$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/c0d6f9dd-696b-346c-ade7-4561784e631c.roa File: c0d6f9dd-696b-346c-ade7-4561784e631c.roa (raw, json) Hash identifier: b0Zvo95A1tTG2L7V04++MzU8R78a13/KjxtNZ/7GT/o= Subject key identifier: 4B:5C:A6:90:88:70:4E:70:84:9F:F5:B5:2E:F5:AF:8D:49:15:BA:2E Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584AE1971D2953B17907AC88A0C0 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/c0d6f9dd-696b-346c-ade7-4561784e631c.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 7311 IP address blocks: 206.204.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:1d:29:53:b1:79:07:ac:88:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=8a412ae8-f4dc-4ed2-9b83-91fcb65a0370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:a9:b1:84:c0:e2:07:03:88:c0:a8:40:fc: ea:bf:36:42:83:53:9d:2e:da:2d:1b:61:81:8a:c3: be:a4:db:84:24:e6:9a:e7:80:42:37:ca:91:5e:cd: 16:b0:ec:82:4e:16:ac:db:7d:05:79:ea:90:4c:57: 5f:29:2c:95:24:16:de:b3:81:88:ff:40:fb:1c:af: 39:84:42:a3:ed:73:3b:d6:48:06:fc:80:24:ed:a6: b6:8b:d1:68:b8:db:4b:fb:ea:f4:f0:e4:a1:25:e6: 2b:80:05:97:13:ea:b5:01:92:df:af:11:21:08:69: 81:33:6a:b0:8f:7f:10:84:ec:1c:e1:bb:63:ec:07: df:f0:4a:08:e4:ac:59:aa:30:41:54:57:49:14:20: 92:bb:ce:9c:6a:0e:b3:3c:8d:00:21:36:29:c2:97: e9:5c:4d:0a:4b:1c:fa:81:ee:40:6a:48:84:ab:f2: d3:6a:9e:77:30:ca:49:b5:1e:2c:46:30:33:ef:5b: 41:1b:be:ba:7f:eb:ac:22:7c:24:44:cf:de:d9:14: 9c:42:96:8a:74:91:2f:9b:fd:52:d4:ee:d4:e4:a7: 8d:1d:f1:78:cb:30:a7:73:2f:f7:27:b7:43:7a:b5: 8d:92:a3:6a:55:d0:54:cb:62:f9:49:67:cf:55:b1: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5C:A6:90:88:70:4E:70:84:9F:F5:B5:2E:F5:AF:8D:49:15:BA:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/c0d6f9dd-696b-346c-ade7-4561784e631c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 206.204.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:3a:12:4d:d3:05:c5:18:b8:ac:22:ac:3a:9f:04:0b:2b:ce: 9b:21:68:09:ea:f8:92:42:e8:fa:0b:79:40:e4:fd:eb:45:d2: fc:1e:9e:9b:44:7d:df:27:91:a6:59:8a:1f:2c:6c:a5:bd:34: 41:ff:14:13:d1:af:e0:10:71:2e:59:5b:04:49:13:4b:6c:a9: e5:f8:cd:24:41:17:19:58:5a:bd:c3:93:ce:61:ac:6f:76:5e: 9d:65:3e:7f:09:62:6e:d4:fa:ac:17:7a:26:88:04:f0:f8:e3: c6:a4:2c:b1:ce:40:9f:37:43:33:f1:01:14:9c:7a:f1:77:58: 65:a6:7d:e0:b5:2f:dc:8b:6d:aa:8a:03:bb:76:fc:ca:94:67: 33:fc:99:f1:9c:28:ca:fc:c6:f5:7f:e8:19:57:be:37:53:eb: 57:52:af:7f:62:de:81:83:88:80:9f:c4:b6:f9:d3:a1:33:88: ba:19:8b:b6:d8:90:c1:e4:1b:a6:30:4b:85:76:3b:12:bd:05: 13:49:db:cb:c3:52:ff:e6:9b:cd:bb:5f:a8:c5:55:12:b8:1e: 1e:56:db:c3:b1:f2:83:0a:94:88:cc:c7:73:b7:4a:4a:ad:34: 43:18:d5:6e:fa:76:cf:3f:8a:b2:02:f1:30:22:b8:f7:49:8f: 87:4d:f1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlx0pU7F5B6yIoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk OGE0MTJhZTgtZjRkYy00ZWQyLTliODMtOTFmY2I2NWEwMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6apsYTA4gcDiMCoQPzqvzZCg1OdLtotG2GB isO+pNuEJOaa54BCN8qRXs0WsOyCThas230FeeqQTFdfKSyVJBbes4GI/0D7HK85 hEKj7XM71kgG/IAk7aa2i9FouNtL++r08OShJeYrgAWXE+q1AZLfrxEhCGmBM2qw j38QhOwc4btj7Aff8EoI5KxZqjBBVFdJFCCSu86cag6zPI0AITYpwpfpXE0KSxz6 ge5AakiEq/LTap53MMpJtR4sRjAz71tBG766f+usInwkRM/e2RScQpaKdJEvm/1S 1O7U5KeNHfF4yzCncy/3J7dDerWNkqNqVdBUy2L5SWfPVbEHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtcppCIcE5whJ/1tS71r41JFbouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvYzBkNmY5ZGQtNjk2Yi0z NDZjLWFkZTctNDU2MTc4NGU2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsxuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw6Ek3TBcUYuKwirDqfBAsrzpshaAnq+JJC6PoLeUDk/etF0vwenptE fd8nkaZZih8sbKW9NEH/FBPRr+AQcS5ZWwRJE0tsqeX4zSRBFxlYWr3Dk85hrG92 Xp1lPn8JYm7U+qwXeiaIBPD448akLLHOQJ83QzPxARScevF3WGWmfeC1L9yLbaqK A7t2/MqUZzP8mfGcKMr8xvV/6BlXvjdT61dSr39i3oGDiICfxLb506EziLoZi7bY kMHkG6YwS4V2OxK9BRNJ28vDUv/mm827X6jFVRK4Hh5W28Ox8oMKlIjMx3O3Skqt NEMY1W76ds8/irIC8TAiuPdJj4dN8eI= -----END CERTIFICATE-----Generated at Wed Aug 20 21:19:34 2025 by rpki-client