$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/11abcf79-ac54-33e6-89d4-d0abb4a6eeba.roa File: 11abcf79-ac54-33e6-89d4-d0abb4a6eeba.roa (raw, json) Hash identifier: Npp1sr0KsSS8Yysshw+OhDGc0jgEASvEbrNPfA77IIY= Subject key identifier: 40:C9:FA:D6:4E:30:1C:50:A0:A9:3E:17:92:96:94:B4:07:65:46:FA Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584B583CA72C428DEA8A19F28C00 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/11abcf79-ac54-33e6-89d4-d0abb4a6eeba.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 376 IP address blocks: 206.167.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a7:2c:42:8d:ea:8a:19:f2:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=1e5856f5-39ed-400d-be5a-90b465bb7390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:84:53:df:cc:6d:03:ac:08:35:2a:6d:0a: a7:20:d1:64:38:7c:76:08:68:81:b2:cc:c8:e2:e7: 04:39:73:48:c2:9a:6f:17:4e:76:29:22:76:6d:cd: 6a:47:51:be:f3:b1:d3:3d:6d:e6:05:8f:31:12:e4: 33:c8:39:79:52:97:b5:a0:7c:d3:a5:18:ce:77:c7: 08:d9:49:d4:b0:07:74:71:85:d5:67:f2:2d:6a:b4: 71:a5:6c:cd:12:be:af:67:c6:0f:13:45:5c:7a:b9: 85:34:7e:c4:bd:d6:47:9b:1d:bd:38:cb:c7:41:55: b9:94:fa:c5:fc:d0:60:aa:dd:78:ba:fb:2b:c7:67: 5e:f6:ff:aa:b6:69:d3:58:67:39:1d:90:a3:90:5e: 5a:02:8d:6e:54:e1:84:eb:34:87:b1:38:86:64:b0: f0:c5:80:5b:79:01:9e:94:27:2c:9a:e6:89:ec:5e: 7f:98:a7:29:80:6e:2f:3e:16:fc:e3:09:cb:a7:9c: b8:68:4d:e8:04:34:34:f3:ff:18:2e:0d:7a:3e:bb: 77:ab:d3:b8:68:b2:d3:dc:be:45:f4:20:b7:69:36: 7a:05:9e:d6:bd:85:d3:8d:dc:da:35:d7:ad:10:09: c9:56:cb:e2:ea:37:ee:73:50:a5:41:49:91:dd:5a: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C9:FA:D6:4E:30:1C:50:A0:A9:3E:17:92:96:94:B4:07:65:46:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/11abcf79-ac54-33e6-89d4-d0abb4a6eeba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c2:6a:4a:a0:a5:ce:39:69:be:64:ad:05:18:b8:95:ce:95: af:4f:c6:d4:5d:9f:49:55:2a:a3:74:e4:03:71:33:78:97:8c: 6b:d5:68:25:66:8a:1d:a0:e1:13:1c:3b:24:0f:8a:8d:7b:c4: cc:a1:5f:77:44:1c:63:63:5c:83:2c:29:48:68:c9:9c:27:05: 5a:c6:2a:e3:61:dd:30:5e:5a:8c:24:ba:73:07:c2:32:67:9a: eb:b7:16:28:46:0b:3b:a2:8a:15:b3:72:f5:82:19:d7:d9:ce: 41:e1:ef:0f:86:e9:ad:19:5f:a8:67:ce:ee:bb:cd:4f:ae:38: 76:90:c3:9c:86:76:49:6d:a4:05:f3:0f:70:6d:f3:4c:75:11: a1:1f:68:74:c0:b0:cd:9a:83:1d:95:ee:1c:2f:d6:e8:88:ba: 33:7f:3e:4f:7b:86:5f:43:59:eb:ff:79:df:f7:f0:b2:dc:b1: d5:60:ad:15:a2:49:a9:a9:5b:f8:5d:53:62:99:69:d9:91:64: 0d:30:16:6b:15:0e:35:6e:c9:2f:da:da:ee:8a:fb:2e:38:bd: 2e:31:84:17:d3:ea:b1:8b:a4:8c:45:ac:d0:a9:50:cc:c0:04: 0f:d1:43:80:55:fd:6b:34:90:2c:6c:30:12:f6:f4:e6:4d:c0: d0:ba:09:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKcsQo3qihnyjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWU1ODU2ZjUtMzllZC00MDBkLWJlNWEtOTBiNDY1YmI3MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp6EU9/MbQOsCDUqbQqnINFkOHx2CGiBsszI 4ucEOXNIwppvF052KSJ2bc1qR1G+87HTPW3mBY8xEuQzyDl5Upe1oHzTpRjOd8cI 2UnUsAd0cYXVZ/ItarRxpWzNEr6vZ8YPE0VcermFNH7EvdZHmx29OMvHQVW5lPrF /NBgqt14uvsrx2de9v+qtmnTWGc5HZCjkF5aAo1uVOGE6zSHsTiGZLDwxYBbeQGe lCcsmuaJ7F5/mKcpgG4vPhb84wnLp5y4aE3oBDQ08/8YLg16Prt3q9O4aLLT3L5F 9CC3aTZ6BZ7WvYXTjdzaNdetEAnJVsvi6jfuc1ClQUmR3Vpi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDJ+tZOMBxQoKk+F5KWlLQHZUb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvMTFhYmNmNzktYWM1NC0z M2U2LTg5ZDQtZDBhYmI0YTZlZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzCakqgpc45ab5krQUYuJXOla9PxtRdn0lVKqN05ANxM3iXjGvVaCVm ih2g4RMcOyQPio17xMyhX3dEHGNjXIMsKUhoyZwnBVrGKuNh3TBeWowkunMHwjJn muu3FihGCzuiihWzcvWCGdfZzkHh7w+G6a0ZX6hnzu67zU+uOHaQw5yGdkltpAXz D3Bt80x1EaEfaHTAsM2agx2V7hwv1uiIujN/Pk97hl9DWev/ed/38LLcsdVgrRWi SampW/hdU2KZadmRZA0wFmsVDjVuyS/a2u6K+y44vS4xhBfT6rGLpIxFrNCpUMzA BA/RQ4BV/Ws0kCxsMBL29OZNwNC6CRg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:20:01 2025 by rpki-client