$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa File: 5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa (raw, json) Hash identifier: kVTsQnlFcaqyAl70CCoCbj5eWMnyQWfdbo/COxItu9s= Subject key identifier: D3:34:41:41:18:32:2A:FD:36:E2:12:EB:F2:F9:0E:D9:64:18:28:8F Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B2A2C5E56673B0C01B9252190 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 208.89.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5e:56:67:3b:0c:01:b9:25:21:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=29cc2a3c-fe0c-4297-a198-04ac79500ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:c7:17:ba:9f:74:3f:e7:6a:a5:b3:af:e3: b0:6e:27:29:1c:d2:54:d7:4b:92:a4:e3:fb:9c:1e: bd:49:5b:d3:36:28:2b:6c:d4:92:1f:44:ac:a2:4d: 7f:00:f2:a5:0e:bd:2c:f8:c3:ad:00:fc:16:34:36: e3:7b:1b:6f:5c:48:d6:06:ef:c0:f4:b0:30:a3:ee: bf:8c:cf:b6:ed:8f:a8:36:f5:50:d3:d2:6e:ce:11: 51:af:77:1f:a4:2e:80:2e:66:09:c6:2e:87:5f:3e: 7a:7c:9d:62:09:51:78:7e:a3:6b:a2:8c:8f:e7:2f: a7:9f:4f:e4:a3:6b:80:54:d8:de:13:46:6f:c1:ce: ec:cc:3a:07:cc:cd:db:ae:71:b5:3e:fa:be:a5:82: 0d:9b:a5:91:91:79:a6:6f:d0:bf:ae:92:44:a0:a8: cd:99:42:f5:6e:e7:f9:c5:7b:8d:5f:b1:7b:ab:8d: 17:3d:6a:f9:2f:ea:95:5a:21:c0:76:4c:19:f3:73: 95:dd:41:9e:c5:77:68:b5:19:03:ad:21:06:f1:fa: cf:92:5b:9c:5c:9b:8f:f4:22:58:b2:eb:31:11:38: 76:a2:ac:6e:9f:66:f4:9e:96:d0:41:d2:31:d9:c3: 9d:6b:c6:6f:2b:98:dd:90:03:dc:fc:d1:44:ce:7d: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:34:41:41:18:32:2A:FD:36:E2:12:EB:F2:F9:0E:D9:64:18:28:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:f6:72:28:41:51:9c:94:df:72:1a:9c:bb:7c:87:fd:56:8e: 41:4d:0f:e4:06:5f:4d:6f:a5:79:36:9f:b4:93:69:17:5b:d0: e4:a9:4e:07:cb:9f:c0:9f:74:70:35:d3:f6:01:8a:43:ec:33: ef:4f:09:0c:47:67:97:7a:2a:da:a7:e5:63:a9:15:4d:db:ba: be:7b:19:8e:8e:e0:89:65:2c:c7:b2:45:3f:f0:99:c7:10:20: 21:44:ae:bf:04:ce:78:5a:d9:e7:47:c5:33:60:1c:6f:35:ed: 88:34:39:81:fb:29:03:67:a4:ea:1b:d8:a2:73:24:bb:ad:cc: 97:f7:a3:42:b3:93:bc:2a:60:af:b6:79:b6:9e:37:eb:2c:16: 3d:5e:91:c7:34:5e:e8:c5:14:19:04:35:35:ac:d0:56:96:ec: f8:b4:05:5d:ee:dd:a8:8a:32:90:ce:5c:e8:15:8d:c3:93:29: df:be:aa:31:32:2c:9c:c7:49:7f:83:8a:b5:73:b5:1e:b6:00: 5d:f6:80:6c:8c:3a:80:0a:b3:e7:ce:e6:0b:52:a4:d8:91:26: cb:dc:d7:78:b0:56:35:dc:69:61:aa:7c:09:6c:89:be:ca:d6: e9:34:d7:b4:86:0d:b7:ef:50:95:6e:b3:62:41:d4:41:b7:a0: 37:9b:7c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF5WZzsMAbklIZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MjljYzJhM2MtZmUwYy00Mjk3LWExOTgtMDRhYzc5NTAwYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNrHF7qfdD/naqWzr+OwbicpHNJU10uSpOP7 nB69SVvTNigrbNSSH0Ssok1/APKlDr0s+MOtAPwWNDbjextvXEjWBu/A9LAwo+6/ jM+27Y+oNvVQ09JuzhFRr3cfpC6ALmYJxi6HXz56fJ1iCVF4fqNrooyP5y+nn0/k o2uAVNjeE0Zvwc7szDoHzM3brnG1Pvq+pYINm6WRkXmmb9C/rpJEoKjNmUL1buf5 xXuNX7F7q40XPWr5L+qVWiHAdkwZ83OV3UGexXdotRkDrSEG8frPklucXJuP9CJY susxETh2oqxun2b0npbQQdIx2cOda8ZvK5jdkAPc/NFEzn0MWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM0QUEYMir9NuIS6/L5DtlkGCiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWMyYzVjYzQtYjE0My0z Yjk4LTlhYWQtNDNhMjc3MjY4OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOL2cihBUZyU33IanLt8h/1WjkFND+QGX01vpXk2n7STaRdb0OSpTgfL n8CfdHA10/YBikPsM+9PCQxHZ5d6Ktqn5WOpFU3bur57GY6O4IllLMeyRT/wmccQ ICFErr8Eznha2edHxTNgHG817Yg0OYH7KQNnpOob2KJzJLutzJf3o0Kzk7wqYK+2 ebaeN+ssFj1ekcc0XujFFBkENTWs0FaW7Pi0BV3u3aiKMpDOXOgVjcOTKd++qjEy LJzHSX+DirVztR62AF32gGyMOoAKs+fO5gtSpNiRJsvc13iwVjXcaWGqfAlsib7K 1uk017SGDbfvUJVus2JB1EG3oDebfAg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:02 2025 by rpki-client