$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/136f4e7e-e89e-3387-8860-1a99849486ca.roa File: 136f4e7e-e89e-3387-8860-1a99849486ca.roa (raw, json) Hash identifier: R41skfI5Dffzyz6m2K6A4gHc8q1WA47LZ3Kf1YaL0uI= Subject key identifier: C0:FF:F8:35:CE:43:52:89:99:05:39:2C:04:C7:46:FA:B4:87:D4:3E Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6E91F9F8656F98BEA2775D00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/136f4e7e-e89e-3387-8860-1a99849486ca.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 397630 IP address blocks: 172.96.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f9:f8:65:6f:98:be:a2:77:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=2853161d-cdc4-47ae-9ec7-4a27df2573d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:36:6c:93:df:2c:ab:e4:7e:8d:f0:03:62: 10:60:fc:3d:84:3c:3f:53:51:f0:09:11:ac:b3:da: 3e:cf:1b:86:14:e8:a9:77:dc:59:54:c7:69:e8:ee: f2:d9:90:42:32:aa:73:16:7b:29:7e:85:8e:68:b1: ec:c4:ca:b8:9e:de:ff:ed:e5:dc:51:0e:98:9f:5c: b3:92:50:1c:db:07:42:70:a9:53:17:ae:6c:60:c4: 25:90:79:0b:b4:ee:0d:72:da:56:b5:37:8f:13:b4: 41:7f:26:e9:3b:22:ef:60:ba:bf:bf:bc:eb:ff:68: 9a:f8:8c:06:25:e5:16:61:f5:3e:59:a4:ba:1e:1d: 83:c2:b6:8f:1b:b8:f7:45:09:69:25:10:39:cc:22: 6f:60:5e:45:7c:a3:63:54:e1:50:1f:6b:17:cd:71: 0b:82:b7:e1:fc:99:4a:00:cf:95:32:68:54:65:b7: a9:7d:06:ca:0a:ec:ef:da:de:03:a6:03:59:23:2c: a2:c4:91:59:35:79:aa:a5:36:c1:42:1b:b7:b4:08: 80:cf:71:91:85:39:a3:df:40:4f:1b:08:4c:b1:72: f8:62:fe:e1:52:b6:1f:64:53:59:16:0d:61:6c:d2: e8:d7:02:13:d8:db:5b:51:ae:21:a5:c6:1d:80:fa: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:F8:35:CE:43:52:89:99:05:39:2C:04:C7:46:FA:B4:87:D4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/136f4e7e-e89e-3387-8860-1a99849486ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e6:2c:4b:0b:63:d1:9f:b7:3c:f9:f5:02:ae:a2:23:90:01: f8:cf:38:0f:d3:57:4e:37:46:a0:8f:de:4d:17:d0:5a:bd:5d: b9:59:cc:69:92:0b:c0:68:5d:03:5b:83:33:dc:78:87:d5:07: fe:51:a4:a3:27:ce:58:86:21:46:89:ac:fb:a8:a7:37:ae:c4: 52:99:c6:38:40:ae:9d:22:50:11:3d:87:11:42:e9:36:29:8c: c0:80:32:63:6b:b4:dc:ef:a4:0f:36:18:93:17:cb:67:fb:a1: aa:0f:d0:f1:25:ca:4e:c2:8b:71:8a:fd:ed:fa:72:ef:5a:d7: 10:a1:1f:0d:31:b8:fa:a0:f1:c1:4b:8b:8b:df:fb:59:da:4e: 0a:fa:9e:34:71:89:e0:20:d7:ab:36:07:e6:fd:c3:72:30:63: f1:d8:30:72:7f:82:f6:90:be:8d:77:f7:ae:11:ce:74:e7:7f: 0e:33:74:34:01:82:da:35:63:ae:4b:74:d5:f7:78:2f:c4:65: 6a:79:18:85:7b:35:9c:86:e1:1c:ae:66:42:b0:c2:10:69:fb: 2c:ee:77:29:6f:83:e3:76:e1:fc:b6:16:2d:dd:03:01:a1:94: 4c:49:2e:cf:a1:46:6e:a9:be:f2:95:76:6d:fb:07:62:08:46: 22:74:29:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfn4ZW+YvqJ3XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk Mjg1MzE2MWQtY2RjNC00N2FlLTllYzctNGEyN2RmMjU3M2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltQ2bJPfLKvkfo3wA2IQYPw9hDw/U1HwCRGs s9o+zxuGFOipd9xZVMdp6O7y2ZBCMqpzFnspfoWOaLHsxMq4nt7/7eXcUQ6Yn1yz klAc2wdCcKlTF65sYMQlkHkLtO4NctpWtTePE7RBfybpOyLvYLq/v7zr/2ia+IwG JeUWYfU+WaS6Hh2DwraPG7j3RQlpJRA5zCJvYF5FfKNjVOFQH2sXzXELgrfh/JlK AM+VMmhUZbepfQbKCuzv2t4DpgNZIyyixJFZNXmqpTbBQhu3tAiAz3GRhTmj30BP GwhMsXL4Yv7hUrYfZFNZFg1hbNLo1wIT2NtbUa4hpcYdgPoZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD/+DXOQ1KJmQU5LATHRvq0h9Q+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTM2ZjRlN2UtZTg5ZS0z Mzg3LTg4NjAtMWE5OTg0OTQ4NmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7mLEsLY9Gftzz59QKuoiOQAfjPOA/TV043RqCP3k0X0Fq9XblZzGmS C8BoXQNbgzPceIfVB/5RpKMnzliGIUaJrPuopzeuxFKZxjhArp0iUBE9hxFC6TYp jMCAMmNrtNzvpA82GJMXy2f7oaoP0PElyk7Ci3GK/e36cu9a1xChHw0xuPqg8cFL i4vf+1naTgr6njRxieAg16s2B+b9w3IwY/HYMHJ/gvaQvo13964RznTnfw4zdDQB gto1Y65LdNX3eC/EZWp5GIV7NZyG4RyuZkKwwhBp+yzudylvg+N24fy2Fi3dAwGh lExJLs+hRm6pvvKVdm37B2IIRiJ0KSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:47 2025 by rpki-client