:7f:26:39:2f: b9:4f:47:6c:0f:e4:a5:64:5c:f2:9a:7a:d2:69:4b: 8a:02:f3:11:da:2d:30:0d:33:c8:2c:25:3c:ac:38: 4a:d2:10:4c:1e:7c:69:2b:fd:48:b9:d3:9f:ba:63: c7:7a:27:b2:72:50:a1:c6:36:89:4c:82:1c:59:fc: 7d:37:e9:52:68:54:de:fc:22:ad:c2:78:b3:39:16: c6:ab:f0:b5:bd:0c:80:d7:de:24:02:38:dc:7a:41: b2:d4:77:cb:a8:5c:9e:a1:04:f3:9d:d9:17:17:88: 6d:20:e2:27:a4:aa:a0:db:51:75:df:91:09:34:e6: 28:d6:9b:40:ba:6c:98:a7:d2:6e:23:31:e2:5d:a7: 4a:e1:28:a9:06:7a:ba:98:ad:57:a8:8a:95:ad:f8: 8b:ff:e1:2b:03:22:8d:25:da:20:94:45:05:31:0c: 49:e2:35:e3:e4:e4:cf:01:db:f1:98:ec:8e:6d:bc: 51:28:0e:9e:ff:8e:df:03:2b:62:eb:98:a6:31:ff: 2f:10:df:72:f7:1e:2c:c2:ce:ac:19:01:c2:92:df: ea:2e:64:9b:ca:f2:00:6d:8b:c8:39:a2:b3:cb:07: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:11:A7:79:99:70:F2:AF:ED:73:BA:19:EB:6C:40:44:CD:67:F9:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:71:70:ed:b5:52:50:2c:d2:f8:0f:86:72:fc:2c:80:cd:5b: 7f:26:a2:bd:33:b1:85:d3:b8:bf:ef:1b:82:07:02:3e:62:e9: b6:59:68:e7:71:5b:fe:c1:3b:c3:49:5d:63:27:b4:99:58:d1: fe:e1:d9:00:67:50:4d:6a:b2:80:06:53:dd:59:a9:47:e6:21: b7:52:f9:47:b1:a0:f0:af:15:08:c4:76:62:7d:81:bf:c3:ee: bb:b4:fe:ab:ea:50:16:94:bd:92:0f:1a:9e:2d:c4:3c:06:46: a2:b7:8c:72:cc:ed:05:5b:02:99:fe:0e:86:03:dd:a2:8b:22: dc:68:4c:46:a5:d1:e0:a0:77:10:7a:97:52:99:8a:1b:0c:cd: 89:12:6c:55:a9:70:48:b3:d5:1d:ed:15:40:c4:02:70:f6:00: 81:ff:8e:6b:3c:c1:69:6c:0d:94:00:af:61:18:a8:9a:94:5f: 5e:aa:c4:55:dd:8a:e2:14:c2:c0:c5:a7:88:70:3e:bd:d3:24: 16:af:89:3c:bc:a5:f3:3a:83:53:05:c6:7f:05:ce:b3:0c:84: 80:da:e9:45:f2:b3:ea:91:fc:30:58:0d:74:3b:62:08:9f:c5: 57:cc:ae:ad:89:04:52:f3:3c:63:2c:db:17:12:e9:c8:e4:14: 74:ff:71:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRs+ug8i7NzmwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NGMzMTlhY2EtODA4YS00YzdjLTk5MDktMDkwOGVlODdkNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh5leKijD67PDB2RgdeRibSrhOoo8+7bZn8m OS+5T0dsD+SlZFzymnrSaUuKAvMR2i0wDTPILCU8rDhK0hBMHnxpK/1IudOfumPH eieyclChxjaJTIIcWfx9N+lSaFTe/CKtwnizORbGq/C1vQyA194kAjjcekGy1HfL qFyeoQTzndkXF4htIOInpKqg21F135EJNOYo1ptAumyYp9JuIzHiXadK4SipBnq6 mK1XqIqVrfiL/+ErAyKNJdoglEUFMQxJ4jXj5OTPAdvxmOyObbxRKA6e/47fAyti 65imMf8vEN9y9x4sws6sGQHCkt/qLmSbyvIAbYvIOaKzywfj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMRp3mZcPKv7XO6GetsQETNZ/l+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWU2NmEyYjYtMzdmYy0z OTI2LThhODMtOGMyNGYxZjRkZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZxcO21UlAs0vgPhnL8LIDNW38mor0zsYXTuL/vG4IHAj5i6bZZaOdx W/7BO8NJXWMntJlY0f7h2QBnUE1qsoAGU91ZqUfmIbdS+UexoPCvFQjEdmJ9gb/D 7ru0/qvqUBaUvZIPGp4txDwGRqK3jHLM7QVbApn+DoYD3aKLItxoTEal0eCgdxB6 l1KZihsMzYkSbFWpcEiz1R3tFUDEAnD2AIH/jms8wWlsDZQAr2EYqJqUX16qxFXd iuIUwsDFp4hwPr3TJBaviTy8pfM6g1MFxn8FzrMMhIDa6UXys+qR/DBYDXQ7Ygif xVfMrq2JBFLzPGMs2xcS6cjkFHT/cQ8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:37 2025 by rpki-client