$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67f8ba3c-34eb-3e73-8db0-288b97377903.roa File: 67f8ba3c-34eb-3e73-8db0-288b97377903.roa (raw, json) Hash identifier: klSe1n+K413jthl7LNRBZAtYAWGsWbhsWE1K/B2v188= Subject key identifier: F3:E0:F1:24:91:5A:29:02:26:68:09:59:24:87:98:B6:A7:28:1D:02 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B28C6F39079A249B8FF43C780 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67f8ba3c-34eb-3e73-8db0-288b97377903.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 20001 IP address blocks: 147.53.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f3:90:79:a2:49:b8:ff:43:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=281ba552-ab99-4eb3-a80f-816558d85dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ff:f5:5d:c8:70:ee:04:14:a5:7d:46:34:e1: 43:06:78:95:14:53:bf:55:c7:c2:ad:ea:25:91:28: 98:3f:d6:1a:7f:97:3f:18:9c:51:2c:53:68:cb:a3: da:08:e3:c6:a5:17:ea:2b:37:b1:99:cf:fe:1c:ba: dc:dd:db:c9:7d:96:53:a9:21:7a:2d:70:0a:5c:b0: ff:78:2a:5a:75:f5:b4:65:18:f1:a8:65:08:73:38: 87:d6:b6:26:7b:52:78:64:85:c1:bf:f7:ca:8b:a9: 4b:e0:77:77:ed:a9:ad:07:a8:bb:e0:70:98:4a:fd: b4:9e:c7:fd:22:fe:66:44:bc:57:dc:08:82:27:0f: 56:76:10:38:13:14:4b:27:23:eb:e5:47:f2:99:6e: 5a:1b:58:2a:ac:43:d2:3e:ca:3b:27:08:29:f9:02: b0:f3:af:48:42:e0:55:c2:c6:8b:e8:8d:d7:76:9b: 16:42:9f:2e:c9:61:91:e8:40:59:06:8a:78:4e:f9: 85:78:8e:88:a3:85:e1:c1:28:f6:43:fa:9b:36:f6: 4d:58:95:2c:7b:52:41:4c:46:a4:a8:37:c3:16:cb: 80:06:93:62:0c:c2:d5:26:2c:46:72:10:03:2a:28: 4f:26:2d:2e:77:eb:8d:50:2a:54:49:cf:72:e7:9a: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E0:F1:24:91:5A:29:02:26:68:09:59:24:87:98:B6:A7:28:1D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67f8ba3c-34eb-3e73-8db0-288b97377903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:a5:da:4d:96:24:cf:20:9a:2a:9c:96:5b:1d:36:b6:73:6e: db:d2:91:3c:45:63:64:76:07:0e:27:86:d7:0d:35:f0:fb:7f: 1e:9b:83:b6:1e:2e:8b:54:2e:b3:68:0c:0e:6f:cd:97:ae:32: 21:c0:9f:69:bc:02:53:f9:48:90:35:d2:63:87:28:3c:8e:d3: 0a:56:96:51:86:90:36:f9:f5:50:3a:5c:ef:41:46:8c:27:27: df:d4:9e:ab:b0:72:e6:43:17:22:4c:e1:07:c9:b2:96:10:61: 4e:18:09:aa:22:6b:0f:04:b3:ed:8d:24:49:2a:7c:78:2a:98: e0:94:18:61:10:2f:66:ec:85:cb:5f:e6:2b:13:90:ff:91:bb: b8:8a:7b:77:f1:fd:09:65:4a:9f:0e:38:22:1d:fa:cf:7a:e7: 83:d2:3e:e7:3a:a2:ee:4b:9f:12:e9:4c:c9:92:8d:3f:e3:bc: 43:4d:6d:41:19:59:cb:2e:5c:5f:6d:2e:8e:88:01:5b:6e:10: 59:3a:3c:3d:cb:a1:7c:f1:f7:5e:0d:9b:7b:12:f3:a1:a2:60: 82:b7:c7:8d:84:e0:29:ff:24:0b:73:32:87:71:92:1e:5a:35: b8:99:b9:4c:1c:4c:dd:18:9e:c4:02:9b:2f:6e:33:9e:61:b9: 60:e2:4e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvOQeaJJuP9Dx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MjgxYmE1NTItYWI5OS00ZWIzLWE4MGYtODE2NTU4ZDg1ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP/1Xchw7gQUpX1GNOFDBniVFFO/VcfCreol kSiYP9Yaf5c/GJxRLFNoy6PaCOPGpRfqKzexmc/+HLrc3dvJfZZTqSF6LXAKXLD/ eCpadfW0ZRjxqGUIcziH1rYme1J4ZIXBv/fKi6lL4Hd37amtB6i74HCYSv20nsf9 Iv5mRLxX3AiCJw9WdhA4ExRLJyPr5UfymW5aG1gqrEPSPso7Jwgp+QKw869IQuBV wsaL6I3XdpsWQp8uyWGR6EBZBop4TvmFeI6Io4XhwSj2Q/qbNvZNWJUse1JBTEak qDfDFsuABpNiDMLVJixGchADKihPJi0ud+uNUCpUSc9y55q7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPg8SSRWikCJmgJWSSHmLanKB0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjdmOGJhM2MtMzRlYi0z ZTczLThkYjAtMjg4Yjk3Mzc3OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN+l2k2WJM8gmiqcllsdNrZzbtvSkTxFY2R2Bw4nhtcNNfD7fx6bg7Ye LotULrNoDA5vzZeuMiHAn2m8AlP5SJA10mOHKDyO0wpWllGGkDb59VA6XO9BRown J9/UnquwcuZDFyJM4QfJspYQYU4YCaoiaw8Es+2NJEkqfHgqmOCUGGEQL2bshctf 5isTkP+Ru7iKe3fx/QllSp8OOCId+s9654PSPuc6ou5LnxLpTMmSjT/jvENNbUEZ WcsuXF9tLo6IAVtuEFk6PD3LoXzx914Nm3sS86GiYIK3x42E4Cn/JAtzModxkh5a NbiZuUwcTN0YnsQCmy9uM55huWDiTtY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:42 2025 by rpki-client