$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa File: a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa (raw, json) Hash identifier: MeG/kxAmwrRqx3EswQlB1WYwsgybmmyeuTSitT6zeIY= Subject key identifier: 27:86:87:22:E3:CE:06:1C:E2:CB:10:98:2A:97:14:88:5B:8B:EC:75 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F225D05D8E681D9A57CCDEEC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 137409 IP address blocks: 206.123.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:05:d8:e6:81:d9:a5:7c:cd:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=72472541-eca8-414a-9b3d-9c4808b2c7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:14:f3:54:26:be:82:85:e0:9f:68:ad:86: 11:5e:04:c3:d3:0b:f4:e8:66:ec:5a:96:2b:80:fa: b3:f0:a9:1b:32:af:44:3e:b3:ca:b9:fe:f5:a6:65: 45:ec:26:99:e4:3f:fe:1d:07:c4:58:f7:31:2a:29: e2:ae:90:54:ef:e8:f6:51:91:da:2b:f3:c8:dd:0a: d5:12:84:41:bb:e1:d7:47:d2:e9:80:d0:9e:bb:53: e7:7e:e4:01:ec:18:04:3f:5d:f3:e7:b3:7f:77:b7: 13:91:57:3e:df:d4:c4:f3:01:9b:2f:36:cc:4b:9b: 8d:39:8c:b4:44:e7:7f:df:15:4e:26:25:c1:34:e8: 05:31:b8:f1:e3:93:a8:2e:a6:3f:2f:e9:ca:35:af: ba:1c:f9:42:40:e9:39:39:cc:e7:48:22:76:77:3d: e9:a3:8d:42:fe:6d:8b:e2:c0:c9:bd:2a:cd:9b:f8: 85:48:16:29:b1:b8:58:3c:24:7d:23:72:44:33:53: 58:15:4c:89:88:54:ea:6e:6e:12:42:2f:87:e4:ae: 3e:b5:12:de:aa:d7:c8:36:ac:d0:4d:83:fe:a6:85: 0f:2a:f5:9c:af:99:ea:66:0f:50:79:e1:0c:f2:22: 20:2f:5b:b1:8e:a9:13:65:96:74:f8:ba:6b:70:53: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:86:87:22:E3:CE:06:1C:E2:CB:10:98:2A:97:14:88:5B:8B:EC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:aa:fb:98:dd:3b:32:32:b0:d2:8f:97:d8:c5:48:cd:36:e9: 20:94:64:ab:75:a2:5c:5c:f9:34:a9:0b:f3:61:17:3a:b0:bf: 58:c1:6a:fd:84:ce:b4:a7:66:ca:f6:21:8d:df:36:d7:63:f4: 6e:f1:57:75:15:0b:7c:d7:c2:86:6c:0a:cd:54:ba:f0:a0:57: ed:03:88:a9:26:43:6d:cf:d3:3f:39:28:ec:07:af:65:32:01: 60:7a:c6:36:02:f6:99:c7:fc:7f:ca:7f:15:71:dc:4a:78:41: a5:3b:7d:8a:ee:27:8f:1e:57:5c:e3:5b:82:ae:ee:50:3d:ed: c3:bb:cb:e2:15:81:4d:45:4a:69:c1:38:99:ff:50:20:83:bd: 57:a2:8b:65:0b:49:53:9f:ee:b6:7c:fa:83:9d:2e:5c:4e:a7: 59:dc:bd:ca:41:6e:19:e9:6f:5f:6f:76:21:a9:ec:b7:3b:1b: 90:2c:65:20:f5:1a:db:83:6e:d2:a7:de:c5:b6:5e:4d:27:3f: 39:d9:40:dc:fa:d7:56:89:3f:2d:c9:ae:05:c1:39:98:67:b3: f2:bb:57:03:99:c7:5c:e9:10:2f:95:5d:d6:7f:35:89:e4:47: 5d:64:33:50:fb:c0:2c:96:93:56:ed:01:90:bb:60:86:42:20: d1:81:88:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQXY5oHZpXzN7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NzI0NzI1NDEtZWNhOC00MTRhLTliM2QtOWM0ODA4YjJjN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZQU81QmvoKF4J9orYYRXgTD0wv06GbsWpYr gPqz8KkbMq9EPrPKuf71pmVF7CaZ5D/+HQfEWPcxKinirpBU7+j2UZHaK/PI3QrV EoRBu+HXR9LpgNCeu1PnfuQB7BgEP13z57N/d7cTkVc+39TE8wGbLzbMS5uNOYy0 ROd/3xVOJiXBNOgFMbjx45OoLqY/L+nKNa+6HPlCQOk5OcznSCJ2dz3po41C/m2L 4sDJvSrNm/iFSBYpsbhYPCR9I3JEM1NYFUyJiFTqbm4SQi+H5K4+tRLeqtfINqzQ TYP+poUPKvWcr5nqZg9QeeEM8iIgL1uxjqkTZZZ0+LprcFOodwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeGhyLjzgYc4ssQmCqXFIhbi+x1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTBmMjkwZTktZmQ2My0z ZWY2LTlmMzUtYjI1MmY2ZjRlNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+q+5jdOzIysNKPl9jFSM026SCUZKt1olxc+TSpC/NhFzqwv1jBav2E zrSnZsr2IY3fNtdj9G7xV3UVC3zXwoZsCs1UuvCgV+0DiKkmQ23P0z85KOwHr2Uy AWB6xjYC9pnH/H/KfxVx3Ep4QaU7fYruJ48eV1zjW4Ku7lA97cO7y+IVgU1FSmnB OJn/UCCDvVeii2ULSVOf7rZ8+oOdLlxOp1ncvcpBbhnpb19vdiGp7Lc7G5AsZSD1 GtuDbtKn3sW2Xk0nPznZQNz611aJPy3JrgXBOZhns/K7VwOZx1zpEC+VXdZ/NYnk R11kM1D7wCyWk1btAZC7YIZCINGBiO8= -----END CERTIFICATE-----Generated at Tue Sep 22 13:32:30 2026 by rpki-client