$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa File: 40a03e32-5251-3da2-b2fa-a2e789263d7b.roa (raw, json) Hash identifier: e06OrIdWBSqr6HwRcOPxGGD/s0s3sPH6tFNQDmIfUDo= Subject key identifier: EE:19:68:39:FE:64:19:09:2D:51:7E:81:98:3D:21:12:4A:23:7F:CD Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6BC756F646812D9AF5C13800 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 64267 IP address blocks: 152.44.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:56:f6:46:81:2d:9a:f5:c1:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=9f96a91f-f567-4a1c-9a0f-3d4ab08b4bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:33:6a:c2:0b:98:18:07:9a:d1:d6:f1:76: f5:69:90:08:87:a5:f1:9d:38:ce:ee:51:9f:80:71: c3:66:a1:46:f8:90:df:bc:e2:da:9d:57:a1:f9:a4: c0:ec:aa:9c:79:17:5d:a1:1d:91:28:a6:b2:db:0e: 4f:1c:39:3b:b4:7f:08:19:66:df:e5:65:ae:4e:f3: bc:01:79:37:c9:9d:c0:ce:5b:bb:66:d4:1a:4f:c8: 4b:de:c0:e4:75:76:38:e6:fb:a3:70:02:6a:46:d2: 19:1c:d0:4c:02:4a:b5:71:d6:76:ed:d1:69:b4:44: 90:9b:db:b4:f3:9d:21:f2:89:48:c1:89:6c:0d:4c: ef:8c:03:fa:f5:c9:29:8c:f8:70:79:e0:19:47:0d: 06:34:f5:e1:2f:78:13:63:a6:1a:44:49:61:8e:75: 46:0f:f5:d4:d3:68:46:73:3b:cc:ef:92:50:89:6e: 50:04:ce:dc:e6:5c:52:e1:e0:9a:ce:e6:2c:bd:15: ba:9b:5b:22:fb:a1:5c:89:48:78:aa:10:f5:02:a9: 53:8a:1c:fe:2d:79:5f:d7:d7:31:86:59:53:30:60: 71:93:7c:40:31:71:b8:6a:c4:02:07:09:bf:97:fc: 9c:a8:ae:d4:60:9e:21:70:50:07:d8:fa:9a:b7:7d: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:19:68:39:FE:64:19:09:2D:51:7E:81:98:3D:21:12:4A:23:7F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 152.44.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d5:03:61:70:78:b8:6a:6c:3c:58:3b:8a:e2:1c:61:a9:c0: c7:01:55:ec:ce:fc:c0:04:34:39:ea:45:07:bf:cd:8a:3a:e6: f5:ed:ca:1b:51:39:8c:54:89:ab:9f:75:e7:a0:38:c6:f7:4a: f4:c1:2a:1d:8e:ea:8d:02:c4:12:9e:7a:56:b2:aa:79:01:da: ef:6b:af:90:ce:a8:41:e9:14:52:9d:7a:e7:89:5c:44:86:dc: e4:14:60:3c:e6:cb:9a:c7:61:d8:92:0c:f2:40:a1:14:c7:fa: 93:19:9e:be:f5:36:64:c8:09:f3:79:1e:d2:1a:64:a7:b2:e2: b8:de:30:f9:3e:47:29:1e:1c:b4:f3:a5:c8:25:66:d1:80:08: 71:30:ab:ca:46:a2:85:ee:a5:d7:63:2d:ae:3b:8c:e8:48:f1: 4a:42:86:c8:10:8e:04:a3:85:af:de:3e:9a:59:53:41:fc:38: 52:2b:19:aa:7e:da:c8:d2:fa:f2:17:b8:c8:c8:76:c3:31:0b: 97:c6:67:71:59:be:13:f6:9d:ea:3e:c0:69:c6:d9:59:2b:6e: b4:ca:d0:38:fa:68:7d:ff:85:f7:c9:06:68:21:eb:ee:b0:a2: 88:e8:d6:ff:e0:56:24:03:ce:fb:35:4a:ad:fb:23:0f:48:66: 8d:a7:77:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1b2RoEtmvXBOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OWY5NmE5MWYtZjU2Ny00YTFjLTlhMGYtM2Q0YWIwOGI0YmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSwzasILmBgHmtHW8Xb1aZAIh6XxnTjO7lGf gHHDZqFG+JDfvOLanVeh+aTA7KqceRddoR2RKKay2w5PHDk7tH8IGWbf5WWuTvO8 AXk3yZ3Azlu7ZtQaT8hL3sDkdXY45vujcAJqRtIZHNBMAkq1cdZ27dFptESQm9u0 850h8olIwYlsDUzvjAP69ckpjPhweeAZRw0GNPXhL3gTY6YaRElhjnVGD/XU02hG czvM75JQiW5QBM7c5lxS4eCazuYsvRW6m1si+6FciUh4qhD1AqlTihz+LXlf19cx hllTMGBxk3xAMXG4asQCBwm/l/ycqK7UYJ4hcFAH2Pqat30A3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4ZaDn+ZBkJLVF+gZg9IRJKI3/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDBhMDNlMzItNTI1MS0z ZGEyLWIyZmEtYTJlNzg5MjYzZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbVA2FweLhqbDxYO4riHGGpwMcBVezO/MAENDnqRQe/zYo65vXtyhtR OYxUiaufdeegOMb3SvTBKh2O6o0CxBKeelayqnkB2u9rr5DOqEHpFFKdeueJXESG 3OQUYDzmy5rHYdiSDPJAoRTH+pMZnr71NmTICfN5HtIaZKey4rjeMPk+RykeHLTz pcglZtGACHEwq8pGooXupddjLa47jOhI8UpChsgQjgSjha/ePppZU0H8OFIrGap+ 2sjS+vIXuMjIdsMxC5fGZ3FZvhP2neo+wGnG2VkrbrTK0Dj6aH3/hffJBmgh6+6w oojo1v/gViQDzvs1Sq37Iw9IZo2nd1o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:51:15 2025 by rpki-client