$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa File: 3fa4a444-d4ce-3503-b060-20450537e4a1.roa (raw, json) Hash identifier: D97bGfiUdMZF4oXX6a+ZFQODwnOu9rOvsWPPRx/HmN8= Subject key identifier: 8C:F8:98:93:27:C7:18:5A:33:3D:40:38:D8:3A:0F:6F:E1:78:00:A2 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B76F2596A1AFB4EDF053CC140 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 397630 IP address blocks: 192.171.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:59:6a:1a:fb:4e:df:05:3c:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2a774a3f-2dab-4b62-b69a-da01410c379b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:ee:24:2b:09:85:b4:aa:f3:6f:07:e7:47: c1:37:cf:e5:6c:14:a4:f4:9a:e9:31:47:0a:7e:ec: 65:5b:01:0c:3b:46:9d:c3:1e:42:86:9b:86:5a:7a: aa:2a:a5:23:60:fb:3c:9a:0e:78:6b:f3:51:6e:4f: a9:82:1e:85:19:ea:65:3e:05:70:9f:c5:8b:0c:f1: 2b:f2:aa:5f:f7:f9:d3:05:4a:db:ad:92:be:1f:7c: 70:d5:d5:55:e3:6a:a2:08:4f:b2:a8:e9:8f:24:9c: d7:1d:73:ec:ea:01:58:dd:58:7f:75:d2:f7:f8:10: e6:6b:54:70:81:55:0a:5e:fa:df:97:3d:c7:80:3b: 92:03:53:40:4b:3f:d0:33:2c:bf:c7:96:ac:36:a3: b7:27:44:dd:9f:e5:12:46:60:a1:c7:90:b2:f8:9d: 00:26:b7:9f:1c:bc:55:95:77:43:5d:5f:50:10:f7: 04:96:83:c5:e0:74:c0:2d:3b:a7:89:d2:1f:d8:b1: b7:17:17:1f:53:1b:d1:8e:9c:fe:18:6a:5c:d4:da: f7:ec:62:ef:ad:81:1d:9f:bb:5b:0b:e6:2b:f1:73: ef:cd:bf:cf:34:a8:12:3a:d1:14:ff:dd:1e:e1:6d: a9:c2:45:24:4c:45:c3:08:f4:15:91:d4:9d:e6:0a: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F8:98:93:27:C7:18:5A:33:3D:40:38:D8:3A:0F:6F:E1:78:00:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:a0:84:96:5e:01:2e:2b:88:bc:27:8e:06:fa:69:df:6a:1d: 27:a3:5b:35:67:bc:a1:73:80:27:4d:d5:54:e6:44:7f:9e:ac: 0a:69:58:27:5f:af:f7:ea:68:a6:ea:11:06:9f:7e:ad:ba:9b: 08:62:c3:3c:43:06:18:e3:58:af:94:f0:b9:dd:fb:17:c2:7a: d5:11:1a:f5:9b:81:9d:ca:79:be:a2:46:dd:c8:6c:f0:bc:0a: 89:18:09:04:38:26:1f:3e:c4:e2:c6:64:66:b9:73:cb:3e:3b: 15:2c:31:71:71:54:45:a3:fc:ba:d5:78:50:89:95:f4:f8:20: 64:a8:f2:9c:c5:66:b2:47:eb:54:ce:b6:9c:d4:1e:6d:ac:7b: de:a2:1e:da:ae:91:b3:82:d6:d3:6d:d4:5f:a8:16:6a:23:eb: 16:3c:50:b1:9c:79:df:08:42:b3:b0:6f:47:94:86:8b:c9:3a: e5:6e:dd:58:e8:d9:7f:1e:c3:21:52:2d:da:d3:86:79:dd:f0: a7:c8:1b:e3:db:09:0c:59:12:82:8d:5e:79:2c:f9:41:0a:91: e3:6d:b0:d9:08:d7:5d:b2:13:f1:dd:b2:9b:0d:79:8f:a5:fc: b7:99:58:b8:bf:6b:04:6d:15:9c:a1:fd:5c:28:60:98:0b:3b: 8c:e6:a6:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28llqGvtO3wU8wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmE3NzRhM2YtMmRhYi00YjYyLWI2OWEtZGEwMTQxMGMzNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRPuJCsJhbSq828H50fBN8/lbBSk9JrpMUcK fuxlWwEMO0adwx5ChpuGWnqqKqUjYPs8mg54a/NRbk+pgh6FGeplPgVwn8WLDPEr 8qpf9/nTBUrbrZK+H3xw1dVV42qiCE+yqOmPJJzXHXPs6gFY3Vh/ddL3+BDma1Rw gVUKXvrflz3HgDuSA1NASz/QMyy/x5asNqO3J0Tdn+USRmChx5Cy+J0AJrefHLxV lXdDXV9QEPcEloPF4HTALTunidIf2LG3FxcfUxvRjpz+GGpc1Nr37GLvrYEdn7tb C+Yr8XPvzb/PNKgSOtEU/90e4W2pwkUkTEXDCPQVkdSd5gp2kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz4mJMnxxhaMz1AONg6D2/heACiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2ZhNGE0NDQtZDRjZS0z NTAzLWIwNjAtMjA0NTA1MzdlNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6ghJZeAS4riLwnjgb6ad9qHSejWzVnvKFzgCdN1VTmRH+erAppWCdf r/fqaKbqEQaffq26mwhiwzxDBhjjWK+U8Lnd+xfCetURGvWbgZ3Keb6iRt3IbPC8 CokYCQQ4Jh8+xOLGZGa5c8s+OxUsMXFxVEWj/LrVeFCJlfT4IGSo8pzFZrJH61TO tpzUHm2se96iHtqukbOC1tNt1F+oFmoj6xY8ULGced8IQrOwb0eUhovJOuVu3Vjo 2X8ewyFSLdrThnnd8KfIG+PbCQxZEoKNXnks+UEKkeNtsNkI112yE/HdspsNeY+l /LeZWLi/awRtFZyh/VwoYJgLO4zmpug= -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:39 2025 by rpki-client