$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c21897c4-770f-332b-90cb-b35fe9a2714d.roa File: c21897c4-770f-332b-90cb-b35fe9a2714d.roa (raw, json) Hash identifier: rJHEHXLQtRbPBocakWTPPNJ0G4w2EpwQMtv4pj9SFnQ= Subject key identifier: 9D:F1:AB:7D:D5:CC:87:99:EE:CF:2A:42:39:53:64:91:1A:0F:8C:55 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584D19B4D06AE40993BCC199B780 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c21897c4-770f-332b-90cb-b35fe9a2714d.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 376 IP address blocks: 206.167.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d0:6a:e4:09:93:bc:c1:99:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=bac7d1d2-fb04-430a-948b-b3dd4d9eea38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4e:f7:a2:1b:a6:9d:eb:b2:b5:cb:a9:dd:9e: be:5c:0f:fd:7f:7f:c6:96:e7:46:71:04:fa:4a:a8: 3c:7a:0b:1e:cc:62:e7:38:9e:63:0a:24:b9:c7:1c: 1f:df:02:d4:6c:54:c8:8f:8a:aa:f2:77:b1:0c:14: 9e:ff:61:1a:98:4f:4a:2e:50:7d:3d:46:33:bd:5d: 2a:a5:92:72:2f:f7:dc:11:3c:eb:b2:de:a1:22:1b: af:b5:fc:54:33:0c:c3:de:2c:c6:4c:79:b3:e1:d2: 52:31:79:fe:f9:8b:0c:b0:22:57:6e:9f:72:16:d1: a9:26:42:e1:e5:f7:b9:73:ea:ae:af:c7:3a:c9:13: e1:b2:8b:84:a3:03:ad:d2:10:47:42:bf:a4:dc:d1: 30:10:05:c5:c6:eb:ba:4e:83:9e:d0:84:d9:66:eb: 9e:c3:1a:a1:b0:d3:7d:19:53:c6:ed:c3:58:91:35: 1f:45:0b:45:23:5f:df:11:bf:e3:4b:fc:38:c9:23: 97:f4:47:d7:14:e4:69:18:aa:01:a5:6a:4f:d9:4c: 87:b5:8b:b6:6f:03:62:56:7c:70:10:dc:a3:b5:a9: 35:ce:8b:c4:13:f1:da:99:52:bb:96:5f:2e:2a:aa: 06:6f:9f:d0:d7:3c:5c:96:8b:1e:3d:0c:f7:98:42: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F1:AB:7D:D5:CC:87:99:EE:CF:2A:42:39:53:64:91:1A:0F:8C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c21897c4-770f-332b-90cb-b35fe9a2714d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:04:a3:3a:fb:f7:fc:40:22:a3:9a:09:2f:0b:bf:c0:05:af: 3b:5d:30:b6:27:64:f8:d2:1b:02:f4:b1:fd:3d:1c:a9:2c:76: 34:1a:e8:49:0f:f4:7c:2a:bb:aa:a8:2b:e4:1b:36:bc:91:fc: c5:64:03:27:e8:c4:49:45:58:55:48:19:3e:b9:46:65:30:fe: 38:da:50:60:6e:90:d7:00:88:62:0c:cd:ae:38:93:c5:15:f3: 7d:7f:b4:69:b9:f6:ef:d8:99:05:d3:24:98:61:6d:a5:8a:a4: e7:d0:ca:a7:12:4b:00:ba:b2:9c:25:04:f3:7a:ca:5e:d7:19: b4:17:10:aa:bf:ff:e8:1a:ec:bb:3f:78:f6:c3:96:47:24:23: ee:6b:e5:47:1c:4b:bc:1b:a3:84:32:8f:50:4d:93:3b:90:4f: 8a:df:d2:b0:46:60:66:96:34:93:02:26:00:0d:b7:c2:5e:b4: a1:37:88:b6:8a:ff:90:2e:bb:d2:62:b6:00:fb:ab:b6:36:ec: 18:e7:91:ca:63:fc:80:1b:0d:70:96:9b:da:66:fa:d5:9a:76: 75:58:9e:b9:ce:46:ef:9e:29:46:de:6a:ff:84:e5:14:74:91: c8:cd:77:21:91:8f:d2:d4:9a:43:bc:38:55:f8:5d:0a:70:f5: 15:d6:8a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNBq5AmTvMGZt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YmFjN2QxZDItZmIwNC00MzBhLTk0OGItYjNkZDRkOWVlYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk73ohumneuytcup3Z6+XA/9f3/GludGcQT6 Sqg8egsezGLnOJ5jCiS5xxwf3wLUbFTIj4qq8nexDBSe/2EamE9KLlB9PUYzvV0q pZJyL/fcETzrst6hIhuvtfxUMwzD3izGTHmz4dJSMXn++YsMsCJXbp9yFtGpJkLh 5fe5c+qur8c6yRPhsouEowOt0hBHQr+k3NEwEAXFxuu6ToOe0ITZZuuewxqhsNN9 GVPG7cNYkTUfRQtFI1/fEb/jS/w4ySOX9EfXFORpGKoBpWpP2UyHtYu2bwNiVnxw ENyjtak1zovEE/HamVK7ll8uKqoGb5/Q1zxclosePQz3mEJP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3xq33VzIeZ7s8qQjlTZJEaD4xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYzIxODk3YzQtNzcwZi0z MzJiLTkwY2ItYjM1ZmU5YTI3MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgEozr79/xAIqOaCS8Lv8AFrztdMLYnZPjSGwL0sf09HKksdjQa6EkP 9Hwqu6qoK+QbNryR/MVkAyfoxElFWFVIGT65RmUw/jjaUGBukNcAiGIMza44k8UV 831/tGm59u/YmQXTJJhhbaWKpOfQyqcSSwC6spwlBPN6yl7XGbQXEKq//+ga7Ls/ ePbDlkckI+5r5UccS7wbo4Qyj1BNkzuQT4rf0rBGYGaWNJMCJgANt8JetKE3iLaK /5Auu9JitgD7q7Y27Bjnkcpj/IAbDXCWm9pm+tWadnVYnrnORu+eKUbeav+E5RR0 kcjNdyGRj9LUmkO8OFX4XQpw9RXWil8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:39 2026 by rpki-client