$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/708f3416-9ae6-3ccd-9737-5776646ca36d.roa File: 708f3416-9ae6-3ccd-9737-5776646ca36d.roa (raw, json) Hash identifier: wQxrFm9NqYs08h9DVhDt0+J/DRs32he7sK6jDe4oiAI= Subject key identifier: 60:33:CF:77:E1:D5:12:98:2F:CC:AC:3A:AE:8C:D5:44:C5:AA:17:59 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C10A9DCBEC91B552BA340 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/708f3416-9ae6-3ccd-9737-5776646ca36d.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 72.14.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:10:a9:dc:be:c9:1b:55:2b:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=8e0e24ea-e86f-49ea-9ee0-3325029f73f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:1f:59:d8:f4:06:da:7c:96:20:b1:f2:9a: d8:fe:84:76:59:df:dd:32:1f:78:d9:a7:76:69:4a: 39:e9:18:bb:ab:6e:d0:56:94:43:83:5c:5c:5a:e4: da:12:bf:71:5a:d8:3c:0c:61:b9:3e:9b:9d:6e:a5: 09:f4:e1:6a:b0:2d:07:e8:98:cc:97:61:e3:ec:b5: 6c:7d:ef:ac:3e:23:7f:09:5d:74:b2:73:7b:97:5f: f9:2e:da:56:10:33:5a:b4:6c:7b:41:2f:8b:89:81: 39:0d:ed:3f:2b:6f:ee:15:76:9f:13:52:53:2a:9d: df:8f:a5:18:a4:19:36:07:9b:d6:9f:27:43:63:e6: 2b:00:ae:16:0e:31:2b:9a:5d:38:67:2a:d4:f8:7e: 09:a7:46:ff:55:5c:ab:f0:d0:ea:e3:c6:17:f9:4d: 88:ae:11:5a:c4:b3:54:aa:fd:d2:c1:57:dc:e0:2d: ae:2b:f6:d7:9e:e1:ee:f5:37:76:f4:38:42:c0:b8: 81:8e:d9:a7:49:7e:55:a0:6d:37:29:3b:9f:88:11: 32:1b:ac:8d:58:7c:c0:10:b9:73:7e:6b:dc:f1:56: 5d:fe:06:fb:c1:dc:85:b2:29:ae:32:c6:05:6b:a5: 20:fe:c6:8d:06:27:c2:f1:40:ba:75:1a:db:06:0c: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:CF:77:E1:D5:12:98:2F:CC:AC:3A:AE:8C:D5:44:C5:AA:17:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/708f3416-9ae6-3ccd-9737-5776646ca36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 72.14.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2a:db:22:6b:ee:9d:63:f0:3f:bc:54:0a:04:b8:ee:3c:52: f7:40:db:76:71:04:a1:78:76:1b:ca:0b:21:9c:b0:7c:1b:39: 3a:8d:3e:40:26:98:78:7a:43:35:b1:af:9f:d7:b7:53:65:1c: a0:46:49:39:99:72:2b:65:62:6e:f3:cd:b0:dc:3a:b8:b0:91: 45:fb:ac:6c:49:46:7a:a9:36:13:80:1f:c2:9d:f1:a2:64:25: 8e:76:5e:8f:26:01:d5:f0:a7:36:ef:c1:68:da:60:e3:e8:b8: 39:da:71:a1:73:86:ca:f0:fc:c3:61:b7:b7:75:05:7b:58:c2: a3:fc:03:ba:f2:0c:d2:31:90:22:eb:22:0d:02:27:80:9c:9d: d1:b0:b7:52:56:f9:26:a5:69:fd:f7:d8:fc:6f:89:3e:00:4f: dc:0a:98:75:92:ff:f0:ed:5d:43:5b:7a:70:14:b7:32:ad:d1: 88:dc:8a:91:c0:5d:56:16:60:74:78:88:af:81:25:99:56:4f: 7b:a8:e5:e5:f4:f7:2d:da:26:b9:24:91:96:99:dd:e1:e3:3d: 2a:7a:78:1a:84:07:37:cf:a0:55:c0:b5:a6:43:c5:b8:c7:cf: 59:dd:d6:62:ca:ad:e7:62:5f:b6:58:6c:ff:89:8c:e0:b9:99: 67:d7:f7:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBCp3L7JG1Uro0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk OGUwZTI0ZWEtZTg2Zi00OWVhLTllZTAtMzMyNTAyOWY3M2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnEfWdj0Btp8liCx8prY/oR2Wd/dMh942ad2 aUo56Ri7q27QVpRDg1xcWuTaEr9xWtg8DGG5PpudbqUJ9OFqsC0H6JjMl2Hj7LVs fe+sPiN/CV10snN7l1/5LtpWEDNatGx7QS+LiYE5De0/K2/uFXafE1JTKp3fj6UY pBk2B5vWnydDY+YrAK4WDjErml04ZyrU+H4Jp0b/VVyr8NDq48YX+U2IrhFaxLNU qv3SwVfc4C2uK/bXnuHu9Td29DhCwLiBjtmnSX5VoG03KTufiBEyG6yNWHzAELlz fmvc8VZd/gb7wdyFsimuMsYFa6Ug/saNBifC8UC6dRrbBgyL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAzz3fh1RKYL8ysOq6M1UTFqhdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzA4ZjM0MTYtOWFlNi0z Y2NkLTk3MzctNTc3NjY0NmNhMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEq2yJr7p1j8D+8VAoEuO48UvdA23ZxBKF4dhvKCyGcsHwbOTqNPkAm mHh6QzWxr5/Xt1NlHKBGSTmZcitlYm7zzbDcOriwkUX7rGxJRnqpNhOAH8Kd8aJk JY52Xo8mAdXwpzbvwWjaYOPouDnacaFzhsrw/MNht7d1BXtYwqP8A7ryDNIxkCLr Ig0CJ4CcndGwt1JW+Salaf332PxviT4AT9wKmHWS//DtXUNbenAUtzKt0YjcipHA XVYWYHR4iK+BJZlWT3uo5eX09y3aJrkkkZaZ3eHjPSp6eBqEBzfPoFXAtaZDxbjH z1nd1mLKrediX7ZYbP+JjOC5mWfX9yc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:52 2025 by rpki-client