$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e88f833-9887-31a0-bb33-3151d7b9f803.roa File: 2e88f833-9887-31a0-bb33-3151d7b9f803.roa (raw, json) Hash identifier: F8QSoEudxU3lcOCSH0GVK8dO492dIAqwcupYuhzc+D0= Subject key identifier: E5:CF:3F:A7:16:5F:88:F6:C0:A3:29:51:97:B5:94:BC:69:0A:44:C7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584DA3E55A5F6E040B9796183D00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e88f833-9887-31a0-bb33-3151d7b9f803.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 207083 IP address blocks: 206.123.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:5a:5f:6e:04:0b:97:96:18:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=814f85fc-68d7-469e-83f4-0cdc8a93f928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:6c:6f:92:e8:7e:b6:06:bf:66:fa:3f:a5: 67:48:57:b4:8c:3b:d6:9b:5b:85:2d:99:d0:22:79: 5c:80:0c:c2:f0:c7:63:05:5e:3b:34:2d:2e:dd:4d: db:65:0e:81:01:40:11:2e:b0:99:56:50:9a:e8:1a: 73:08:ba:b4:4b:97:bf:76:fd:55:d2:36:1f:ea:3c: 25:73:a4:47:d7:7c:70:34:9f:fa:be:45:0b:1d:77: bf:d9:c7:5b:17:e8:25:0a:d9:f0:d4:7a:4a:f3:0f: 38:04:ba:40:71:8e:7d:59:36:f9:c2:04:68:33:f5: 3f:cc:54:7f:bb:9d:02:18:c0:90:53:41:ef:1f:17: 2a:d9:9d:55:e9:63:ee:e9:b3:66:ea:8a:9f:15:7e: d1:21:7c:a0:03:21:09:ff:de:ba:f0:bc:40:48:95: 41:d9:ea:d8:2b:a3:be:6c:2e:7b:f3:10:3d:c3:f3: f8:2c:0b:14:24:f1:88:fb:57:69:9d:18:cd:aa:c4: 9a:e5:d6:40:9e:34:7e:61:c1:30:84:b9:82:9f:15: 05:2e:3c:65:3e:37:2c:36:5c:e2:9d:9a:c3:d9:a8: 98:06:88:c7:a6:f8:48:28:14:8c:80:33:1b:df:5a: db:21:7e:a1:4d:d3:1b:55:8a:76:52:70:85:6a:95: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CF:3F:A7:16:5F:88:F6:C0:A3:29:51:97:B5:94:BC:69:0A:44:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e88f833-9887-31a0-bb33-3151d7b9f803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:63:9b:fc:2f:c6:2c:5c:40:81:ef:d8:0d:0d:95:21:1e:77: 2e:cc:10:f9:f8:ae:01:d3:f3:a1:9a:e9:c8:ec:8c:03:78:a3: 5f:e0:3b:02:45:76:5b:74:fb:22:c6:3b:52:bc:bd:88:76:5c: c6:16:76:64:9b:e8:92:e8:85:81:b8:19:c4:87:39:ad:a2:e6: 66:c2:7f:88:5d:47:fc:bc:7c:ea:65:cb:6d:b9:9c:61:a0:10: 25:dc:9b:14:85:d6:ab:b8:82:8b:2d:b4:aa:1f:07:35:af:3e: 2d:30:c9:52:3f:e3:a8:ce:46:af:6a:73:6a:0a:5b:76:d5:70: 02:90:54:b5:42:bf:72:a8:a6:16:7d:c8:a9:a7:c3:87:e6:20: 76:c7:22:9a:ac:b6:1a:47:cc:09:f4:35:ba:f8:3b:20:2f:74: 88:c9:48:8d:58:26:fe:4b:76:fe:98:0f:3b:8b:20:d2:0e:05: 8f:80:95:d8:67:f2:fa:20:23:86:7e:e9:22:60:45:b6:af:5b: 8a:8a:be:4f:f4:e6:b7:a8:ec:b4:56:74:6c:f3:7a:c1:b8:96: bc:bb:5f:0e:2e:04:33:50:7c:61:f9:5a:0a:c8:88:e7:8c:12: bc:07:54:85:d0:b0:cb:fd:69:f0:a9:92:e4:27:eb:ba:dd:6f: 18:1d:ff:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5VpfbgQLl5YYPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk ODE0Zjg1ZmMtNjhkNy00NjllLTgzZjQtMGNkYzhhOTNmOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraZsb5LofrYGv2b6P6VnSFe0jDvWm1uFLZnQ InlcgAzC8MdjBV47NC0u3U3bZQ6BAUARLrCZVlCa6BpzCLq0S5e/dv1V0jYf6jwl c6RH13xwNJ/6vkULHXe/2cdbF+glCtnw1HpK8w84BLpAcY59WTb5wgRoM/U/zFR/ u50CGMCQU0HvHxcq2Z1V6WPu6bNm6oqfFX7RIXygAyEJ/9668LxASJVB2erYK6O+ bC578xA9w/P4LAsUJPGI+1dpnRjNqsSa5dZAnjR+YcEwhLmCnxUFLjxlPjcsNlzi nZrD2aiYBojHpvhIKBSMgDMb31rbIX6hTdMbVYp2UnCFapV/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXPP6cWX4j2wKMpUZe1lLxpCkTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmU4OGY4MzMtOTg4Ny0z MWEwLWJiMzMtMzE1MWQ3YjlmODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtjm/wvxixcQIHv2A0NlSEedy7MEPn4rgHT86Ga6cjsjAN4o1/gOwJF dlt0+yLGO1K8vYh2XMYWdmSb6JLohYG4GcSHOa2i5mbCf4hdR/y8fOply225nGGg ECXcmxSF1qu4gosttKofBzWvPi0wyVI/46jORq9qc2oKW3bVcAKQVLVCv3KophZ9 yKmnw4fmIHbHIpqsthpHzAn0Nbr4OyAvdIjJSI1YJv5Ldv6YDzuLINIOBY+Aldhn 8vogI4Z+6SJgRbavW4qKvk/05reo7LRWdGzzesG4lry7Xw4uBDNQfGH5WgrIiOeM ErwHVIXQsMv9afCpkuQn67rdbxgd/10= -----END CERTIFICATE-----Generated at Wed May 13 07:54:56 2026 by rpki-client