$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbeeb848-9f9f-314b-a89a-f47633d07307.roa File: dbeeb848-9f9f-314b-a89a-f47633d07307.roa (raw, json) Hash identifier: r66BZ+RP43nbhK24LGaJRFObT79M6wWygVlC7xSnDM4= Subject key identifier: 9D:4B:D7:B3:CA:03:D3:C2:A5:19:6E:53:95:EF:2F:83:16:BC:E0:68 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA39D1B78BC54CFC87A6D1D80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbeeb848-9f9f-314b-a89a-f47633d07307.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 3223 IP address blocks: 206.123.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1b:78:bc:54:cf:c8:7a:6d:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=76a4927c-ea7e-4bb9-9adf-6c9ff4a8bd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ae:f8:7c:64:1d:f3:cc:08:a1:e2:cc:3c:69: 10:74:14:5c:00:34:28:12:86:b0:53:ad:97:3d:72: af:52:41:9b:bd:d7:f7:e7:ee:df:a9:20:25:f2:03: 36:22:cc:19:ae:69:df:e2:44:dd:5d:20:36:92:66: 63:9f:fe:5f:dd:15:ac:44:b8:a2:d4:7f:35:25:6a: a6:d9:69:19:ab:1a:82:90:b7:5a:97:8b:d6:f1:0f: 69:59:46:ce:d4:df:3f:42:7a:5f:bb:18:3e:ea:da: c4:7e:bd:b8:84:4b:0c:01:bb:71:fc:35:b5:09:c2: f4:29:e2:41:88:4f:c7:87:14:96:a0:8d:cc:96:37: 02:6b:b6:67:d6:d8:6e:26:ba:e6:11:04:6b:64:93: 26:2b:bf:41:00:ef:21:04:02:72:5a:87:b2:a3:3d: 47:2b:04:80:41:dd:05:a2:a8:a3:f6:43:55:24:ae: 17:08:ea:86:cc:22:cd:1d:e2:8c:65:5e:04:89:93: 27:02:12:01:de:3c:54:24:d1:0d:b4:12:16:95:9e: 78:ef:03:fb:37:a5:59:0f:e0:16:09:c3:6f:49:26: 30:8f:0c:39:7a:0a:78:d7:58:36:10:9a:20:26:7d: dc:d7:f3:b9:5f:98:a7:64:f7:06:36:ae:4b:5c:f3: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:D7:B3:CA:03:D3:C2:A5:19:6E:53:95:EF:2F:83:16:BC:E0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbeeb848-9f9f-314b-a89a-f47633d07307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:93:a4:8f:70:60:32:98:c3:89:5a:b4:f8:de:ed:0b:66:c7: 61:d7:61:a6:d5:d4:1e:7d:96:d8:3d:13:d6:c9:71:06:95:fa: 70:35:5e:80:a6:25:86:89:a5:8c:fa:c3:90:56:e2:98:ed:75: ee:64:68:65:74:a0:62:f9:a4:79:0f:6e:49:88:c4:4e:1c:fe: b2:02:8e:a9:79:e0:c2:81:ec:5d:f1:18:86:f9:e9:1f:9d:ce: 9a:de:b8:6a:de:d4:6a:72:69:f0:f8:49:ba:0a:8c:01:13:81: 66:eb:2b:83:30:8e:3f:d6:94:d4:0a:63:e9:e2:ec:23:1d:94: 6c:f9:22:db:11:20:87:c6:2c:15:02:29:c2:dc:36:0c:dd:4c: bb:f2:a0:96:aa:e9:7a:cd:0a:4c:42:8d:59:c2:46:d2:5f:03: 78:7e:0c:b5:7d:7a:aa:bc:e3:0a:cc:da:5d:85:e2:c3:a4:0e: 06:bb:f4:be:e5:11:ac:fc:6a:45:f7:1e:34:7d:3a:50:ee:39: a5:bb:b8:81:15:21:28:fd:60:f1:75:b1:b9:6f:77:d6:2a:2f: 49:2f:39:65:fb:f9:2b:c5:d3:2b:c0:0b:73:8f:2e:33:36:a0: e8:c5:7c:15:4f:eb:7b:52:41:b4:4e:ea:2d:2d:0c:6b:4b:d9: f5:46:7a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRt4vFTPyHptHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzZhNDkyN2MtZWE3ZS00YmI5LTlhZGYtNmM5ZmY0YThiZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia74fGQd88wIoeLMPGkQdBRcADQoEoawU62X PXKvUkGbvdf35+7fqSAl8gM2IswZrmnf4kTdXSA2kmZjn/5f3RWsRLii1H81JWqm 2WkZqxqCkLdal4vW8Q9pWUbO1N8/Qnpfuxg+6trEfr24hEsMAbtx/DW1CcL0KeJB iE/HhxSWoI3MljcCa7Zn1thuJrrmEQRrZJMmK79BAO8hBAJyWoeyoz1HKwSAQd0F oqij9kNVJK4XCOqGzCLNHeKMZV4EiZMnAhIB3jxUJNENtBIWlZ547wP7N6VZD+AW CcNvSSYwjww5egp411g2EJogJn3c1/O5X5inZPcGNq5LXPPZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1L17PKA9PCpRluU5XvL4MWvOBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGJlZWI4NDgtOWY5Zi0z MTRiLWE4OWEtZjQ3NjMzZDA3MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGTpI9wYDKYw4latPje7Qtmx2HXYabV1B59ltg9E9bJcQaV+nA1XoCm JYaJpYz6w5BW4pjtde5kaGV0oGL5pHkPbkmIxE4c/rICjql54MKB7F3xGIb56R+d zpreuGre1GpyafD4SboKjAETgWbrK4Mwjj/WlNQKY+ni7CMdlGz5ItsRIIfGLBUC KcLcNgzdTLvyoJaq6XrNCkxCjVnCRtJfA3h+DLV9eqq84wrM2l2F4sOkDga79L7l Eaz8akX3HjR9OlDuOaW7uIEVISj9YPF1sblvd9YqL0kvOWX7+SvF0yvAC3OPLjM2 oOjFfBVP63tSQbRO6i0tDGtL2fVGemE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:39:58 2025 by rpki-client