$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4933c998-3bd5-398a-a712-385a5e8a6c92.roa File: 4933c998-3bd5-398a-a712-385a5e8a6c92.roa (raw, json) Hash identifier: UrD3Lzj70jpYuzvgNglyZtSjETrV1nVvX1V4FrHckRs= Subject key identifier: 3E:71:26:15:F8:37:47:D6:2F:A7:75:01:AE:8D:3A:3D:45:C4:0A:B3 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584B583CA5B37B7E5EC06F881F76 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4933c998-3bd5-398a-a712-385a5e8a6c92.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 376 IP address blocks: 206.167.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a5:b3:7b:7e:5e:c0:6f:88:1f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=208aacfd-0f69-49e8-9973-8737f7328bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:f8:e5:1b:39:90:9c:b8:d8:e2:80:19:9a: d8:9f:78:f0:1d:bb:b6:76:cf:13:a1:15:b4:7b:c9: 92:ae:7b:41:b8:7f:21:2c:94:80:3e:48:69:fa:d5: 7f:47:69:de:31:33:4e:f7:22:bf:78:09:72:e4:cb: dd:bf:a2:e3:32:f1:a0:72:93:82:ec:3a:5c:bf:29: a1:06:1e:b9:4f:89:82:17:9c:73:1d:df:a2:cc:09: 25:d6:11:84:47:23:2f:d9:84:68:ef:38:46:c4:bb: 71:47:06:3d:0c:42:48:90:b9:2b:21:d1:b5:51:6a: 05:5f:4a:df:be:70:4b:fe:fa:21:d8:89:84:65:d1: 77:6c:77:4c:bb:7e:c1:10:31:3a:bb:2a:a0:39:e9: 8a:0a:97:1e:75:0f:c2:66:b4:15:7c:b3:ee:c7:df: aa:f9:a9:6c:e9:fc:69:a9:fc:9b:6d:e4:3c:d6:af: 82:05:46:56:1d:b8:5a:b3:26:e2:9e:a0:4d:0a:34: 7f:b2:59:e7:f9:42:bd:a4:10:71:cb:27:c1:58:43: 5b:d1:f1:e4:a0:91:36:18:5c:75:2f:45:91:d2:a1: 70:23:ad:0b:af:40:63:69:67:8c:f5:1c:88:0c:33: 51:70:bf:64:78:a8:3c:38:83:69:be:75:56:96:ab: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:71:26:15:F8:37:47:D6:2F:A7:75:01:AE:8D:3A:3D:45:C4:0A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4933c998-3bd5-398a-a712-385a5e8a6c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:11:2b:fa:72:cf:14:1a:a8:c8:ee:04:d5:02:bb:1f:e3:9c: 7f:5a:b0:33:54:6c:d9:97:8e:78:bd:17:75:6c:4b:6c:8a:eb: dc:09:60:7e:87:96:c8:4f:0d:d2:48:d9:10:37:82:af:7e:15: 9c:db:ee:35:4d:3d:0a:b5:82:12:75:41:86:6c:a7:ba:11:91: a8:b4:e4:a4:3e:b8:7b:cc:d9:6c:30:50:23:33:10:c9:a5:9c: c1:b2:0b:8e:88:db:36:3b:71:75:d2:75:e9:6f:ad:78:a1:a2: e9:29:3c:5f:ba:ce:1f:d4:51:cb:ce:15:b4:c3:03:fc:a4:af: 90:db:69:38:f7:7c:92:cd:94:39:cb:60:c0:bb:80:2d:92:3a: c6:23:e1:46:50:3d:b8:41:72:98:8f:fa:2e:2a:cc:3c:c4:25: 2a:f7:49:e2:fb:21:83:1a:b3:55:36:74:0c:7a:77:85:5d:23: f9:9c:f6:ae:3b:cd:7f:01:93:f8:40:46:fd:d7:ed:ab:5a:bc: 39:1d:ad:a4:27:82:60:20:4a:41:c4:35:80:0c:30:8b:18:ce: 1b:40:e4:5d:c4:60:4a:1d:0a:e1:ba:90:e1:9c:cc:5d:63:15: 7f:48:90:73:44:f9:79:53:90:75:f7:a9:e7:3c:32:1f:77:6b: 39:a9:86:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKWze35ewG+IH3YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjA4YWFjZmQtMGY2OS00OWU4LTk5NzMtODczN2Y3MzI4YmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr745Rs5kJy42OKAGZrYn3jwHbu2ds8ToRW0 e8mSrntBuH8hLJSAPkhp+tV/R2neMTNO9yK/eAly5Mvdv6LjMvGgcpOC7Dpcvymh Bh65T4mCF5xzHd+izAkl1hGERyMv2YRo7zhGxLtxRwY9DEJIkLkrIdG1UWoFX0rf vnBL/voh2ImEZdF3bHdMu37BEDE6uyqgOemKCpcedQ/CZrQVfLPux9+q+als6fxp qfybbeQ81q+CBUZWHbhasybinqBNCjR/slnn+UK9pBBxyyfBWENb0fHkoJE2GFx1 L0WR0qFwI60Lr0BjaWeM9RyIDDNRcL9keKg8OINpvnVWlqvn1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5xJhX4N0fWL6d1Aa6NOj1FxAqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvNDkzM2M5OTgtM2JkNS0z OThhLWE3MTItMzg1YTVlOGE2YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMRK/pyzxQaqMjuBNUCux/jnH9asDNUbNmXjni9F3VsS2yK69wJYH6H lshPDdJI2RA3gq9+FZzb7jVNPQq1ghJ1QYZsp7oRkai05KQ+uHvM2WwwUCMzEMml nMGyC46I2zY7cXXSdelvrXihoukpPF+6zh/UUcvOFbTDA/ykr5DbaTj3fJLNlDnL YMC7gC2SOsYj4UZQPbhBcpiP+i4qzDzEJSr3SeL7IYMas1U2dAx6d4VdI/mc9q47 zX8Bk/hARv3X7atavDkdraQngmAgSkHENYAMMIsYzhtA5F3EYEodCuG6kOGczF1j FX9IkHNE+XlTkHX3qec8Mh93azmphlI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:08 2025 by rpki-client