$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a5e787dc-9abf-3ea4-8729-6c04b9488721.roa File: a5e787dc-9abf-3ea4-8729-6c04b9488721.roa (raw, json) Hash identifier: W4ec+bYVCauOwLujgMcrcPP6ej99VJH/y5MLd+FgIv8= Subject key identifier: BF:A1:2E:AB:28:B9:71:40:65:FB:1B:B8:50:47:FD:60:39:3E:D7:F3 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584B583CA73FCE08F528ADD62C00 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a5e787dc-9abf-3ea4-8729-6c04b9488721.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 376 IP address blocks: 206.167.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a7:3f:ce:08:f5:28:ad:d6:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=f77585a5-676e-4260-bc1c-284ddb435766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:da:6a:32:dc:c0:0e:6e:12:0d:4e:11:6c: 69:a7:f4:cd:7b:9a:43:91:5e:b8:b3:b9:19:0b:c9: 86:87:c4:00:ac:4b:71:1c:da:c4:af:d8:79:ef:62: 6e:0e:61:b2:b5:59:fb:4f:6c:88:ea:d1:3c:74:52: c4:86:5d:83:e6:3c:56:f1:50:b4:91:24:5f:ea:01: 0b:32:7c:d9:86:c2:ad:7e:d2:18:ec:6e:14:9a:07: 64:51:56:f1:3e:de:d2:9b:b3:5b:9a:73:73:80:dc: b0:23:08:d5:9c:39:1d:ab:a2:44:42:47:40:be:75: 3a:ea:a8:1d:bf:5b:2c:05:57:a4:e8:5c:4a:29:c3: 36:e1:af:74:35:14:89:fa:3f:26:c5:0e:9e:1f:80: ae:3f:a7:49:d3:86:d3:6b:7a:ca:20:16:ab:f0:2a: 8b:59:99:89:fd:19:6e:1f:11:c0:d1:41:4b:99:9d: 1f:b2:b2:e7:30:65:1a:92:4e:bf:5d:0b:f7:e7:fd: 22:dc:8d:a9:bb:83:ca:64:fe:33:b9:ec:b1:95:65: 4e:02:30:72:ae:cf:41:53:48:fb:e3:8a:9a:d9:09: d3:fe:5d:4f:af:86:78:ed:ea:f0:0f:f1:62:73:2f: 88:ab:83:62:69:3d:bc:97:50:81:30:d3:f4:85:8f: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A1:2E:AB:28:B9:71:40:65:FB:1B:B8:50:47:FD:60:39:3E:D7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a5e787dc-9abf-3ea4-8729-6c04b9488721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ba:71:13:91:3d:17:b2:67:b8:e3:11:35:b7:96:4d:da:fd: 22:7f:18:29:1a:b6:e6:75:0a:f1:b1:1a:a2:17:11:b3:47:dc: b9:27:27:cb:d3:8d:78:25:4c:71:98:47:3b:4d:dd:e7:ae:b5: f1:8a:f3:bc:3e:f2:f7:f1:a9:5d:b1:cb:31:21:2b:a7:22:ab: 01:bd:f2:b5:e3:84:21:1a:19:ee:9a:8b:32:97:32:1d:23:4d: ce:0e:85:a2:72:4b:61:79:98:48:8c:4e:15:28:c2:a6:de:4e: 38:e9:ee:fa:4a:ad:7a:07:b9:6e:cc:12:79:8d:ad:93:51:a2: f8:b2:3e:9c:4e:76:37:db:91:7f:c1:47:09:67:34:af:cd:92: c2:f7:f8:83:bd:45:28:2c:5f:87:c7:46:b9:37:0c:cf:b3:e9: af:f6:01:f3:5a:16:51:9b:86:21:45:b2:90:ad:81:6f:53:27: 13:1b:93:b8:b9:c0:d9:a3:22:f9:3b:e8:37:5b:04:4a:f4:ee: ed:3e:0e:74:67:b6:2e:25:99:9e:ce:6f:a5:13:00:0a:07:6f: 2f:2b:eb:85:8a:c8:d9:d6:0b:9d:42:01:ca:8f:3d:62:f7:de: ce:1f:9e:9b:ff:05:68:94:a6:88:86:a8:57:23:15:49:11:39: a9:b3:b0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKc/zgj1KK3WLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Zjc3NTg1YTUtNjc2ZS00MjYwLWJjMWMtMjg0ZGRiNDM1NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgXaajLcwA5uEg1OEWxpp/TNe5pDkV64s7kZ C8mGh8QArEtxHNrEr9h572JuDmGytVn7T2yI6tE8dFLEhl2D5jxW8VC0kSRf6gEL MnzZhsKtftIY7G4UmgdkUVbxPt7Sm7NbmnNzgNywIwjVnDkdq6JEQkdAvnU66qgd v1ssBVek6FxKKcM24a90NRSJ+j8mxQ6eH4CuP6dJ04bTa3rKIBar8CqLWZmJ/Rlu HxHA0UFLmZ0fsrLnMGUakk6/XQv35/0i3I2pu4PKZP4zueyxlWVOAjByrs9BU0j7 44qa2QnT/l1Pr4Z47erwD/Ficy+Iq4NiaT28l1CBMNP0hY8MFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+hLqsouXFAZfsbuFBH/WA5PtfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYTVlNzg3ZGMtOWFiZi0z ZWE0LTg3MjktNmMwNGI5NDg4NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH66cRORPReyZ7jjETW3lk3a/SJ/GCkatuZ1CvGxGqIXEbNH3LknJ8vT jXglTHGYRztN3eeutfGK87w+8vfxqV2xyzEhK6ciqwG98rXjhCEaGe6aizKXMh0j Tc4OhaJyS2F5mEiMThUowqbeTjjp7vpKrXoHuW7MEnmNrZNRoviyPpxOdjfbkX/B RwlnNK/NksL3+IO9RSgsX4fHRrk3DM+z6a/2AfNaFlGbhiFFspCtgW9TJxMbk7i5 wNmjIvk76DdbBEr07u0+DnRnti4lmZ7Ob6UTAAoHby8r64WKyNnWC51CAcqPPWL3 3s4fnpv/BWiUpoiGqFcjFUkROamzsKM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:03 2025 by rpki-client