$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa File: a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa (raw, json) Hash identifier: S9E62XDUalYOTeSKad3pa/cqHcYvCmpSr5bfkhgH+10= Subject key identifier: B0:1F:BD:AF:22:8D:9B:48:DD:AF:CA:E4:E0:0B:58:55:0F:DC:DF:AE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584FC4667D7C5295965FAC0DF5D6 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 137409 IP address blocks: 206.123.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:7d:7c:52:95:96:5f:ac:0d:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=62b003bb-cdcb-4570-93fe-086cea5c702c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:10:3e:89:09:89:46:3a:4d:1b:86:ae:e8: 36:9e:d6:df:94:53:65:89:31:42:4e:3e:d0:31:ab: 83:5c:f1:c3:b0:66:aa:47:8f:ff:0d:7c:64:81:fe: c1:6a:e5:f4:69:ee:3f:18:71:72:40:6e:24:ed:75: f3:61:24:df:76:5f:80:62:21:cc:ec:1d:69:d9:61: a4:53:12:00:9b:4e:94:15:90:7a:90:94:4d:e5:ea: 18:1a:7a:a0:81:f7:70:b0:a6:7b:1b:6b:3a:97:a4: ad:20:0d:7a:3b:f4:e3:b7:f6:ed:e0:af:3b:22:db: 8a:c8:0c:fa:f1:ec:60:9d:31:47:ad:d3:fe:5e:c9: 85:2d:c9:dc:38:37:7d:5f:db:0e:f0:69:2e:9f:c1: 2e:66:ea:6d:ab:6e:a6:53:4b:c1:3a:9d:fc:17:dd: f9:48:1e:93:e7:4a:43:7f:41:13:e5:f6:b2:f9:4d: 42:14:ff:25:d4:98:d0:9f:c2:08:a9:a3:c5:5f:22: 26:5a:0c:3b:42:ba:7c:b8:4c:03:e8:2b:d6:9a:f3: 96:ca:f0:7a:c9:ee:ae:42:8e:39:8a:1c:c7:e0:4e: d5:5e:c8:4d:3b:17:c9:fe:4a:7a:55:8d:6e:95:7e: 7e:2a:8b:a6:d4:ab:63:4a:4d:c0:75:86:29:f3:97: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1F:BD:AF:22:8D:9B:48:DD:AF:CA:E4:E0:0B:58:55:0F:DC:DF:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:84:2b:e1:2e:91:72:99:58:ba:06:cf:4f:6a:42:24:6f:01: 63:8c:ea:55:90:e1:7a:de:94:f7:6a:f9:6b:0c:39:b2:0d:b9: 1e:e5:fa:e8:12:3b:24:76:e4:40:09:35:f9:4b:9c:fc:44:7a: e5:c0:de:90:c6:4e:da:62:28:c3:cd:8d:66:56:67:2f:4c:a4: 5a:94:44:39:1a:96:b9:61:01:82:bb:93:a5:ce:f2:25:b9:92: 25:b9:04:58:39:ce:2b:d4:d3:7a:b4:e3:b0:23:1d:07:1e:54: 9d:55:03:37:84:7c:8f:dc:7e:52:0c:52:08:56:43:27:00:96: 91:e0:bc:12:33:6e:b0:52:6f:5c:29:17:6c:6a:53:9b:ef:80: fd:d9:2a:ed:2a:2f:41:31:66:a0:14:5a:f3:1c:87:f6:60:98: b2:a8:fe:c3:fd:d2:84:29:0f:8b:4e:30:da:9a:9d:c2:5b:6e: ec:37:3c:cf:89:6a:67:37:d2:33:6f:97:60:d9:d8:4e:fb:b7: 09:1c:ae:db:94:88:1b:dc:c6:85:8c:6f:ee:17:13:7f:19:d4: 08:a7:07:21:3f:e3:05:62:66:fe:97:b1:55:5f:fb:a4:2b:b8: ea:28:38:fa:64:d1:f2:e8:a1:e6:6e:7f:71:6c:23:1e:cd:1c: c9:85:7a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZn18UpWWX6wN9dYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk NjJiMDAzYmItY2RjYi00NTcwLTkzZmUtMDg2Y2VhNWM3MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAYQPokJiUY6TRuGrug2ntbflFNliTFCTj7Q MauDXPHDsGaqR4//DXxkgf7BauX0ae4/GHFyQG4k7XXzYSTfdl+AYiHM7B1p2WGk UxIAm06UFZB6kJRN5eoYGnqggfdwsKZ7G2s6l6StIA16O/Tjt/bt4K87ItuKyAz6 8exgnTFHrdP+XsmFLcncODd9X9sO8Gkun8EuZuptq26mU0vBOp38F935SB6T50pD f0ET5fay+U1CFP8l1JjQn8IIqaPFXyImWgw7Qrp8uEwD6CvWmvOWyvB6ye6uQo45 ihzH4E7VXshNOxfJ/kp6VY1ulX5+Koum1KtjSk3AdYYp85cGXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAfva8ijZtI3a/K5OALWFUP3N+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTBmMjkwZTktZmQ2My0z ZWY2LTlmMzUtYjI1MmY2ZjRlNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByEK+EukXKZWLoGz09qQiRvAWOM6lWQ4XrelPdq+WsMObINuR7l+ugS OyR25EAJNflLnPxEeuXA3pDGTtpiKMPNjWZWZy9MpFqURDkalrlhAYK7k6XO8iW5 kiW5BFg5zivU03q047AjHQceVJ1VAzeEfI/cflIMUghWQycAlpHgvBIzbrBSb1wp F2xqU5vvgP3ZKu0qL0ExZqAUWvMch/ZgmLKo/sP90oQpD4tOMNqancJbbuw3PM+J amc30jNvl2DZ2E77twkcrtuUiBvcxoWMb+4XE38Z1AinByE/4wViZv6XsVVf+6Qr uOooOPpk0fLooeZuf3FsIx7NHMmFeoo= -----END CERTIFICATE-----Generated at Sun Nov 15 10:56:04 2026 by rpki-client