$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa File: a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa (raw, json) Hash identifier: +WLAci09tlJGwoF5SrjA16ndQjyjM0cJDrqG4saP6uw= Subject key identifier: 24:69:C9:DB:3B:88:81:93:BA:5A:E5:16:06:4B:30:F9:76:D0:FD:26 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CBF17176B28880BAF0BA90AC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 137409 IP address blocks: 206.123.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:17:6b:28:88:0b:af:0b:a9:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=17453a45-3499-40c0-8fec-a185f79f6b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:77:73:a0:b2:df:31:a8:15:cc:e3:95:61: bb:30:ba:70:d9:ba:08:86:76:9a:32:c7:77:59:d9: b2:ff:2d:80:b7:20:d7:af:21:db:b1:fd:57:cf:92: f3:63:50:4a:c8:a4:af:c0:04:77:b5:bd:07:ec:2d: 35:98:d2:0f:f7:5c:ec:d5:98:06:88:0d:48:7e:ba: 57:f2:35:03:b4:f7:c6:61:cc:25:ee:10:ff:0c:fa: 29:7b:a0:60:93:e7:76:1b:3d:99:b3:20:99:1e:9a: 2f:70:81:51:43:dd:d8:5a:4b:86:3a:97:87:e5:05: 49:11:bd:66:1f:a5:e9:e7:a6:81:78:af:bd:56:52: 8b:d4:cd:62:18:cd:d4:f0:a0:b2:e3:40:2d:98:98: 25:dd:72:01:d9:00:53:69:e4:58:bb:9d:2e:d9:10: 7a:23:13:9c:0b:e5:df:ae:ca:43:ab:99:56:55:0f: ac:b2:46:53:b2:2e:1a:93:5b:5f:c9:c3:8f:3b:c6: bc:d1:93:21:49:4d:74:46:77:61:70:3e:18:93:6d: 3d:3d:24:ce:f1:08:05:b1:6a:6c:c2:ab:1a:23:9c: 09:0a:8a:5d:75:47:93:df:50:c0:0b:c7:c7:0a:56: 6e:d2:ef:af:e9:66:20:b2:cb:ad:ec:40:96:ae:b0: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:C9:DB:3B:88:81:93:BA:5A:E5:16:06:4B:30:F9:76:D0:FD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ff:78:2b:59:c2:09:39:b8:e8:ff:91:86:54:0f:d4:de:33: bd:7b:36:32:10:9c:3d:7e:db:62:eb:d8:d6:ca:1b:bb:91:ab: 42:4b:b0:7a:2d:13:5d:b0:f6:a4:e1:2f:be:52:3a:85:76:a5: 9a:24:6d:1e:f0:c7:78:a7:65:9e:7d:77:f1:4f:83:2b:b6:a3: e7:5d:9d:1d:a6:af:64:42:57:1a:56:f9:69:8a:09:5c:05:87: 0f:81:5a:5b:70:75:74:70:c4:d0:0f:eb:64:6c:c1:d2:3d:e7: 5a:6e:4a:8b:77:67:ec:ed:77:8d:88:0e:8c:e3:b1:1d:f8:6d: f3:8b:68:e8:66:35:d8:bb:c8:b4:ec:92:d7:65:34:ba:e7:9b: c7:c8:6b:d5:df:31:82:d1:ed:eb:3d:1d:d2:f4:f8:7d:c1:18: 5a:e0:f5:87:c5:4e:a8:1c:ed:d5:b9:c3:b6:c9:23:16:a0:b5: d3:c9:12:3c:97:77:88:90:9b:c8:a9:14:67:26:a9:d8:2c:10: 9d:d7:23:36:e1:a4:e9:22:56:f5:3e:f6:78:95:5a:77:0b:9e: d7:40:cd:de:57:c7:2f:86:5a:21:c6:07:6c:e2:60:1f:00:8d: 58:ac:b7:4d:e7:42:b7:ee:c8:85:1e:76:76:a8:7e:80:b2:fd: c7:5e:5e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/FxdrKIgLrwupCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk MTc0NTNhNDUtMzQ5OS00MGMwLThmZWMtYTE4NWY3OWY2YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ch3c6Cy3zGoFczjlWG7MLpw2boIhnaaMsd3 Wdmy/y2AtyDXryHbsf1Xz5LzY1BKyKSvwAR3tb0H7C01mNIP91zs1ZgGiA1IfrpX 8jUDtPfGYcwl7hD/DPope6Bgk+d2Gz2ZsyCZHpovcIFRQ93YWkuGOpeH5QVJEb1m H6Xp56aBeK+9VlKL1M1iGM3U8KCy40AtmJgl3XIB2QBTaeRYu50u2RB6IxOcC+Xf rspDq5lWVQ+sskZTsi4ak1tfycOPO8a80ZMhSU10RndhcD4Yk209PSTO8QgFsWps wqsaI5wJCopddUeT31DAC8fHClZu0u+v6WYgssut7ECWrrBmEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRpyds7iIGTulrlFgZLMPl20P0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTBmMjkwZTktZmQ2My0z ZWY2LTlmMzUtYjI1MmY2ZjRlNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX/eCtZwgk5uOj/kYZUD9TeM717NjIQnD1+22Lr2NbKG7uRq0JLsHot E12w9qThL75SOoV2pZokbR7wx3inZZ59d/FPgyu2o+ddnR2mr2RCVxpW+WmKCVwF hw+BWltwdXRwxNAP62RswdI951puSot3Z+ztd42IDozjsR34bfOLaOhmNdi7yLTs ktdlNLrnm8fIa9XfMYLR7es9HdL0+H3BGFrg9YfFTqgc7dW5w7bJIxagtdPJEjyX d4iQm8ipFGcmqdgsEJ3XIzbhpOkiVvU+9niVWncLntdAzd5Xxy+GWiHGB2ziYB8A jVist03nQrfuyIUednaofoCy/cdeXig= -----END CERTIFICATE-----Generated at Sun Mar 1 22:33:50 2026 by rpki-client