$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/28aac9b9-49dd-3c04-96fd-c28b2a34b00d.roa File: 28aac9b9-49dd-3c04-96fd-c28b2a34b00d.roa (raw, json) Hash identifier: XhJAIyDu18YO/c/8lSFIz6EtAvBmUmsct2zmqI59KJw= Subject key identifier: 79:64:FC:2D:E9:9D:59:FA:5E:78:F5:E1:BF:0A:67:D5:C7:04:FC:F2 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B583C8D8CD24604E49E441960 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/28aac9b9-49dd-3c04-96fd-c28b2a34b00d.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 192.46.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8d:8c:d2:46:04:e4:9e:44:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=626793ac-f502-44b1-a14d-110274d05dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:be:c1:a6:c4:01:61:da:16:2d:bf:30:de: de:35:54:f9:81:27:87:b5:7a:98:d5:1d:24:54:e3: c9:da:99:f7:d5:d4:52:62:33:75:d8:9c:53:bd:40: 14:47:98:d2:dd:ec:70:f8:f8:99:07:91:ef:c9:0a: 5e:f3:55:ec:01:bd:ec:a0:15:eb:f2:b6:1f:dc:9d: d3:b4:d5:bf:b1:97:e4:40:5b:15:07:2c:48:4d:e4: 93:dd:2e:fb:e1:3e:84:8f:74:19:d2:ad:0f:3c:b5: db:03:d6:6a:26:1c:93:1f:7b:88:e9:5c:c9:7b:a6: a2:a5:11:4d:04:28:79:95:e6:3a:da:5a:90:5b:d2: 64:23:b7:d3:b9:54:b0:76:10:b7:a7:db:82:79:d6: 4c:e7:92:ac:8e:3e:18:32:05:1d:17:69:66:5c:d1: 05:fa:45:20:2b:7e:0c:7f:82:d1:83:09:df:90:55: e2:71:b8:f9:cc:8e:ef:c7:00:98:88:3f:74:00:cb: 85:dd:3c:7f:f2:2f:80:c8:8b:27:df:bf:42:b1:c8: de:c8:cb:59:25:0a:7b:f6:71:14:51:90:30:5d:b0: d4:e0:22:de:db:cd:f7:9d:43:c9:25:65:74:24:c4: 74:bd:88:ba:71:03:6b:ad:a8:e0:85:33:1b:7d:b8: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:64:FC:2D:E9:9D:59:FA:5E:78:F5:E1:BF:0A:67:D5:C7:04:FC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/28aac9b9-49dd-3c04-96fd-c28b2a34b00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:04:2b:9d:d7:b5:be:08:fd:80:be:74:aa:d3:01:75:33:86: 8a:17:c4:a5:94:2c:c1:3c:4e:5b:84:b8:7c:56:2a:50:09:eb: 27:75:0a:46:ba:36:95:92:bf:37:ea:3a:c6:bf:e0:64:5e:c0: 13:08:05:62:82:da:ee:59:d5:ba:67:e7:d2:90:02:31:5e:e9: 65:5d:fd:71:7f:7e:82:cd:9c:8b:42:c7:a9:b3:62:e6:72:e7: ed:53:b8:98:69:fb:24:3b:ad:7a:4a:7f:68:2b:35:5a:6e:40: 1a:28:f1:d9:36:77:d1:8d:74:a8:b2:96:25:d1:0d:de:1e:b7: a1:c8:c5:a5:e0:46:aa:94:d8:cc:32:29:5b:40:e5:3b:08:54: 4e:fc:6f:78:a1:89:28:53:5b:8e:64:c9:77:94:56:1f:c4:f4: 60:40:ac:2b:04:ce:78:ff:dd:d5:a0:bd:c0:63:86:8d:19:c8: 47:cc:9c:fd:da:2b:57:17:2d:5d:95:cf:e1:8a:45:35:65:30: b2:e1:39:8d:2b:43:8b:59:b4:92:31:d0:e2:67:02:e4:9f:ad: ae:39:e4:92:14:2a:b8:60:10:06:bf:f0:3c:aa:e1:26:91:1e: be:94:63:95:51:d6:5c:70:f5:1b:df:e3:4b:3d:5f:6d:af:a6: 3e:bd:13:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI2M0kYE5J5EGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjI2NzkzYWMtZjUwMi00NGIxLWExNGQtMTEwMjc0ZDA1ZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm92+wabEAWHaFi2/MN7eNVT5gSeHtXqY1R0k VOPJ2pn31dRSYjN12JxTvUAUR5jS3exw+PiZB5HvyQpe81XsAb3soBXr8rYf3J3T tNW/sZfkQFsVByxITeST3S774T6Ej3QZ0q0PPLXbA9ZqJhyTH3uI6VzJe6aipRFN BCh5leY62lqQW9JkI7fTuVSwdhC3p9uCedZM55Ksjj4YMgUdF2lmXNEF+kUgK34M f4LRgwnfkFXicbj5zI7vxwCYiD90AMuF3Tx/8i+AyIsn379CscjeyMtZJQp79nEU UZAwXbDU4CLe2833nUPJJWV0JMR0vYi6cQNrrajghTMbfbj2vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlk/C3pnVn6Xnj14b8KZ9XHBPzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjhhYWM5YjktNDlkZC0z YzA0LTk2ZmQtYzI4YjJhMzRiMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsEK53Xtb4I/YC+dKrTAXUzhooXxKWULME8TluEuHxWKlAJ6yd1Cka6 NpWSvzfqOsa/4GRewBMIBWKC2u5Z1bpn59KQAjFe6WVd/XF/foLNnItCx6mzYuZy 5+1TuJhp+yQ7rXpKf2grNVpuQBoo8dk2d9GNdKiyliXRDd4et6HIxaXgRqqU2Mwy KVtA5TsIVE78b3ihiShTW45kyXeUVh/E9GBArCsEznj/3dWgvcBjho0ZyEfMnP3a K1cXLV2Vz+GKRTVlMLLhOY0rQ4tZtJIx0OJnAuSfra455JIUKrhgEAa/8Dyq4SaR Hr6UY5VR1lxw9Rvf40s9X22vpj69E9A= -----END CERTIFICATE-----Generated at Mon Oct 20 02:23:03 2025 by rpki-client