$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa File: 89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa (raw, json) Hash identifier: yIy5h978mEeUPjnTS6ZBW+RWZkev1aufmF+5J3ufb0U= Subject key identifier: 46:10:CC:AA:5A:E0:FF:65:EB:CB:CB:59:47:B1:9C:65:78:E9:C2:D6 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584B583CA7ACC153204DF0B02880 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 11032 IP address blocks: 207.162.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a7:ac:c1:53:20:4d:f0:b0:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=65c9f749-bdf3-41c3-a274-44cf05a64ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:7a:8f:d8:4d:8c:bf:0e:1a:a9:8a:60:da: 44:3f:a5:5d:7b:b4:aa:c0:7d:78:ae:8d:2d:6e:38: 99:fd:2d:a2:5e:71:2e:f2:81:31:83:fb:86:09:6e: bf:d0:f6:31:78:40:31:82:0f:fe:d6:8c:14:2c:9e: 46:ff:db:e2:1a:0c:92:51:96:3b:4b:a6:d7:59:ae: e9:4e:7e:3c:25:5e:ff:3c:56:0a:9c:29:18:1b:1f: 30:07:b3:12:f0:aa:2a:e5:36:a0:52:15:91:35:54: 57:de:ff:4c:19:97:aa:28:6d:5a:f3:89:81:3f:91: c9:70:ba:da:df:32:c7:b8:4b:4c:ef:de:ba:1f:cb: c1:46:16:86:7e:a2:8c:33:a1:03:86:0e:fa:ec:87: df:96:5e:6f:59:c3:af:1d:48:e6:1c:1e:7f:e0:e3: a0:da:5a:2a:ac:13:18:15:9f:55:88:89:ad:dd:c1: 81:63:0a:9a:06:91:a0:47:e5:9b:66:bc:f0:a7:97: 80:0c:68:5f:e6:7c:76:65:b9:b3:dc:c5:80:c1:b6: f3:6f:f1:9b:a3:4c:3a:4d:ad:b7:5e:ab:15:0d:33: d2:80:cb:19:27:4a:13:71:d3:8e:10:80:7c:32:ad: 02:4f:a1:03:51:5e:04:3c:68:6e:07:9a:48:9a:8d: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:10:CC:AA:5A:E0:FF:65:EB:CB:CB:59:47:B1:9C:65:78:E9:C2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/89a6eccf-2b5e-3cf6-9496-387f7a14f81d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 207.162.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cd:a2:d5:53:33:29:26:d0:a4:80:a8:d5:be:81:1c:6f:e9: 6c:0d:ca:18:dd:40:d4:af:95:4a:e3:d5:8b:09:71:0c:a5:ad: 0d:61:bf:8c:11:0e:36:51:4c:3c:3f:31:d0:8a:15:a3:71:e5: 57:ab:a5:c8:80:eb:bd:28:c8:1a:61:16:f1:62:4b:a2:0e:2b: 80:4f:02:5f:47:25:ad:75:50:6d:93:2b:58:cd:a8:ef:88:80: 46:0f:37:39:9a:6b:dd:c7:d4:65:00:80:78:35:e4:24:ff:03: aa:c1:ee:cd:a6:4e:58:aa:7b:29:c4:fc:f7:60:ea:93:dc:7a: ac:71:a2:2d:b2:9f:53:ea:13:8f:0f:67:32:e8:c3:4f:7e:37: 2f:5f:c2:34:18:85:99:86:ab:f0:c1:b6:16:b8:ce:99:ff:e0: 23:04:15:3e:fe:8b:9f:75:bc:52:8b:52:55:8d:b1:50:3f:2e: d1:5a:b6:73:92:7a:72:0c:2a:d7:5f:c3:e2:85:6a:8c:75:a5: a3:2d:e3:d2:3f:f7:88:ae:59:ca:a8:df:53:84:9f:aa:71:92: f0:9c:9b:df:04:ae:58:c1:12:28:2c:46:98:17:8e:dc:5e:93: 69:9f:ab:db:f7:b6:48:3e:a5:b4:2b:5b:79:c9:8b:97:02:39: 94:88:c8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKeswVMgTfCwKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjVjOWY3NDktYmRmMy00MWMzLWEyNzQtNDRjZjA1YTY0ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil96j9hNjL8OGqmKYNpEP6Vde7SqwH14ro0t bjiZ/S2iXnEu8oExg/uGCW6/0PYxeEAxgg/+1owULJ5G/9viGgySUZY7S6bXWa7p Tn48JV7/PFYKnCkYGx8wB7MS8Koq5TagUhWRNVRX3v9MGZeqKG1a84mBP5HJcLra 3zLHuEtM7966H8vBRhaGfqKMM6EDhg767Iffll5vWcOvHUjmHB5/4OOg2loqrBMY FZ9ViImt3cGBYwqaBpGgR+WbZrzwp5eADGhf5nx2Zbmz3MWAwbbzb/Gbo0w6Ta23 XqsVDTPSgMsZJ0oTcdOOEIB8Mq0CT6EDUV4EPGhuB5pImo17UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYQzKpa4P9l68vLWUexnGV46cLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvODlhNmVjY2YtMmI1ZS0z Y2Y2LTk0OTYtMzg3ZjdhMTRmODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6IdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDNotVTMykm0KSAqNW+gRxv6WwNyhjdQNSvlUrj1YsJcQylrQ1hv4wR DjZRTDw/MdCKFaNx5VerpciA670oyBphFvFiS6IOK4BPAl9HJa11UG2TK1jNqO+I gEYPNzmaa93H1GUAgHg15CT/A6rB7s2mTliqeynE/Pdg6pPceqxxoi2yn1PqE48P ZzLow09+Ny9fwjQYhZmGq/DBtha4zpn/4CMEFT7+i591vFKLUlWNsVA/LtFatnOS enIMKtdfw+KFaox1paMt49I/94iuWcqo31OEn6pxkvCcm98ErljBEigsRpgXjtxe k2mfq9v3tkg+pbQrW3nJi5cCOZSIyG4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:16 2025 by rpki-client