$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/470b8afa-1fdd-3de0-b421-2d4ee15e2f11.roa File: 470b8afa-1fdd-3de0-b421-2d4ee15e2f11.roa (raw, json) Hash identifier: wQuzkAtIuW0v8YXofTxoUT54EFP42Ct/juxDMwxQm60= Subject key identifier: 2B:8B:F3:C2:8B:A3:E3:3C:5E:08:63:6F:52:FE:7D:E7:03:79:5D:A3 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A4A3A3D8BE20829E3D6961540 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/470b8afa-1fdd-3de0-b421-2d4ee15e2f11.roa Signing time: Mon 23 Jun 2025 19:47:56 +0000 ROA not before: Mon 23 Jun 2025 19:47:56 +0000 ROA not after: Sun 21 Sep 2025 19:47:56 +0000 asID: 20001 IP address blocks: 67.216.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:3a:3d:8b:e2:08:29:e3:d6:96:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 19:47:56 2025 GMT Not After : Sep 21 19:47:56 2025 GMT Subject: CN=c75fcc60-b6db-45b0-8407-b0b7b7131620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:2d:4b:98:fa:83:b5:5e:1f:87:61:dc:9a: eb:8e:51:f0:bf:77:65:1a:69:11:4a:f8:4c:24:bb: e8:7d:f5:83:b2:6c:d6:fd:1a:e5:c9:df:a2:6b:b7: b0:cb:e7:91:45:dd:6e:e1:f7:6f:d2:0d:c9:56:83: 7f:49:68:dc:a7:57:a6:0e:4a:27:50:f8:b9:72:ff: be:b2:0a:b6:af:7a:71:25:fe:22:64:59:6b:12:5b: 8d:3b:e6:7d:53:27:10:00:2b:21:5e:4e:5d:35:33: b7:da:f0:4c:33:45:76:55:fd:0f:5a:8f:91:a5:3d: f1:c9:5b:6f:04:8e:b8:e0:a4:3a:6b:41:dd:ec:d0: 93:4e:9f:f4:33:68:fe:2f:fb:74:09:e4:da:19:50: 45:47:52:f0:40:6d:8b:51:7a:cb:62:76:6e:91:86: 37:bc:d8:a4:ca:23:80:76:80:9d:c3:cd:ec:d2:37: 73:13:2e:f8:c1:01:fc:5a:2d:e3:5d:d9:d6:87:72: 7a:95:e4:1d:8f:6e:7a:1e:a7:29:67:dc:af:07:96: ca:34:4a:b6:68:5b:bc:f2:d0:c9:66:51:4f:45:32: be:04:d1:dc:36:13:81:2a:55:06:e2:07:b8:f9:df: 36:ab:af:41:37:54:d0:f4:c4:87:51:82:43:c5:59: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:F3:C2:8B:A3:E3:3C:5E:08:63:6F:52:FE:7D:E7:03:79:5D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/470b8afa-1fdd-3de0-b421-2d4ee15e2f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 67.216.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:0b:45:1f:4c:20:80:32:2f:fa:a0:a0:8a:df:49:f3:97:13: d5:d0:d6:1c:0d:28:83:62:2e:00:7a:f9:2c:51:48:d8:a8:7d: a4:2b:82:f2:4c:ee:c3:c6:6f:ca:11:21:b1:9a:75:e0:21:22: bb:2b:8d:d1:0e:c5:93:27:d4:1c:e4:13:65:d4:68:11:73:26: db:4d:ac:c9:e5:83:11:90:e0:bb:0e:5a:cb:ca:cc:f4:dd:87: 35:4c:6a:56:27:e4:b7:84:54:00:74:e2:1b:75:54:57:b3:28: c9:e5:80:dd:72:b6:18:0a:69:d7:ed:db:dd:b1:cf:97:4a:cd: 2f:02:a3:32:8c:37:66:03:ca:9c:5d:44:13:8d:1f:c8:37:3e: 0c:35:cc:ed:b8:63:87:83:6d:13:10:da:b7:24:5d:64:4e:d9: ff:4a:a9:9e:5e:75:db:23:22:2a:c9:0c:91:72:37:e6:a3:7f: 06:3d:91:5b:0d:c1:9c:17:a6:d5:b9:f1:17:44:8d:99:84:7d: 78:50:d2:3a:04:61:5a:66:18:f8:de:5d:82:72:b9:2f:6b:32: fd:5b:55:d6:04:56:00:ea:3a:c4:51:2a:90:98:26:29:08:55: 9e:66:d7:e4:c3:70:96:8a:75:c5:ab:9b:a0:e6:14:f0:d5:ec: e3:75:c2:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKOj2L4ggp49aWFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzE5NDc1NloXDTI1MDkyMTE5NDc1NlowLzEtMCsGA1UEAxMk Yzc1ZmNjNjAtYjZkYi00NWIwLTg0MDctYjBiN2I3MTMxNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpQtS5j6g7VeH4dh3JrrjlHwv3dlGmkRSvhM JLvoffWDsmzW/Rrlyd+ia7ewy+eRRd1u4fdv0g3JVoN/SWjcp1emDkonUPi5cv++ sgq2r3pxJf4iZFlrEluNO+Z9UycQACshXk5dNTO32vBMM0V2Vf0PWo+RpT3xyVtv BI644KQ6a0Hd7NCTTp/0M2j+L/t0CeTaGVBFR1LwQG2LUXrLYnZukYY3vNikyiOA doCdw83s0jdzEy74wQH8Wi3jXdnWh3J6leQdj256HqcpZ9yvB5bKNEq2aFu88tDJ ZlFPRTK+BNHcNhOBKlUG4ge4+d82q69BN1TQ9MSHUYJDxVk7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuL88KLo+M8Xghjb1L+fecDeV2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDcwYjhhZmEtMWZkZC0z ZGUwLWI0MjEtMmQ0ZWUxNWUyZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9jsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsLRR9MIIAyL/qgoIrfSfOXE9XQ1hwNKINiLgB6+SxRSNiofaQrgvJM 7sPGb8oRIbGadeAhIrsrjdEOxZMn1BzkE2XUaBFzJttNrMnlgxGQ4LsOWsvKzPTd hzVMalYn5LeEVAB04ht1VFezKMnlgN1ythgKadft292xz5dKzS8CozKMN2YDypxd RBONH8g3Pgw1zO24Y4eDbRMQ2rckXWRO2f9KqZ5eddsjIirJDJFyN+ajfwY9kVsN wZwXptW58RdEjZmEfXhQ0joEYVpmGPjeXYJyuS9rMv1bVdYEVgDqOsRRKpCYJikI VZ5m1+TDcJaKdcWrm6DmFPDV7ON1wjw= -----END CERTIFICATE-----Generated at Tue Jul 1 20:31:13 2025 by rpki-client