$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4c3cdd6f-348a-3563-b505-bda7ca8b20dc.roa File: 4c3cdd6f-348a-3563-b505-bda7ca8b20dc.roa (raw, json) Hash identifier: v+fDIoW3BIaf5LbKzaQ6wvEf2N4wFrTSaVNRj/s4E2A= Subject key identifier: BC:DA:5B:D1:A1:A7:84:6E:6E:9F:81:30:0A:86:75:C1:61:F3:29:1E Certificate issuer: /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Certificate serial: 010D0C9F4328584B004BF2A26617BF5ECD1B86F0 Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4c3cdd6f-348a-3563-b505-bda7ca8b20dc.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 395332 IP address blocks: 206.81.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f2:a2:66:17:bf:5e:cd:1b:86:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=76ecf515-86a4-4c34-8863-515a509c7e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:bb:ee:a5:f7:4f:ec:1d:ae:2f:99:98:3d: d9:7c:01:03:13:0e:f4:ea:0b:99:3e:51:66:52:2d: 04:fe:33:e1:11:4e:c3:0f:50:4f:08:4c:c1:16:92: 67:86:25:81:4b:68:2f:26:73:d6:42:6c:01:22:41: a2:55:f3:9c:f8:64:a4:cd:06:ae:1a:42:88:e7:38: c8:a8:42:52:e1:39:23:dd:b1:e4:10:ae:d4:f8:76: 4f:24:51:96:05:f1:0c:57:42:7b:7d:11:ab:42:3b: f7:60:c3:e0:37:95:14:38:42:ad:7f:03:df:a1:ea: c3:8d:0a:a1:6b:56:87:68:cb:8b:89:42:a6:00:21: d8:35:2a:69:54:cb:70:62:c6:89:35:c2:73:2e:42: f6:be:d2:3e:00:b5:7c:0b:e4:78:ea:c4:6d:b4:05: bb:d2:8d:97:4b:14:b4:74:a9:9b:57:75:10:80:04: a1:1b:e3:6d:8a:6c:16:eb:8f:5c:a8:75:20:83:25: fa:2c:99:73:6c:7b:d4:c6:8d:53:c2:0b:fc:a7:4b: a8:f9:f1:df:25:20:49:36:48:62:07:30:b3:82:96: 09:92:2a:d9:3a:38:77:dd:3e:4c:12:b6:97:b7:aa: ef:3d:27:f0:36:e1:be:14:f2:12:03:c6:74:e7:2c: 09:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:5B:D1:A1:A7:84:6E:6E:9F:81:30:0A:86:75:C1:61:F3:29:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4c3cdd6f-348a-3563-b505-bda7ca8b20dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl X509v3 Authority Key Identifier: keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer sbgp-ipAddrBlock: critical IPv4: 206.81.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:36:83:26:02:98:3f:25:ab:a9:d7:b9:c6:7c:43:58:4a:9c: 9b:38:37:c2:ff:ce:bd:da:c3:70:6e:aa:44:42:f4:d8:34:59: 4e:23:0d:b1:61:35:54:28:77:a4:fb:bd:6d:86:61:b3:6c:85: 09:db:64:da:42:95:50:a5:49:c4:60:0d:90:23:73:4e:9e:26: ae:30:e8:9a:c3:a1:a6:ef:d6:5c:13:4d:11:0b:c7:ac:6a:d0: 16:f4:60:5a:c3:b1:ce:e5:8b:10:b2:d5:2d:d7:77:16:b6:0a: a8:5c:53:94:62:62:8c:ad:40:39:d6:95:df:f5:1e:17:91:95: 50:64:e5:7f:d6:c6:4b:51:29:6a:fd:94:70:4d:9d:d8:4b:51: 9a:15:78:4e:fe:bc:75:a6:05:3d:c0:7f:50:4a:92:0b:ea:32: dd:96:ee:82:70:18:d4:d9:c1:32:2f:35:54:19:dd:9b:e7:6e: 9b:7c:0e:9f:ab:8a:60:29:8e:61:c6:d9:7a:50:a6:60:8d:43: f5:4a:7d:15:87:cf:4c:e6:94:b3:6c:b3:34:cc:72:5e:59:05: a8:ba:74:de:db:69:c6:51:52:6e:d6:13:26:c6:e6:2b:6b:97: 8d:9e:03:f9:d8:ca:42:65:03:6f:84:84:16:88:dc:3f:5a:6c: e5:3e:07:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/KiZhe/Xs0bhvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBj NDkxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NzZlY2Y1MTUtODZhNC00YzM0LTg4NjMtNTE1YTUwOWM3ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCS77qX3T+wdri+ZmD3ZfAEDEw706guZPlFm Ui0E/jPhEU7DD1BPCEzBFpJnhiWBS2gvJnPWQmwBIkGiVfOc+GSkzQauGkKI5zjI qEJS4Tkj3bHkEK7U+HZPJFGWBfEMV0J7fRGrQjv3YMPgN5UUOEKtfwPfoerDjQqh a1aHaMuLiUKmACHYNSppVMtwYsaJNcJzLkL2vtI+ALV8C+R46sRttAW70o2XSxS0 dKmbV3UQgAShG+NtimwW649cqHUggyX6LJlzbHvUxo1Twgv8p0uo+fHfJSBJNkhi BzCzgpYJkirZOjh33T5MEraXt6rvPSfwNuG+FPISA8Z05ywJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzaW9Ghp4Rubp+BMAqGdcFh8ykeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJi MDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvNGMzY2RkNmYtMzQ4YS0z NTYzLWI1MDUtYmRhN2NhOGIyMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2MyYjA4ZjktYjNkYy00Y2Y2LTg3 MGMtYTczMGI4NjBjNDkxL2NjMmIwOGY5LWIzZGMtNGNmNi04NzBjLWE3MzBiODYw YzQ5MS5jcmwwHwYDVR0jBBgwFoAU4R+/KOrwSwaL4CtRyr1gO43HGJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMw Yjg2MGM0OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzlFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ2gyYCmD8lq6nXucZ8Q1hKnJs4N8L/zr3aw3BuqkRC9Ng0WU4jDbFh NVQod6T7vW2GYbNshQnbZNpClVClScRgDZAjc06eJq4w6JrDoabv1lwTTRELx6xq 0Bb0YFrDsc7lixCy1S3Xdxa2CqhcU5RiYoytQDnWld/1HheRlVBk5X/WxktRKWr9 lHBNndhLUZoVeE7+vHWmBT3Af1BKkgvqMt2W7oJwGNTZwTIvNVQZ3Zvnbpt8Dp+r imApjmHG2XpQpmCNQ/VKfRWHz0zmlLNsszTMcl5ZBai6dN7bacZRUm7WEybG5itr l42eA/nYykJlA2+EhBaI3D9abOU+B8k= -----END CERTIFICATE-----Generated at Tue Sep 16 03:05:07 2025 by rpki-client