$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4228e35-5569-3e59-ba3e-e9253c9e1cf4.roa File: f4228e35-5569-3e59-ba3e-e9253c9e1cf4.roa (raw, json) Hash identifier: sbt5qH/0VFtkFpAjM6p90WulEelaUShVUAS+4UAPsvs= Subject key identifier: A6:9D:15:F9:42:95:13:C9:D1:D4:A6:04:68:5B:23:89:C6:F5:21:D3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AEACAFE9B46FF92E3CE2170A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4228e35-5569-3e59-ba3e-e9253c9e1cf4.roa Signing time: Wed 20 Aug 2025 08:08:55 +0000 ROA not before: Wed 20 Aug 2025 08:08:55 +0000 ROA not after: Tue 18 Nov 2025 09:08:55 +0000 asID: 397373 IP address blocks: 206.123.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:ca:fe:9b:46:ff:92:e3:ce:21:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 08:08:55 2025 GMT Not After : Nov 18 09:08:55 2025 GMT Subject: CN=fec44371-ad0b-438e-837b-c117568b08d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:4f:94:9b:54:82:2a:18:44:dc:ae:c4:53: 9f:f6:d3:3b:e5:e9:2b:43:f5:15:ac:7d:40:1f:78: 15:10:65:0f:7e:a2:09:e8:49:49:14:00:c2:35:5a: c0:a5:21:8e:1b:b1:e1:bd:5f:a8:74:cb:1a:97:7b: 28:4c:ce:ce:c9:09:9d:18:f9:95:6c:84:1c:15:8e: ab:90:ce:3a:25:88:31:34:b0:36:a5:d4:c5:54:93: b9:60:1e:5a:05:c3:88:ec:76:88:4a:cc:bd:25:fc: 28:a0:68:36:0f:ac:34:2e:de:92:65:bb:06:da:2b: 0e:3a:89:77:d7:8c:c3:1f:bb:0c:f6:15:9c:4f:82: 5d:ae:d0:2f:98:69:f2:0c:cd:71:98:2c:49:25:bb: eb:f4:21:50:5a:56:89:a8:9e:8d:86:ac:30:8b:19: ae:99:d6:42:cd:c5:1d:4c:a4:77:4a:a6:6e:79:39: e2:e5:fc:95:55:76:e0:af:b0:84:13:ba:b1:96:a5: 6b:9d:7f:af:51:8a:14:f5:bc:77:ec:3a:3d:4c:32: 3b:8d:1a:b9:ec:e8:53:e7:30:5d:c2:cd:46:3a:43: 62:c9:73:f3:e5:c3:dd:76:6e:d9:91:1a:93:e8:64: 91:da:ae:01:b6:75:ab:a4:60:22:0e:51:cf:c3:92: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9D:15:F9:42:95:13:C9:D1:D4:A6:04:68:5B:23:89:C6:F5:21:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4228e35-5569-3e59-ba3e-e9253c9e1cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:99:3d:04:8a:42:67:8f:3a:9b:c0:3d:ad:03:fe:31:a3:9a: 7a:51:20:ae:36:36:c5:f6:f1:59:8e:03:c5:6f:26:fb:8e:3e: 9e:8c:f8:d1:ac:a2:ed:b4:dd:c3:59:cf:ce:64:7e:bf:cc:ae: 53:cb:93:15:58:6a:18:b8:26:71:cf:41:ba:1e:69:14:10:5e: 1f:4d:ae:66:51:25:6f:16:40:67:1a:6d:43:4c:c6:b2:48:d3: b4:ef:2e:d2:2a:48:68:41:02:35:db:75:e3:b1:f7:11:d7:19: ca:c7:52:d8:9c:21:5a:fa:4f:8b:04:a3:e5:47:c0:56:42:e2: 9b:72:57:4a:2f:1b:9a:90:02:25:d9:cf:ea:44:1a:0f:16:72: 74:ad:d4:eb:00:c2:2d:0d:3e:61:2d:2d:4a:40:ff:fe:e1:0f: b8:98:3f:25:a6:5f:56:08:28:8a:3d:be:d8:72:84:35:5a:11: 60:d5:33:57:34:de:db:dc:d4:cb:6c:5d:23:1d:89:8b:eb:37: 1f:ad:95:de:11:9c:82:49:2f:23:12:a7:3f:dc:b9:53:61:57: 27:9f:26:4e:7b:c7:a5:1e:2f:06:78:f9:e4:34:fe:c4:f9:bc: 47:a6:18:04:95:b2:e5:9b:9d:16:14:12:80:69:fb:3d:b9:5f: 29:79:ce:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErqyv6bRv+S484hcKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDA4MDg1NVoXDTI1MTExODA5MDg1NVowLzEtMCsGA1UEAxMk ZmVjNDQzNzEtYWQwYi00MzhlLTgzN2ItYzExNzU2OGIwOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoVPlJtUgioYRNyuxFOf9tM75ekrQ/UVrH1A H3gVEGUPfqIJ6ElJFADCNVrApSGOG7HhvV+odMsal3soTM7OyQmdGPmVbIQcFY6r kM46JYgxNLA2pdTFVJO5YB5aBcOI7HaISsy9JfwooGg2D6w0Lt6SZbsG2isOOol3 14zDH7sM9hWcT4JdrtAvmGnyDM1xmCxJJbvr9CFQWlaJqJ6NhqwwixmumdZCzcUd TKR3SqZueTni5fyVVXbgr7CEE7qxlqVrnX+vUYoU9bx37Do9TDI7jRq57OhT5zBd ws1GOkNiyXPz5cPddm7ZkRqT6GSR2q4BtnWrpGAiDlHPw5Iy0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKadFflClRPJ0dSmBGhbI4nG9SHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjQyMjhlMzUtNTU2OS0z ZTU5LWJhM2UtZTkyNTNjOWUxY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECZPQSKQmePOpvAPa0D/jGjmnpRIK42NsX28VmOA8VvJvuOPp6M+NGs ou203cNZz85kfr/MrlPLkxVYahi4JnHPQboeaRQQXh9NrmZRJW8WQGcabUNMxrJI 07TvLtIqSGhBAjXbdeOx9xHXGcrHUticIVr6T4sEo+VHwFZC4ptyV0ovG5qQAiXZ z+pEGg8WcnSt1OsAwi0NPmEtLUpA//7hD7iYPyWmX1YIKIo9vthyhDVaEWDVM1c0 3tvc1MtsXSMdiYvrNx+tld4RnIJJLyMSpz/cuVNhVyefJk57x6UeLwZ4+eQ0/sT5 vEemGASVsuWbnRYUEoBp+z25Xyl5zjQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:21 2025 by rpki-client