$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa File: 3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa (raw, json) Hash identifier: vIy3JpWtbSPQgmMPZm4TLhDm39y2xZBc8us6niF6R/g= Subject key identifier: C5:49:D1:D2:92:7B:C8:D5:50:9D:81:BE:7C:FC:17:9A:FE:1F:3D:FE Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B7C87629C2197C151A04A5900 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 33659 IP address blocks: 158.62.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:62:9c:21:97:c1:51:a0:4a:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=df0dc8d2-56a5-4ece-a653-02b7fc08ecaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:1a:be:b4:9c:ee:8a:a8:ed:65:32:35:86: a3:63:2b:a3:c5:be:68:b5:ad:15:2c:07:47:00:50: 97:76:b0:4d:24:9c:6d:22:2f:a8:a7:0f:92:d5:76: c1:df:13:6e:a2:a8:4a:19:e3:20:e6:81:5a:9d:f0: 4f:16:00:d0:64:72:9c:d9:a5:a1:b9:6a:38:e7:14: 81:f3:d2:19:bf:ac:6d:1b:a0:c3:3b:ef:7f:5f:6e: 1e:23:90:93:5f:b4:71:09:ea:b3:e1:79:5e:22:b1: 8c:3f:6b:5d:7b:70:36:45:12:d1:2f:c3:fa:ac:9c: c5:9b:7d:05:ce:a9:94:9f:dd:ea:3c:f8:9d:ff:7f: 86:17:a2:1c:1e:3b:0f:79:40:4e:9a:e6:97:f2:e3: d0:7d:0e:a2:16:da:18:d3:67:8c:48:14:e8:f9:dc: 63:a7:0a:03:dd:e7:be:a7:49:1e:4c:da:7e:7c:80: 07:73:83:80:74:92:cd:f2:e1:c3:67:13:3f:21:4a: 8e:47:db:bc:e6:da:70:5e:70:a6:c3:19:7c:15:ed: 4f:50:95:63:f1:8f:d9:57:c9:2f:6f:aa:de:87:e8: 96:16:ec:06:da:e4:26:10:be:60:2c:bb:73:37:b6: 09:a2:1a:f2:25:77:e6:d3:ea:29:02:56:a0:1e:21: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:49:D1:D2:92:7B:C8:D5:50:9D:81:BE:7C:FC:17:9A:FE:1F:3D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3c9bec37-d3a4-3f0b-8c85-4fcec4c2e71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e0:54:30:71:10:b3:e5:d5:88:0c:56:f0:18:fe:40:13:19: 8c:b5:c8:bb:19:4c:3d:4f:dd:7e:16:06:b7:81:15:a9:4d:cd: ff:b0:ad:1e:b7:fb:4b:74:97:31:69:ad:e7:0b:75:81:35:f7: 4a:8c:1c:d3:34:e8:8f:a8:7c:77:c7:22:f6:6a:bf:b3:11:d0: 24:66:7c:83:cd:50:05:c6:73:8a:73:eb:48:cb:84:c2:8b:8d: 11:5b:7a:46:a8:cf:0e:89:1d:c8:f6:66:b4:b7:3b:e0:40:5b: 4b:f0:28:4f:52:d3:aa:e4:39:14:6b:33:6c:23:33:0f:0b:05: 2a:82:1c:b3:6d:2d:07:4a:d8:f1:43:67:13:7e:2b:1e:be:57: 35:fc:f1:09:1f:79:78:72:b3:bb:e0:c1:98:7f:b5:1a:65:6e: fd:a7:10:b5:7a:02:8c:df:5d:fc:18:dc:bf:1d:c2:fe:dc:da: 25:3c:ca:a5:89:2d:46:cb:cd:ac:6d:9a:bb:b9:2a:e0:60:4f: fa:56:68:ce:8e:d9:07:4f:55:61:18:5d:6b:7f:9b:d0:f6:c8: 3d:56:dd:03:6b:f2:bb:0f:03:99:d2:f9:89:df:24:c4:98:f7: 56:4b:f2:ad:03:af:51:12:57:0a:83:40:f7:b7:67:52:55:50: fe:22:55:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2KcIZfBUaBKWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZGYwZGM4ZDItNTZhNS00ZWNlLWE2NTMtMDJiN2ZjMDhlY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit0avrSc7oqo7WUyNYajYyujxb5ota0VLAdH AFCXdrBNJJxtIi+opw+S1XbB3xNuoqhKGeMg5oFanfBPFgDQZHKc2aWhuWo45xSB 89IZv6xtG6DDO+9/X24eI5CTX7RxCeqz4XleIrGMP2tde3A2RRLRL8P6rJzFm30F zqmUn93qPPid/3+GF6IcHjsPeUBOmuaX8uPQfQ6iFtoY02eMSBTo+dxjpwoD3ee+ p0keTNp+fIAHc4OAdJLN8uHDZxM/IUqOR9u85tpwXnCmwxl8Fe1PUJVj8Y/ZV8kv b6reh+iWFuwG2uQmEL5gLLtzN7YJohryJXfm0+opAlagHiGm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVJ0dKSe8jVUJ2Bvnz8F5r+Hz3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2M5YmVjMzctZDNhNC0z ZjBiLThjODUtNGZjZWM0YzJlNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzgVDBxELPl1YgMVvAY/kATGYy1yLsZTD1P3X4WBreBFalNzf+wrR63 +0t0lzFprecLdYE190qMHNM06I+ofHfHIvZqv7MR0CRmfIPNUAXGc4pz60jLhMKL jRFbekaozw6JHcj2ZrS3O+BAW0vwKE9S06rkORRrM2wjMw8LBSqCHLNtLQdK2PFD ZxN+Kx6+VzX88QkfeXhys7vgwZh/tRplbv2nELV6AozfXfwY3L8dwv7c2iU8yqWJ LUbLzaxtmru5KuBgT/pWaM6O2QdPVWEYXWt/m9D2yD1W3QNr8rsPA5nS+YnfJMSY 91ZL8q0Dr1ESVwqDQPe3Z1JVUP4iVVg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:11:14 2025 by rpki-client