$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa File: d3abd280-e5f9-3db9-b782-12d227437886.roa (raw, json) Hash identifier: qWVEcyUg1+ctpmzDKCCYA3BGKzt4ZcJq/U8D4Edpccs= Subject key identifier: 95:1C:68:DE:96:1F:C6:31:EE:F9:9B:2B:F9:93:EF:D8:02:3F:EE:92 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584A8575FDDBC5A9625EA4271900 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 0 IP address blocks: 206.41.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fd:db:c5:a9:62:5e:a4:27:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=de183e71-49a9-48fe-bef1-0b2a72a2dc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cf:31:42:37:bd:c6:c1:0c:d4:06:30:bc:d3: 7c:e6:97:ec:0f:68:f3:01:6e:36:51:b3:ee:b2:14: 65:88:ee:1a:1d:d2:4d:25:da:e2:bd:f9:44:45:b4: 55:c4:40:6b:32:68:3a:02:b4:e2:96:f3:5e:e5:ea: d2:52:13:92:30:9c:a5:49:08:1b:39:19:46:46:51: c6:d9:c6:67:86:5d:96:be:63:37:87:7a:53:c4:33: 42:ec:6f:4c:f5:84:94:49:4e:5b:74:10:e1:3a:f9: 11:3d:1b:eb:41:cb:77:26:9e:51:2c:51:9f:70:5f: f2:64:53:44:60:50:77:5e:6e:1e:31:34:a1:cb:c3: 58:65:62:cb:4e:e8:6a:61:58:7e:84:ef:86:d5:66: 40:64:5e:0c:74:8e:8b:86:96:3a:99:82:8b:cb:0d: a5:ed:7a:93:45:60:d7:23:a6:a3:95:93:10:62:70: 22:97:7a:cb:b1:64:00:1f:1e:aa:c9:5e:1b:0e:19: 05:45:5c:c6:ea:41:68:f2:20:30:cf:7e:49:0c:3c: ea:db:e6:b5:b1:b4:a1:6f:ed:7b:85:f1:98:37:7f: 23:73:4a:bf:90:d0:07:e7:df:76:b2:aa:76:d0:d9: 83:d3:08:04:fb:8d:02:1d:2b:a7:ad:7b:fe:c9:34: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:68:DE:96:1F:C6:31:EE:F9:9B:2B:F9:93:EF:D8:02:3F:EE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv4: 206.41.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b1:2f:85:ba:0b:79:dc:61:5d:72:ba:62:42:99:c3:a7:c7: 62:ff:29:46:6c:90:d5:ee:0a:8e:26:90:01:e7:9b:79:18:c8: 81:e8:24:ea:ea:ba:5e:b9:b4:d1:7b:a8:07:12:c7:21:f0:a7: 03:20:96:b5:26:77:6b:18:12:71:4f:81:11:8e:fa:48:52:f1: 0e:16:6f:24:d7:66:22:33:02:79:24:5e:7f:e1:cd:b3:42:aa: e8:91:4b:94:c0:1f:fa:a5:96:8c:94:2d:79:bf:4f:e8:d1:01: cb:37:9f:29:71:c7:b7:41:59:77:b8:31:12:ef:89:7b:62:a6: 9a:ac:c4:b6:ff:bb:04:12:7e:32:a5:9f:08:78:2b:6a:79:a1: fb:52:13:56:e5:e5:6b:a4:c6:c4:88:4b:f4:76:a4:c1:1f:bb: f0:5d:e4:d1:81:73:e2:53:1e:22:8a:25:a5:80:0e:de:0a:91: 3a:68:b8:7e:58:fc:79:ee:01:64:31:5c:c4:07:e7:00:20:c7: 9f:0d:93:9b:0d:46:b5:e3:31:e7:50:21:28:d3:44:c4:33:09: 4d:67:76:1f:30:85:54:46:1d:a3:39:65:42:45:2d:cb:c1:a0: f4:da:14:30:f0:74:b7:cd:49:3f:a4:f5:36:9e:3e:84:13:bf: 79:f4:cf:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdf3bxaliXqQnGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGUxODNlNzEtNDlhOS00OGZlLWJlZjEtMGIyYTcyYTJkYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM8xQje9xsEM1AYwvNN85pfsD2jzAW42UbPu shRliO4aHdJNJdrivflERbRVxEBrMmg6ArTilvNe5erSUhOSMJylSQgbORlGRlHG 2cZnhl2WvmM3h3pTxDNC7G9M9YSUSU5bdBDhOvkRPRvrQct3Jp5RLFGfcF/yZFNE YFB3Xm4eMTShy8NYZWLLTuhqYVh+hO+G1WZAZF4MdI6LhpY6mYKLyw2l7XqTRWDX I6ajlZMQYnAil3rLsWQAHx6qyV4bDhkFRVzG6kFo8iAwz35JDDzq2+a1sbShb+17 hfGYN38jc0q/kNAH5992sqp20NmD0wgE+40CHSunrXv+yTRKuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUcaN6WH8Yx7vmbK/mT79gCP+6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZDNhYmQyODAtZTVmOS0z ZGI5LWI3ODItMTJkMjI3NDM3ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWxL4W6C3ncYV1yumJCmcOnx2L/KUZskNXuCo4mkAHnm3kYyIHoJOrq ul65tNF7qAcSxyHwpwMglrUmd2sYEnFPgRGO+khS8Q4WbyTXZiIzAnkkXn/hzbNC quiRS5TAH/qlloyULXm/T+jRAcs3nylxx7dBWXe4MRLviXtippqsxLb/uwQSfjKl nwh4K2p5oftSE1bl5WukxsSIS/R2pMEfu/Bd5NGBc+JTHiKKJaWADt4KkTpouH5Y /HnuAWQxXMQH5wAgx58Nk5sNRrXjMedQISjTRMQzCU1ndh8whVRGHaM5ZUJFLcvB oPTaFDDwdLfNST+k9TaePoQTv3n0z38= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:06 2025 by rpki-client