$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/c0d6f9dd-696b-346c-ade7-4561784e631c.roa File: c0d6f9dd-696b-346c-ade7-4561784e631c.roa (raw, json) Hash identifier: xzYZ+ZgVKiC2wYQ/GLdVdmI+DIXILeYeudwaCq1YOSg= Subject key identifier: 60:B5:33:6F:4C:D8:F8:CC:78:F3:E8:8C:99:A9:8D:CC:4E:6D:54:EC Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584A018FB84130BD0896A0948080 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/c0d6f9dd-696b-346c-ade7-4561784e631c.roa Signing time: Wed 28 May 2025 19:06:09 +0000 ROA not before: Wed 28 May 2025 19:06:09 +0000 ROA not after: Tue 26 Aug 2025 19:06:09 +0000 asID: 7311 IP address blocks: 206.204.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:8f:b8:41:30:bd:08:96:a0:94:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: May 28 19:06:09 2025 GMT Not After : Aug 26 19:06:09 2025 GMT Subject: CN=f1ff4645-b2b5-4097-8b87-1a3864af9a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:10:cb:5f:e3:f9:61:78:72:95:bd:a3:6b: 3d:70:42:28:a1:ee:cd:cf:a5:55:c8:3d:0b:e0:1a: 2d:9e:31:22:54:be:11:c0:5b:8e:e3:3c:fe:96:af: 79:e4:9e:43:e6:53:d7:19:a3:d8:b9:19:9e:60:39: 4a:30:aa:9b:70:ee:c3:aa:d5:3a:ac:0d:54:5b:ff: fc:ef:46:01:76:0c:72:7e:f6:97:c5:ca:c3:06:ab: 82:25:b7:93:7d:e7:c0:88:8c:c8:5b:b7:c9:6e:6c: ce:49:54:9d:e4:68:1f:20:88:d6:6f:b1:5a:c4:88: 54:91:4d:8d:4b:59:49:60:8f:0e:08:8b:d5:4a:bf: 59:cd:0f:17:bf:f7:fc:ab:ce:5c:67:2d:fe:ae:44: 10:90:40:69:1d:f3:9d:b3:6b:29:c2:d9:40:0e:d6: c0:5f:d3:82:88:56:8c:cb:78:ad:3e:e1:75:70:66: c6:80:54:67:35:31:58:9c:7d:7c:2f:ed:41:56:93: 37:4e:c9:2c:dc:c9:a4:83:5b:10:a5:51:93:d1:b8: 47:25:b1:40:b3:e0:33:9f:3f:12:af:ea:86:51:74: 1e:70:84:48:22:2c:f7:43:ad:b6:7e:ad:80:b8:75: 4d:ca:6e:86:53:f7:39:57:d3:56:5e:73:29:84:4b: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:33:6F:4C:D8:F8:CC:78:F3:E8:8C:99:A9:8D:CC:4E:6D:54:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/c0d6f9dd-696b-346c-ade7-4561784e631c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 206.204.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ff:73:ec:94:96:0a:69:d0:9d:00:40:fc:50:64:d2:1f:c3: 6e:02:c9:09:08:f0:fe:f9:51:ba:fa:8b:6b:cd:5a:7e:16:3b: 49:99:3d:09:86:7d:5b:50:9c:29:89:76:82:89:b0:a9:44:6e: 47:ea:5f:39:f1:3d:ee:fc:6d:f4:27:7f:9d:5c:87:96:1c:0c: d2:5f:37:4b:13:5b:99:70:e4:28:e4:4d:aa:50:1d:b6:41:df: eb:22:0d:98:b0:95:c3:35:de:2e:cf:52:fd:4c:6c:d8:35:e9: b2:8b:66:1d:5d:df:3d:01:d5:a8:f8:f6:7b:24:8f:2e:b3:f8: 92:e3:66:d7:f9:b9:a0:db:fe:8f:3e:75:39:11:61:12:4d:9e: 9a:b7:0f:b6:e3:b2:19:1d:f6:50:06:00:77:c0:e1:49:64:4a: 46:94:76:c5:de:bc:cb:a6:d9:f0:6d:c1:d4:54:53:f4:b8:5b: 05:97:fb:98:d9:82:86:35:07:96:6d:6f:11:a8:2e:79:09:71: 2b:e1:6d:48:75:61:35:79:c2:05:98:80:05:31:49:62:a6:5c: 0f:1c:c1:39:a7:e2:ea:3a:43:13:1b:43:2a:1c:ae:6a:5b:97: 1c:ab:f2:a2:7c:00:f9:d0:9b:ec:f0:4e:d1:0a:17:9c:de:3d: 03:23:3c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoBj7hBML0IlqCUgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDUyODE5MDYwOVoXDTI1MDgyNjE5MDYwOVowLzEtMCsGA1UEAxMk ZjFmZjQ2NDUtYjJiNS00MDk3LThiODctMWEzODY0YWY5YTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5MQy1/j+WF4cpW9o2s9cEIooe7Nz6VVyD0L 4BotnjEiVL4RwFuO4zz+lq955J5D5lPXGaPYuRmeYDlKMKqbcO7DqtU6rA1UW//8 70YBdgxyfvaXxcrDBquCJbeTfefAiIzIW7fJbmzOSVSd5GgfIIjWb7FaxIhUkU2N S1lJYI8OCIvVSr9ZzQ8Xv/f8q85cZy3+rkQQkEBpHfOds2spwtlADtbAX9OCiFaM y3itPuF1cGbGgFRnNTFYnH18L+1BVpM3Tsks3Mmkg1sQpVGT0bhHJbFAs+Aznz8S r+qGUXQecIRIIiz3Q622fq2AuHVNym6GU/c5V9NWXnMphEvDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC1M29M2PjMePPojJmpjcxObVTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvYzBkNmY5ZGQtNjk2Yi0z NDZjLWFkZTctNDU2MTc4NGU2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsxuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr/c+yUlgpp0J0AQPxQZNIfw24CyQkI8P75Ubr6i2vNWn4WO0mZPQmG fVtQnCmJdoKJsKlEbkfqXznxPe78bfQnf51ch5YcDNJfN0sTW5lw5CjkTapQHbZB 3+siDZiwlcM13i7PUv1MbNg16bKLZh1d3z0B1aj49nskjy6z+JLjZtf5uaDb/o8+ dTkRYRJNnpq3D7bjshkd9lAGAHfA4UlkSkaUdsXevMum2fBtwdRUU/S4WwWX+5jZ goY1B5ZtbxGoLnkJcSvhbUh1YTV5wgWYgAUxSWKmXA8cwTmn4uo6QxMbQyocrmpb lxyr8qJ8APnQm+zwTtEKF5zePQMjPKs= -----END CERTIFICATE-----Generated at Mon Jun 30 10:53:24 2025 by rpki-client