$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa File: 70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa (raw, json) Hash identifier: fv2sOCg2sF4hF9OXRjt3pFQLKrEShxxjX5E0p31ZYps= Subject key identifier: DA:69:F8:EB:94:7F:71:05:50:AD:BB:B8:78:FB:BF:0C:99:58:56:72 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B2A2C5DC7DF34EA3FA2BC5D80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 199.250.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5d:c7:df:34:ea:3f:a2:bc:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=e7b197d5-5962-4422-ab3b-3f164cc5b8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:02:c7:98:2f:56:a8:a1:be:64:f0:fb:3c: c5:42:58:7f:38:4c:44:80:75:4d:e1:fd:f0:1c:59: fe:d2:5d:da:7a:88:5b:5b:b6:6e:e1:53:f7:07:c9: ec:52:de:2d:b8:c8:f5:70:37:dd:d2:8e:56:a8:74: eb:26:8a:76:51:bc:84:ee:8c:fe:54:77:35:61:a8: ad:e5:df:09:fa:cc:96:d8:f1:27:47:24:0c:76:ba: de:3f:38:c1:cb:d1:76:03:c7:a3:ad:c3:66:f5:11: 4f:60:32:74:eb:0e:ae:3c:f0:33:24:48:57:29:fa: 79:16:e9:f0:17:99:7c:68:f6:b1:26:37:2b:ac:53: f6:da:65:01:ac:df:fe:05:35:5e:76:07:95:75:e3: 12:93:6a:1b:1e:dd:9d:4a:82:6d:68:20:de:29:27: 03:9f:9b:7e:55:65:28:99:03:b9:77:cd:e7:66:8f: 34:03:24:34:dc:01:21:73:f1:bb:26:b4:bb:6b:f7: a0:77:7c:d6:60:17:4d:8e:b5:a6:7f:65:52:36:c8: 17:00:38:a8:bc:05:db:97:52:05:1e:b5:42:f1:d2: 13:e2:b7:f3:7e:93:4e:1d:30:a2:d8:50:4a:82:09: 46:74:58:96:4e:38:b8:a1:c4:12:cf:18:70:6b:e2: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:69:F8:EB:94:7F:71:05:50:AD:BB:B8:78:FB:BF:0C:99:58:56:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/70eb5e9f-12ce-32ec-a793-f001a2116bb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.250.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:74:04:85:c0:54:68:45:3f:8b:e1:2f:3a:88:57:94:c8:ae: 83:32:c9:26:fd:e4:d8:ca:c6:8e:10:60:bc:40:da:28:36:18: 06:b8:d0:2a:1d:8a:64:00:9f:8c:b0:1d:be:8c:6a:cc:f6:e3: 62:01:fe:ed:e8:c1:e4:41:20:62:43:76:81:9d:9e:54:8b:81: f0:0c:b5:52:b6:0e:a9:28:e4:e7:f9:95:3b:77:a2:1c:d4:c3: 09:d7:ab:71:56:a7:3a:1b:c2:54:03:10:5c:94:f3:6a:ff:0a: ac:94:c5:1c:54:94:c4:25:04:f4:ae:87:dd:6e:24:df:71:97: 8d:07:24:83:e7:a8:ce:5f:89:0a:c2:3b:a3:e9:79:9b:8b:c8: 5e:20:e8:68:15:4f:62:08:35:5a:20:00:b2:7a:a3:66:91:49: ff:67:3f:ff:a9:89:21:37:0f:b0:fb:52:87:22:a6:6a:9a:41: b3:da:e5:c5:aa:bb:06:d3:9e:b2:2b:93:15:60:35:8d:96:ba: fe:54:c3:c1:5d:28:ca:d3:fc:fb:6f:33:68:71:38:10:a2:5e: fb:bd:7a:6d:e5:6e:02:2a:dc:28:2a:3a:60:e0:78:54:7e:57: 8b:1c:0e:9d:28:80:af:92:18:2c:07:0d:0d:17:1e:ea:bc:3a: 4a:77:f2:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF3H3zTqP6K8XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTdiMTk3ZDUtNTk2Mi00NDIyLWFiM2ItM2YxNjRjYzViOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBMCx5gvVqihvmTw+zzFQlh/OExEgHVN4f3w HFn+0l3aeohbW7Zu4VP3B8nsUt4tuMj1cDfd0o5WqHTrJop2UbyE7oz+VHc1Yait 5d8J+syW2PEnRyQMdrrePzjBy9F2A8ejrcNm9RFPYDJ06w6uPPAzJEhXKfp5Funw F5l8aPaxJjcrrFP22mUBrN/+BTVedgeVdeMSk2obHt2dSoJtaCDeKScDn5t+VWUo mQO5d83nZo80AyQ03AEhc/G7JrS7a/egd3zWYBdNjrWmf2VSNsgXADiovAXbl1IF HrVC8dIT4rfzfpNOHTCi2FBKgglGdFiWTji4ocQSzxhwa+JAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpp+OuUf3EFUK27uHj7vwyZWFZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzBlYjVlOWYtMTJjZS0z MmVjLWE3OTMtZjAwMWEyMTE2YmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN0BIXAVGhFP4vhLzqIV5TIroMyySb95NjKxo4QYLxA2ig2GAa40Cod imQAn4ywHb6Masz242IB/u3oweRBIGJDdoGdnlSLgfAMtVK2Dqko5Of5lTt3ohzU wwnXq3FWpzobwlQDEFyU82r/CqyUxRxUlMQlBPSuh91uJN9xl40HJIPnqM5fiQrC O6PpeZuLyF4g6GgVT2IINVogALJ6o2aRSf9nP/+piSE3D7D7UocipmqaQbPa5cWq uwbTnrIrkxVgNY2Wuv5Uw8FdKMrT/PtvM2hxOBCiXvu9em3lbgIq3CgqOmDgeFR+ V4scDp0ogK+SGCwHDQ0XHuq8Okp38mA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:41 2025 by rpki-client