$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa File: d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa (raw, json) Hash identifier: K6Pi2OAlRh5vIgBZss9Sfr37cw02BG4IEPe/pvqBO3g= Subject key identifier: 99:28:ED:55:12:09:AD:12:49:F3:93:2E:48:3C:E6:47:6E:42:91:35 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584A9FFBAA03877124C868358700 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33211 IP address blocks: 206.41.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:aa:03:87:71:24:c8:68:35:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=babfb577-eb84-47f8-906e-10b327c80f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:ae:21:64:51:ca:10:64:97:04:a7:b6:5c: c9:40:d6:89:97:48:cb:e9:d9:b3:c5:f1:ed:18:bf: a3:b7:ca:19:a3:7d:0f:41:0b:a4:ec:3f:15:40:1f: 9e:db:bb:7a:7c:18:5e:97:cd:50:1a:71:db:7d:46: 51:65:da:bb:3a:28:02:df:be:e4:1a:ea:7f:66:b9: 85:a6:55:de:bd:f1:31:8f:82:c1:49:fe:c8:e6:4f: 8d:d9:6b:35:43:0e:85:aa:fc:5c:03:74:69:dd:06: 91:ef:04:92:91:0b:36:62:dc:60:fc:b4:0e:bd:0c: 1d:28:a4:d4:99:8e:87:84:33:07:e6:7e:f1:9d:bf: ee:cc:43:e7:c8:d8:d3:ac:a5:c7:20:21:4a:cb:9e: e6:ba:a3:ae:46:9e:fd:ef:cc:da:56:a0:ac:f2:3a: ab:76:19:ca:bb:0e:d3:52:94:73:76:1d:63:25:ff: 02:5e:5a:a9:e1:85:10:d4:1e:3e:b7:d5:c7:9a:a4: a5:d0:30:71:7a:91:25:39:95:a7:c8:57:95:87:c0: 13:ac:53:36:50:fa:02:19:0d:94:17:c8:e5:4c:d2: e5:0a:09:89:a5:5d:ee:b4:fc:44:e4:1a:93:6e:69: 19:25:28:08:0f:13:df:9d:5f:79:d8:13:f9:05:8f: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:ED:55:12:09:AD:12:49:F3:93:2E:48:3C:E6:47:6E:42:91:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ed:37:d0:d0:b6:ff:ef:02:f0:4e:07:65:b8:93:5f:6c:a2: 42:3c:1c:60:4f:0a:15:fc:6a:6a:a3:8f:fa:ce:c6:df:78:f0: 97:28:12:ea:42:e5:a3:0c:7a:0b:7c:43:b4:6f:4a:78:19:ba: 25:59:76:e4:cd:67:52:64:7f:39:dc:f7:8f:27:c6:d4:5f:40: 33:4c:dc:08:69:36:6a:75:e8:97:7c:9a:ce:1a:5b:1f:c6:75: a0:55:08:62:ac:06:f7:8c:e4:b8:0b:89:13:bf:55:76:d1:cd: 5c:00:d9:30:28:ce:ed:1a:20:da:71:3c:f7:4c:9a:19:7b:2e: 2b:85:f0:8e:b2:dc:bf:34:d4:2b:3c:19:ad:d9:de:52:07:49: cf:48:b6:3b:8a:15:23:60:3e:10:08:9d:27:b7:c5:32:70:21: 7b:f1:e0:4c:50:d1:85:f1:c0:8c:dc:a8:26:a7:1b:f3:8f:7e: 92:3d:ce:3f:c6:6c:dd:29:e4:be:72:7b:4f:7f:a5:1f:82:ce: 75:08:95:91:b1:3d:d5:0e:ac:1f:44:51:2c:9e:4e:31:f5:85: f0:31:8f:15:f0:29:26:d1:3d:e7:f4:33:6a:75:cb:a4:a3:fb: 52:fc:b6:5f:53:36:1f:e7:b7:4b:c2:90:4a:20:8a:a5:64:c9: 4a:ef:8b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6oDh3EkyGg1hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YmFiZmI1NzctZWI4NC00N2Y4LTkwNmUtMTBiMzI3YzgwZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt76uIWRRyhBklwSntlzJQNaJl0jL6dmzxfHt GL+jt8oZo30PQQuk7D8VQB+e27t6fBhel81QGnHbfUZRZdq7OigC377kGup/ZrmF plXevfExj4LBSf7I5k+N2Ws1Qw6FqvxcA3Rp3QaR7wSSkQs2Ytxg/LQOvQwdKKTU mY6HhDMH5n7xnb/uzEPnyNjTrKXHICFKy57muqOuRp7978zaVqCs8jqrdhnKuw7T UpRzdh1jJf8CXlqp4YUQ1B4+t9XHmqSl0DBxepElOZWnyFeVh8ATrFM2UPoCGQ2U F8jlTNLlCgmJpV3utPxE5BqTbmkZJSgIDxPfnV952BP5BY9vHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJko7VUSCa0SSfOTLkg85kduQpE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvZDdiMGNkY2UtY2E0My0z NGQyLThmNzctMDkxZTFmM2UxNzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7tN9DQtv/vAvBOB2W4k19sokI8HGBPChX8amqjj/rOxt948JcoEupC 5aMMegt8Q7RvSngZuiVZduTNZ1Jkfznc948nxtRfQDNM3AhpNmp16Jd8ms4aWx/G daBVCGKsBveM5LgLiRO/VXbRzVwA2TAozu0aINpxPPdMmhl7LiuF8I6y3L801Cs8 Ga3Z3lIHSc9ItjuKFSNgPhAInSe3xTJwIXvx4ExQ0YXxwIzcqCanG/OPfpI9zj/G bN0p5L5ye09/pR+CznUIlZGxPdUOrB9EUSyeTjH1hfAxjxXwKSbRPef0M2p1y6Sj +1L8tl9TNh/nt0vCkEogiqVkyUrvi4w= -----END CERTIFICATE-----Generated at Sun Aug 10 03:43:56 2025 by rpki-client