$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bfc00233-2824-369f-bb30-dd6a86cdb59a.roa File: bfc00233-2824-369f-bb30-dd6a86cdb59a.roa (raw, json) Hash identifier: H82JcXnZxyUzgSxt5ucxaF7D8L4+k6xmE555Kenb/rY= Subject key identifier: 19:7A:87:E2:2C:8D:FC:BF:01:33:20:7F:E5:1B:D6:51:04:2D:DF:59 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F2B7043086F8591EA5111FF40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bfc00233-2824-369f-bb30-dd6a86cdb59a.roa Signing time: Mon 14 Sep 2026 07:01:24 +0000 ROA not before: Mon 14 Sep 2026 07:01:24 +0000 ROA not after: Sun 13 Dec 2026 08:01:24 +0000 asID: 205960 IP address blocks: 206.123.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2b:70:43:08:6f:85:91:ea:51:11:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 14 07:01:24 2026 GMT Not After : Dec 13 08:01:24 2026 GMT Subject: CN=8f2e8195-93dc-4f8e-874f-f12c7945899b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:d3:c6:4f:a0:eb:bd:b5:b5:ee:d1:96:65: b9:6f:ad:f3:1b:cb:ee:05:96:f2:37:24:3c:af:ee: f6:04:43:12:0b:f2:52:af:28:5c:8c:10:fe:69:c1: 74:e9:f4:a2:38:72:99:73:89:26:cd:e9:5a:71:e0: f9:cf:cc:e3:f0:30:04:a2:0c:64:60:78:d1:c2:3f: 91:fe:a1:2c:7d:9a:52:53:81:0d:a8:05:51:5d:a4: 93:4f:ff:4b:df:56:62:10:77:50:52:75:d8:40:95: 97:d0:3d:0c:01:06:b5:7a:96:bc:66:2c:03:53:5f: 2e:bf:17:0b:e9:92:23:ef:3f:05:68:4f:30:8b:8c: 58:b1:fa:de:8d:c8:13:ac:e3:e5:81:b4:d8:1b:65: 95:82:ac:29:a5:e8:63:1c:ab:13:26:41:fe:66:cc: a1:52:c4:a3:01:e2:45:58:4c:81:37:97:d7:34:2a: 96:96:be:37:17:b6:0f:6a:ac:50:b7:21:62:cc:5a: ee:f8:d1:61:d9:54:08:39:f9:6e:44:f9:ab:80:32: 6c:01:18:9a:a4:09:23:a3:b7:c9:6c:6d:b7:cd:0b: cf:16:12:07:04:7e:a9:83:ec:86:07:fb:e0:00:8d: 2f:30:1a:75:5c:58:24:66:b3:c9:59:91:0d:09:38: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7A:87:E2:2C:8D:FC:BF:01:33:20:7F:E5:1B:D6:51:04:2D:DF:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bfc00233-2824-369f-bb30-dd6a86cdb59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:72:5e:cf:b2:61:c5:23:f9:d6:7c:ea:b5:ad:f6:bb:87:8e: 1c:94:a7:29:7f:1d:e2:04:9e:6a:a6:80:42:38:d9:90:6c:3f: b6:ca:dc:db:0a:b6:80:01:3d:0b:8a:d5:e4:79:0e:fb:df:73: d8:94:4a:98:4f:c5:b2:36:03:1c:e3:5a:d5:0b:48:82:3f:e7: a4:77:c7:57:40:89:06:3f:a9:bd:36:24:d1:3b:62:85:44:c0: 7b:c7:89:c6:1b:4e:60:56:68:90:c7:e5:24:f9:3a:88:b4:82: 66:a6:81:06:0d:e6:f0:a4:7a:ce:c5:07:e4:f2:ea:a5:d0:45: 0c:9b:15:ee:6f:b1:8b:1b:f9:fe:01:58:1a:58:68:6a:17:94: 5d:4a:2d:bb:b0:97:d3:0d:8c:14:96:94:37:ce:5c:a1:de:62: 78:4c:b9:c4:e5:5c:e9:87:9b:3a:92:b6:51:74:81:d7:36:0d: 14:19:17:76:3c:91:2f:a3:5e:94:e8:a0:16:a1:58:5d:1f:f4: 64:33:84:d0:24:14:88:1d:6e:4f:d8:9f:35:08:1c:a9:ca:3f: 50:06:42:b9:9e:d3:21:35:04:3d:52:8c:7e:90:00:72:8e:f7: be:b6:0c:94:9e:e4:b7:6f:b1:20:c3:ef:33:9e:fe:4f:e4:7f: 7c:ec:0e:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8rcEMIb4WR6lER/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxNDA3MDEyNFoXDTI2MTIxMzA4MDEyNFowLzEtMCsGA1UEAxMk OGYyZTgxOTUtOTNkYy00ZjhlLTg3NGYtZjEyYzc5NDU4OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15XTxk+g6721te7RlmW5b63zG8vuBZbyNyQ8 r+72BEMSC/JSryhcjBD+acF06fSiOHKZc4kmzelaceD5z8zj8DAEogxkYHjRwj+R /qEsfZpSU4ENqAVRXaSTT/9L31ZiEHdQUnXYQJWX0D0MAQa1epa8ZiwDU18uvxcL 6ZIj7z8FaE8wi4xYsfrejcgTrOPlgbTYG2WVgqwppehjHKsTJkH+ZsyhUsSjAeJF WEyBN5fXNCqWlr43F7YPaqxQtyFizFru+NFh2VQIOfluRPmrgDJsARiapAkjo7fJ bG23zQvPFhIHBH6pg+yGB/vgAI0vMBp1XFgkZrPJWZENCTj8twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl6h+Isjfy/ATMgf+Ub1lEELd9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmZjMDAyMzMtMjgyNC0z NjlmLWJiMzAtZGQ2YTg2Y2RiNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpyXs+yYcUj+dZ86rWt9ruHjhyUpyl/HeIEnmqmgEI42ZBsP7bK3NsK toABPQuK1eR5Dvvfc9iUSphPxbI2AxzjWtULSII/56R3x1dAiQY/qb02JNE7YoVE wHvHicYbTmBWaJDH5ST5Ooi0gmamgQYN5vCkes7FB+Ty6qXQRQybFe5vsYsb+f4B WBpYaGoXlF1KLbuwl9MNjBSWlDfOXKHeYnhMucTlXOmHmzqStlF0gdc2DRQZF3Y8 kS+jXpTooBahWF0f9GQzhNAkFIgdbk/YnzUIHKnKP1AGQrme0yE1BD1SjH6QAHKO 9762DJSe5LdvsSDD7zOe/k/kf3zsDtw= -----END CERTIFICATE-----Generated at Mon Sep 21 12:37:18 2026 by rpki-client