$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa File: 5dd6712e-6178-3993-8873-ab9cf5de0d88.roa (raw, json) Hash identifier: Pfp3YdjbiwjfgxXTVS5a0JfOb8e+PHgJQHTHZ606yXA= Subject key identifier: CA:2D:0B:B3:C3:3B:0D:86:62:AF:41:A9:EA:48:C1:1E:CF:B8:03:9A Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B5B0744FDB3F3EB54D41CB680 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 64267 IP address blocks: 199.250.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:44:fd:b3:f3:eb:54:d4:1c:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=866a2f10-4c98-4389-871b-9f8376af200a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:24:48:20:a5:47:c1:aa:35:89:7d:53:9f: 65:d3:91:b0:6c:b6:21:77:bf:31:3d:2e:8a:3b:2f: 47:72:43:aa:00:d3:49:e6:c2:15:76:e7:ca:5a:f1: 27:ee:ca:e1:36:2e:82:ef:0c:c4:44:6c:6e:57:0e: 12:46:7a:e0:ca:01:f1:99:a8:d3:bb:af:56:06:a2: c2:ea:f6:4e:b2:52:a8:23:64:23:10:b7:53:a7:ff: a5:d2:fd:d1:a0:d6:f8:f2:cc:01:91:11:f7:78:0a: 6f:2e:52:5e:b0:22:d9:45:a6:e2:30:2f:ac:ec:5a: 93:6d:68:d4:46:ec:a6:c8:bf:e4:67:d1:16:0b:69: ef:30:11:9a:51:2c:3d:4c:47:c2:99:8d:6b:ac:fc: 43:0c:e4:3e:f3:7e:c1:50:f2:d1:14:1d:1b:aa:2d: 21:ae:19:34:50:be:55:ad:47:b7:f9:b9:ba:40:c9: 0d:8b:d1:a0:fa:58:eb:c1:2e:78:3a:b7:88:e5:01: 02:d4:63:b3:d7:e5:ec:b8:62:3b:53:0b:b9:70:98: 37:ed:b2:78:b9:fa:78:d7:6f:2b:66:e1:62:40:6f: 37:40:ea:ab:f3:2d:de:08:6b:bd:b1:be:d2:51:c5: 3b:b6:fd:a6:b0:65:46:b3:ab:2d:9e:62:15:f9:24: 7a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2D:0B:B3:C3:3B:0D:86:62:AF:41:A9:EA:48:C1:1E:CF:B8:03:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.250.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:52:8e:99:4b:5b:08:ce:ca:94:95:28:f7:12:32:8e:8b:24: 2f:28:ff:05:1a:db:04:f0:a8:cc:93:ff:cc:75:55:3d:14:ca: 27:92:22:28:40:3f:95:25:c0:23:13:5e:8a:3b:33:96:7c:dc: b0:6b:b7:3e:6c:89:3c:ce:96:b4:5c:f8:50:32:a0:53:fd:7e: 01:5d:2f:3f:77:ab:a4:12:9b:3a:57:19:49:e1:6d:3d:bd:c0: cd:2d:35:ef:cc:2a:f6:bd:7b:16:8e:a3:88:af:45:25:7f:e9: e1:28:4e:ea:e8:b3:c2:e5:b9:36:14:09:e9:ad:89:84:38:a2: 14:9e:34:d8:2d:e0:0b:80:73:b1:1f:85:71:06:cf:28:a2:84: 31:a2:e2:10:da:63:d3:7f:de:ba:98:bb:4e:9b:1f:8e:3f:34: f8:f2:48:46:d6:b2:cf:08:1b:d4:f3:39:10:f0:a0:84:8e:80: 83:89:af:d1:bc:2b:ed:af:25:17:2b:f7:a1:68:59:59:9f:52: 5d:3c:59:39:c2:9b:02:61:26:61:df:ce:3c:a4:75:31:b8:ea: 16:c5:13:99:49:d8:75:73:e6:3c:e2:7c:99:b4:ed:3e:7e:ec: 62:3f:d7:88:d2:81:00:0e:07:22:66:8c:46:31:96:06:ef:2b: a0:4b:f7:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0T9s/PrVNQctoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODY2YTJmMTAtNGM5OC00Mzg5LTg3MWItOWY4Mzc2YWYyMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVEkSCClR8GqNYl9U59l05GwbLYhd78xPS6K Oy9HckOqANNJ5sIVdufKWvEn7srhNi6C7wzERGxuVw4SRnrgygHxmajTu69WBqLC 6vZOslKoI2QjELdTp/+l0v3RoNb48swBkRH3eApvLlJesCLZRabiMC+s7FqTbWjU RuymyL/kZ9EWC2nvMBGaUSw9TEfCmY1rrPxDDOQ+837BUPLRFB0bqi0hrhk0UL5V rUe3+bm6QMkNi9Gg+ljrwS54OreI5QEC1GOz1+XsuGI7Uwu5cJg37bJ4ufp4128r ZuFiQG83QOqr8y3eCGu9sb7SUcU7tv2msGVGs6stnmIV+SR62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMotC7PDOw2GYq9BqepIwR7PuAOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWRkNjcxMmUtNjE3OC0z OTkzLTg4NzMtYWI5Y2Y1ZGUwZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlSjplLWwjOypSVKPcSMo6LJC8o/wUa2wTwqMyT/8x1VT0UyieSIihA P5UlwCMTXoo7M5Z83LBrtz5siTzOlrRc+FAyoFP9fgFdLz93q6QSmzpXGUnhbT29 wM0tNe/MKva9exaOo4ivRSV/6eEoTuros8LluTYUCemtiYQ4ohSeNNgt4AuAc7Ef hXEGzyiihDGi4hDaY9N/3rqYu06bH44/NPjySEbWss8IG9TzORDwoISOgIOJr9G8 K+2vJRcr96FoWVmfUl08WTnCmwJhJmHfzjykdTG46hbFE5lJ2HVz5jzifJm07T5+ 7GI/14jSgQAOByJmjEYxlgbvK6BL97o= -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:18 2025 by rpki-client