$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c21897c4-770f-332b-90cb-b35fe9a2714d.roa File: c21897c4-770f-332b-90cb-b35fe9a2714d.roa (raw, json) Hash identifier: 5zzz6HlGMhlAbmls7rA13c/LGANz1fUK2lbhQtse828= Subject key identifier: C8:8E:30:82:03:A9:68:A1:1F:09:7A:4B:F7:62:B7:62:B8:20:5C:8F Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584F4986ADE7050C3AFEF1163034 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c21897c4-770f-332b-90cb-b35fe9a2714d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 376 IP address blocks: 206.167.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:ad:e7:05:0c:3a:fe:f1:16:30:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=29fd1b08-6acd-4aae-8875-883e72f43484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:6f:dd:ea:f6:3e:48:e9:5c:1c:ee:31:44: 86:82:42:7f:71:d2:4d:e5:4c:26:d9:68:12:c4:21: 1b:0a:7e:27:5e:b8:c8:91:9b:34:87:80:cd:d3:27: d5:91:f4:67:fa:07:6c:a7:cf:43:41:32:9d:cc:2e: 6a:64:c3:94:d1:f9:d5:27:98:6c:18:e8:8d:a8:e9: f7:0d:b5:24:24:86:03:2c:60:7c:bf:57:ee:7b:eb: 8c:7a:56:90:fe:e9:68:74:7e:f2:44:77:84:42:34: 53:b7:71:3f:32:26:51:0d:97:32:99:8a:24:b8:b5: 4f:e3:4b:bb:8c:a9:06:02:3d:12:3d:d7:38:64:c0: d1:ad:33:42:1a:c7:e2:45:42:9e:be:c8:98:24:63: 68:e5:46:1f:4f:65:b4:39:7c:cb:b3:8e:b4:aa:6a: 30:6f:b6:0c:cc:d7:38:81:ee:41:ce:c7:75:7f:5b: 64:fc:b7:4e:5f:f6:22:13:f4:a3:9f:1a:b5:23:b1: 66:0a:61:a6:bc:c7:87:58:1c:7c:c5:23:5a:93:e8: 79:47:36:2f:4e:52:ef:18:0b:03:64:e6:3e:31:ca: c9:26:18:48:39:42:e7:46:00:47:ef:e4:70:b5:83: 74:90:3b:ab:dd:00:ee:6b:b3:bc:25:e3:f0:60:d7: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8E:30:82:03:A9:68:A1:1F:09:7A:4B:F7:62:B7:62:B8:20:5C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/c21897c4-770f-332b-90cb-b35fe9a2714d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:bb:e4:87:49:9b:ec:1c:43:49:8d:ce:c3:f1:6d:1b:48:43: b3:fb:03:e1:07:0b:cb:10:ea:87:58:9f:9c:c8:f2:3c:9c:a0: 44:87:89:be:9b:b2:9f:30:79:51:e7:1d:f1:ce:a4:2a:3e:bd: a7:88:c5:e8:7c:df:d2:6e:d1:3b:6d:ea:eb:95:c9:74:16:25: d8:86:ac:23:64:43:a0:c7:e0:42:71:bf:76:41:99:17:36:f2: d1:1c:de:94:ee:b9:09:7a:95:a7:d8:18:2a:92:56:9e:e9:33: 6d:a3:1d:5d:30:8b:58:51:85:78:96:f8:dd:21:19:3b:ee:91: ac:74:2d:7b:8b:03:51:7c:d3:ae:19:1a:92:a0:97:1b:42:7a: 9f:74:7b:74:4f:05:0b:90:ab:d0:3e:07:20:79:8d:3e:48:81: 91:d9:c0:d0:b8:c6:94:68:76:58:e1:e0:32:09:e8:a2:ac:1b: 94:06:ae:3c:a4:99:35:25:33:b5:36:8d:54:9f:95:65:d5:75: 2b:f3:fb:9a:35:98:46:d9:31:30:91:b3:d3:a3:af:de:ad:35: af:bc:ae:d7:f7:e5:19:a0:98:de:72:5f:94:ec:5e:82:e6:40: 8d:1c:9c:ed:a6:59:07:f8:95:7f:59:ad:47:98:d8:28:df:91: 25:42:2e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhq3nBQw6/vEWMDQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjlmZDFiMDgtNmFjZC00YWFlLTg4NzUtODgzZTcyZjQzNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWNv3er2PkjpXBzuMUSGgkJ/cdJN5Uwm2WgS xCEbCn4nXrjIkZs0h4DN0yfVkfRn+gdsp89DQTKdzC5qZMOU0fnVJ5hsGOiNqOn3 DbUkJIYDLGB8v1fue+uMelaQ/ulodH7yRHeEQjRTt3E/MiZRDZcymYokuLVP40u7 jKkGAj0SPdc4ZMDRrTNCGsfiRUKevsiYJGNo5UYfT2W0OXzLs460qmowb7YMzNc4 ge5Bzsd1f1tk/LdOX/YiE/Sjnxq1I7FmCmGmvMeHWBx8xSNak+h5RzYvTlLvGAsD ZOY+McrJJhhIOULnRgBH7+RwtYN0kDur3QDua7O8JePwYNecOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiOMIIDqWihHwl6S/dit2K4IFyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYzIxODk3YzQtNzcwZi0z MzJiLTkwY2ItYjM1ZmU5YTI3MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB275IdJm+wcQ0mNzsPxbRtIQ7P7A+EHC8sQ6odYn5zI8jycoESHib6b sp8weVHnHfHOpCo+vaeIxeh839Ju0Ttt6uuVyXQWJdiGrCNkQ6DH4EJxv3ZBmRc2 8tEc3pTuuQl6lafYGCqSVp7pM22jHV0wi1hRhXiW+N0hGTvukax0LXuLA1F8064Z GpKglxtCep90e3RPBQuQq9A+ByB5jT5IgZHZwNC4xpRodljh4DIJ6KKsG5QGrjyk mTUlM7U2jVSflWXVdSvz+5o1mEbZMTCRs9Ojr96tNa+8rtf35RmgmN5yX5TsXoLm QI0cnO2mWQf4lX9ZrUeY2CjfkSVCLnc= -----END CERTIFICATE-----Generated at Fri Oct 2 19:36:12 2026 by rpki-client