$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0da90092-e818-3f82-ad07-cdd277638432.roa File: 0da90092-e818-3f82-ad07-cdd277638432.roa (raw, json) Hash identifier: yt5bypyILLd71uZk8lFDfIXnsq/dwpABzG6rS1twnGc= Subject key identifier: AC:CA:60:79:FE:3A:7C:EF:79:4A:9D:A8:D4:D6:0B:3D:18:89:8C:75 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B2A2C5E75DEAA299968F49A40 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0da90092-e818-3f82-ad07-cdd277638432.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 208.89.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5e:75:de:aa:29:99:68:f4:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d18eeff0-4e1b-4c2c-b99b-654b694fe90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:e4:fb:b9:13:1c:e9:da:e6:38:1e:53:9b: bd:a7:1f:f1:c1:61:91:cd:b3:47:b9:d8:c0:22:27: f9:f5:f2:7a:fa:0f:bd:33:7d:6a:b5:f1:52:1a:ef: c0:65:3b:bd:2c:70:66:aa:58:88:f9:36:a8:10:c0: fb:86:76:db:19:d5:6f:56:ca:a8:39:7b:af:ce:cc: 8e:e6:51:50:1d:39:98:ff:b7:b8:2b:74:1c:a8:cf: 02:30:1a:7e:6f:b0:88:4b:50:67:99:90:d5:3b:b1: 2e:ef:fd:36:b3:d8:09:9d:cc:5a:68:0e:ff:6f:42: 6f:0d:2e:64:09:fe:53:16:7c:6c:e5:70:89:1e:07: 15:8d:4c:d2:27:5c:96:cf:9d:aa:40:e7:ca:e1:06: 2c:d4:5d:48:47:f9:f7:3a:13:88:5b:94:17:17:d5: de:7c:c8:e9:86:85:22:ab:1c:33:53:21:57:6b:54: 55:73:25:b5:c0:99:3c:26:cf:47:e8:b6:73:05:ab: 10:71:93:b3:76:45:88:4a:cf:8d:ac:01:ec:5d:3f: 9a:ca:7b:cc:23:fa:27:8b:f9:b1:f2:29:66:39:54: dc:2d:25:67:3f:32:4e:49:18:ea:a0:0b:93:64:bb: 5c:90:0c:fe:61:fc:07:c7:47:61:15:ed:6a:bf:01: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CA:60:79:FE:3A:7C:EF:79:4A:9D:A8:D4:D6:0B:3D:18:89:8C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0da90092-e818-3f82-ad07-cdd277638432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2b:32:0b:1a:8d:12:70:70:1f:79:1d:da:96:f1:ae:8a:65: 56:0e:5a:fd:1d:3f:4b:f1:bf:93:a3:4a:bb:40:e2:f8:6b:e8: 7e:05:d9:6c:52:54:f9:e3:36:a4:71:b5:9c:5d:00:f7:eb:f7: 94:f0:4c:ee:27:5c:f7:d3:60:d0:16:7b:51:c0:6e:24:9d:b5: 3a:34:86:98:17:ad:8d:13:1c:65:5f:39:7d:22:5a:cf:00:02: ab:0e:9c:b8:16:95:cb:8f:38:74:55:a0:fb:e5:f7:18:ea:34: fb:4c:8b:35:7b:98:9c:ee:05:41:a0:fc:12:6c:b3:9b:3a:a4: 9a:b2:26:16:a6:79:32:c7:3e:17:da:50:42:a1:aa:66:b3:8d: ba:bb:15:97:35:e8:96:72:36:1f:39:32:bf:64:8f:c2:6d:77: e5:2e:26:62:73:a1:17:af:d6:65:d6:08:1e:9e:fb:b9:45:2c: 1a:0c:83:20:fe:a6:b8:e7:f0:42:2f:c3:82:e6:81:39:ed:17: 72:78:b2:5e:4b:f2:c7:25:4f:2e:13:ee:30:c5:9e:f3:a3:ce: ac:12:2d:9f:3e:f4:67:51:22:6b:c6:51:54:5c:b3:ef:ff:b1: 7a:e5:d0:7d:3b:cf:ef:a7:96:53:89:b9:1d:1c:c3:cb:11:6a: 8a:89:38:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF513qopmWj0mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDE4ZWVmZjAtNGUxYi00YzJjLWI5OWItNjU0YjY5NGZlOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPk+7kTHOna5jgeU5u9px/xwWGRzbNHudjA Iif59fJ6+g+9M31qtfFSGu/AZTu9LHBmqliI+TaoEMD7hnbbGdVvVsqoOXuvzsyO 5lFQHTmY/7e4K3QcqM8CMBp+b7CIS1BnmZDVO7Eu7/02s9gJncxaaA7/b0JvDS5k Cf5TFnxs5XCJHgcVjUzSJ1yWz52qQOfK4QYs1F1IR/n3OhOIW5QXF9XefMjphoUi qxwzUyFXa1RVcyW1wJk8Js9H6LZzBasQcZOzdkWISs+NrAHsXT+aynvMI/oni/mx 8ilmOVTcLSVnPzJOSRjqoAuTZLtckAz+YfwHx0dhFe1qvwEJLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzKYHn+OnzveUqdqNTWCz0YiYx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGRhOTAwOTItZTgxOC0z ZjgyLWFkMDctY2RkMjc3NjM4NDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcrMgsajRJwcB95HdqW8a6KZVYOWv0dP0vxv5OjSrtA4vhr6H4F2WxS VPnjNqRxtZxdAPfr95TwTO4nXPfTYNAWe1HAbiSdtTo0hpgXrY0THGVfOX0iWs8A AqsOnLgWlcuPOHRVoPvl9xjqNPtMizV7mJzuBUGg/BJss5s6pJqyJhameTLHPhfa UEKhqmazjbq7FZc16JZyNh85Mr9kj8Jtd+UuJmJzoRev1mXWCB6e+7lFLBoMgyD+ prjn8EIvw4LmgTntF3J4sl5L8sclTy4T7jDFnvOjzqwSLZ8+9GdRImvGUVRcs+// sXrl0H07z++nllOJuR0cw8sRaoqJOFQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:01 2025 by rpki-client