$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa File: d532a486-29c6-3280-81e5-af871505b46c.roa (raw, json) Hash identifier: MZVVxAgpRLP7najphaV9BiAtuKVxbsaxGsISxUb1Hds= Subject key identifier: DF:2A:53:72:91:48:96:C1:22:FC:A9:D3:54:77:1C:BA:E9:26:E3:44 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584EA788900110EEB68BAE86B0E0 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30048 IP address blocks: 204.10.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:90:01:10:ee:b6:8b:ae:86:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2d8238b4-8d54-4226-95d5-a2d14395676a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6a:27:85:0d:5b:77:66:50:2f:53:2e:8c:6a: c8:61:9f:8c:1d:fa:a8:cf:20:aa:4a:fb:fd:30:7b: 46:8b:64:8e:15:3c:6a:e2:66:26:02:7c:c2:ff:7f: aa:c3:38:90:37:7a:98:2b:07:cb:a5:b2:6f:24:8a: 0f:43:a2:c5:1e:59:ec:ed:86:c8:3a:87:83:0c:4b: f3:b5:3a:47:bf:26:d9:5b:a7:b1:09:4f:1d:58:92: ac:e5:88:b9:44:08:5b:70:2b:aa:aa:15:21:0b:2d: 75:bd:6f:62:57:f3:2b:29:2b:83:2d:3f:79:53:2f: eb:0e:78:43:f7:f0:1b:54:0a:61:5f:33:4d:4b:cd: c6:00:9e:0d:05:4e:19:f4:22:17:08:e4:56:8c:b1: 02:fd:f5:f4:2c:55:68:2f:61:16:37:e0:74:7c:99: 4d:04:cd:79:19:ee:d9:a1:33:4d:b5:77:17:fb:3b: 53:5a:f7:39:58:b5:f3:58:7b:0d:c4:64:be:c6:6c: 25:38:d9:86:9c:5f:1f:5d:d3:5b:5c:01:56:d0:07: 1b:7c:2b:e8:4d:16:1b:f2:18:d4:60:68:16:dc:9d: da:9e:72:99:33:6b:b9:9f:4d:0b:10:02:a6:1c:46: fe:34:b0:42:b5:63:b1:56:ed:73:98:fe:9b:cd:dc: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2A:53:72:91:48:96:C1:22:FC:A9:D3:54:77:1C:BA:E9:26:E3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 204.10.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:4b:0d:6a:ea:3d:56:63:a1:48:a5:e9:92:6c:9e:ef:c4: c6:53:7d:fc:69:7d:87:85:90:be:a9:76:00:8f:17:83:79:6d: ab:5a:24:8c:3d:be:54:4f:72:d2:40:58:b1:f0:9c:09:93:e4: 28:f5:be:19:9b:35:0c:ef:c5:64:0f:7b:50:41:61:74:fa:f9: 13:41:e8:b0:85:b3:28:e2:cf:86:cc:c2:04:5c:6a:7b:cc:7c: fc:d7:61:a8:ec:bd:bb:fa:29:41:fe:2a:65:fd:77:12:e3:45: 00:35:6f:bc:bf:9f:dc:a7:d5:3e:be:67:e8:c0:b7:53:6d:e2: f5:d5:ca:da:22:6b:1c:f5:38:76:7e:c0:3b:f8:a9:d3:70:74: 44:a1:9a:3b:c9:ee:62:9c:ce:4b:a6:e9:3e:09:99:a2:59:1d: 0f:bf:35:21:b7:4d:3c:2c:d9:1d:74:79:74:31:ef:bf:23:5e: 99:ff:a8:03:f2:1b:4e:89:55:d9:79:15:21:13:fd:a0:bb:e0: 78:e5:dd:a3:52:52:26:5b:03:7a:12:bb:8d:3c:b0:39:46:27: 21:ec:3e:ba:60:f1:1a:87:66:2f:4b:2c:31:09:3c:52:3a:6d: af:d0:34:94:10:32:16:c2:70:67:8f:dd:02:d7:8e:b9:38:c6: 91:1c:6e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJABEO62i66GsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmQ4MjM4YjQtOGQ1NC00MjI2LTk1ZDUtYTJkMTQzOTU2NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimonhQ1bd2ZQL1MujGrIYZ+MHfqozyCqSvv9 MHtGi2SOFTxq4mYmAnzC/3+qwziQN3qYKwfLpbJvJIoPQ6LFHlns7YbIOoeDDEvz tTpHvybZW6exCU8dWJKs5Yi5RAhbcCuqqhUhCy11vW9iV/MrKSuDLT95Uy/rDnhD 9/AbVAphXzNNS83GAJ4NBU4Z9CIXCORWjLEC/fX0LFVoL2EWN+B0fJlNBM15Ge7Z oTNNtXcX+ztTWvc5WLXzWHsNxGS+xmwlONmGnF8fXdNbXAFW0AcbfCvoTRYb8hjU YGgW3J3annKZM2u5n00LEAKmHEb+NLBCtWOxVu1zmP6bzdwfdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8qU3KRSJbBIvyp01R3HLrpJuNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZDUzMmE0ODYtMjljNi0z MjgwLTgxZTUtYWY4NzE1MDViNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzArPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5tSw1q6j1WY6FIpemSbJ7vxMZTffxpfYeFkL6pdgCPF4N5bataJIw9 vlRPctJAWLHwnAmT5Cj1vhmbNQzvxWQPe1BBYXT6+RNB6LCFsyjiz4bMwgRcanvM fPzXYajsvbv6KUH+KmX9dxLjRQA1b7y/n9yn1T6+Z+jAt1Nt4vXVytoiaxz1OHZ+ wDv4qdNwdEShmjvJ7mKczkum6T4JmaJZHQ+/NSG3TTws2R10eXQx778jXpn/qAPy G06JVdl5FSET/aC74Hjl3aNSUiZbA3oSu408sDlGJyHsPrpg8RqHZi9LLDEJPFI6 ba/QNJQQMhbCcGeP3QLXjrk4xpEcbvQ= -----END CERTIFICATE-----Generated at Wed Jul 29 04:32:28 2026 by rpki-client