$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa File: 9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa (raw, json) Hash identifier: 5oGFIYFX3gm4zfa1+/MgFNJOADUIJSs9P67yXXop64k= Subject key identifier: 35:13:38:D4:A9:5F:E5:7E:FD:65:81:3B:E3:95:15:DE:95:54:4D:86 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B758C9681EC16AF5C334CAB80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 202656 IP address blocks: 206.123.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:96:81:ec:16:af:5c:33:4c:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=4b567b85-c471-4a58-a8cf-5da4a5aef438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:3c:55:19:2b:84:de:2e:fc:05:1d:02:2f: 78:e9:bc:f3:8c:6b:d7:2a:ea:eb:76:ba:7f:36:14: da:ec:fb:e1:d5:f7:06:68:aa:2a:21:c3:d8:03:d4: 1b:3d:15:0b:28:e8:a6:ee:d1:0a:c5:18:61:5f:6f: 7d:19:a5:54:52:df:63:53:2a:f4:50:e7:a2:79:28: 93:97:f8:e4:5b:28:bd:cc:8d:3c:56:45:7a:57:51: fc:d2:b4:ed:46:d1:84:0b:22:9a:b1:7a:90:32:ff: bb:7c:ce:84:56:ea:48:36:8a:4f:ef:2a:f9:88:49: 00:27:f7:b5:2c:9e:0d:4a:f0:da:8e:9e:5f:1d:7c: b0:02:d6:fc:e3:c8:94:6a:b7:03:cd:93:2b:60:f4: 34:6b:85:6a:b2:b6:24:c6:a9:ea:5f:bd:82:c7:44: dd:03:e3:d3:21:78:11:d8:11:48:52:29:b1:61:03: 76:a9:9f:77:f0:f1:f5:2f:17:68:de:53:44:8f:a3: b7:97:92:a4:06:05:15:38:94:f6:de:16:90:13:e7: 17:5c:1a:dd:89:f2:0a:8c:b8:82:e9:c5:c1:cb:e0: dc:21:87:2a:8c:b7:13:73:a5:9f:e6:71:df:3c:e7: 9e:42:26:cf:99:8a:cb:2a:72:d8:f7:14:e2:e6:2b: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:13:38:D4:A9:5F:E5:7E:FD:65:81:3B:E3:95:15:DE:95:54:4D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:49:0c:8a:10:04:4f:f5:c9:ab:da:49:d2:5f:1f:4c:58:5e: a9:c3:5c:ea:37:2d:3a:d5:f8:7b:01:73:fd:1e:55:81:9a:23: 63:1f:da:65:68:89:60:01:c4:a1:ab:d2:5c:26:94:90:64:ae: b2:20:fb:12:56:a3:10:0a:91:39:52:d2:03:b2:71:dc:a9:7d: e0:cd:91:84:af:4f:21:52:7b:cd:a6:d5:0b:62:f6:32:fa:4b: 6d:5e:47:a0:09:ba:ba:5f:21:68:45:2f:1e:3c:45:4d:1f:24: c8:6e:6d:5f:85:68:72:71:fd:c5:ac:91:72:2b:3e:c6:29:8a: 4a:3b:09:69:46:c4:66:43:0a:2d:74:67:66:be:fa:3e:c5:85: df:4c:6d:cf:72:87:8e:b8:03:4f:a3:98:24:ab:c5:4c:6d:c3: b8:b2:e5:f1:59:0b:d4:3c:68:81:7c:2a:1e:e6:a2:de:2c:8a: 39:76:86:9d:51:c8:ac:15:12:94:6f:e9:1b:62:e3:a8:33:7f: 4a:81:eb:09:dd:23:7c:74:f3:4a:f4:e9:19:3a:3c:7d:20:05: de:98:57:97:4d:68:0c:c0:77:82:16:e8:98:e9:1e:cb:53:75: 55:2a:07:13:da:5c:25:71:e9:5b:78:77:8e:9d:98:42:9b:c0: e1:2a:f2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJaB7BavXDNMq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NGI1NjdiODUtYzQ3MS00YTU4LWE4Y2YtNWRhNGE1YWVmNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2w8VRkrhN4u/AUdAi946bzzjGvXKurrdrp/ NhTa7Pvh1fcGaKoqIcPYA9QbPRULKOim7tEKxRhhX299GaVUUt9jUyr0UOeieSiT l/jkWyi9zI08VkV6V1H80rTtRtGECyKasXqQMv+7fM6EVupINopP7yr5iEkAJ/e1 LJ4NSvDajp5fHXywAtb848iUarcDzZMrYPQ0a4VqsrYkxqnqX72Cx0TdA+PTIXgR 2BFIUimxYQN2qZ938PH1Lxdo3lNEj6O3l5KkBgUVOJT23haQE+cXXBrdifIKjLiC 6cXBy+DcIYcqjLcTc6Wf5nHfPOeeQibPmYrLKnLY9xTi5it8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUTONSpX+V+/WWBO+OVFd6VVE2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWIwYjI2NTgtYmY3OS0z NWYzLTk2OGEtMGUwNDJiODNlY2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznueMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1JDIoQBE/1yavaSdJfH0xYXqnDXOo3LTrV+HsBc/0eVYGaI2Mf2mVo iWABxKGr0lwmlJBkrrIg+xJWoxAKkTlS0gOycdypfeDNkYSvTyFSe82m1Qti9jL6 S21eR6AJurpfIWhFLx48RU0fJMhubV+FaHJx/cWskXIrPsYpiko7CWlGxGZDCi10 Z2a++j7Fhd9Mbc9yh464A0+jmCSrxUxtw7iy5fFZC9Q8aIF8Kh7mot4sijl2hp1R yKwVEpRv6Rti46gzf0qB6wndI3x080r06Rk6PH0gBd6YV5dNaAzAd4IW6JjpHstT dVUqBxPaXCVx6Vt4d46dmEKbwOEq8oE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:33 2025 by rpki-client