$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71b3f525-a8b0-3246-9b5d-bf9b7a10b698.roa File: 71b3f525-a8b0-3246-9b5d-bf9b7a10b698.roa (raw, json) Hash identifier: 1t5ZIUXRg41knHVwpNKNVjPyLbv/U25yByMSUq9lmWk= Subject key identifier: 7E:E1:20:ED:17:82:75:5B:05:B6:64:B8:29:37:19:A2:0D:3F:EB:8D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A46A5B0156EA0160AEA398840 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71b3f525-a8b0-3246-9b5d-bf9b7a10b698.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 168.91.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:b0:15:6e:a0:16:0a:ea:39:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=700b70d5-fb93-4f39-aa6d-8a6f797df4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:58:ce:00:6e:f7:7b:7d:6b:8e:8d:a2:74: 22:42:4e:7b:68:69:f3:aa:6e:84:14:c3:f5:5b:3c: bc:c7:1f:8c:43:ad:08:68:15:ed:bf:7e:ae:70:cc: 61:c7:9c:64:a3:85:06:8e:a3:a6:1e:70:20:a7:05: f8:36:1c:d0:f2:35:8d:d5:90:eb:fd:0a:cb:08:50: d3:d1:9e:63:33:43:1f:e4:f7:1a:44:df:72:a9:cb: b4:c4:f7:a3:a0:44:d3:72:6a:1f:68:26:98:88:9f: 94:c2:84:e3:03:6f:14:a4:b9:86:c4:d2:86:97:99: 58:6a:49:b6:1e:f6:08:aa:6b:65:68:4b:a5:4d:99: c8:e4:73:ef:e4:71:3e:88:ff:b5:b0:33:15:62:ed: 9b:d8:43:8a:00:23:59:7c:f6:91:46:bf:17:0c:e3: 54:f1:54:a4:c3:94:50:7a:fe:9e:a3:c9:38:2c:31: 17:b3:05:66:c9:85:ee:32:48:9a:06:1d:a1:78:06: 97:4d:03:15:1f:06:55:05:2d:b4:02:56:55:f1:85: c2:21:5f:bc:b5:45:53:26:22:ab:69:9b:71:45:0f: a7:3b:69:ec:45:f6:a2:b5:74:24:16:4c:d6:a0:2d: 51:e3:fe:54:d5:68:ef:d1:58:44:42:0a:68:12:93: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:20:ED:17:82:75:5B:05:B6:64:B8:29:37:19:A2:0D:3F:EB:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71b3f525-a8b0-3246-9b5d-bf9b7a10b698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:af:fd:0f:b8:d7:5e:6a:25:e6:bc:49:96:43:51:53:91:be: 15:7a:84:cd:13:40:4d:40:92:ff:ee:23:24:ec:71:aa:5d:a6: 25:5a:44:fa:07:de:06:9c:14:b0:ff:4a:ab:57:dc:e9:37:39: da:b9:e2:a2:e4:aa:75:c8:ec:4d:91:70:9f:5b:ba:72:8b:dd: c9:86:88:78:f5:e3:b8:a0:70:37:0d:3d:3a:18:24:8f:d6:7c: ca:e9:36:83:3d:86:78:48:de:01:40:07:30:a2:43:66:9a:cd: f0:f8:61:6a:95:fe:5f:c6:60:63:36:6b:19:2b:81:8d:c6:00: 4a:93:17:a2:ac:98:9f:6d:66:8c:f0:c3:6b:67:70:9d:49:b1: a3:31:18:d8:b4:86:7d:50:6e:a2:ca:8f:21:02:3b:dc:b1:06: 52:e7:c6:8f:01:de:59:0a:9b:64:e4:d8:2c:83:2e:62:dd:05: 2f:36:5c:8c:17:a9:e7:9f:71:f8:14:e0:0b:92:70:64:76:01: bf:00:3e:98:42:62:d8:fc:ab:43:99:11:bc:2b:0f:a7:50:04: 08:87:85:b7:a1:fe:17:32:af:2e:98:7a:e0:80:a3:bf:d6:f2: aa:12:11:51:65:04:97:26:c8:f8:17:e5:54:b2:6b:b9:18:62: 9f:d6:5f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpbAVbqAWCuo5iEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk NzAwYjcwZDUtZmI5My00ZjM5LWFhNmQtOGE2Zjc5N2RmNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCdYzgBu93t9a46NonQiQk57aGnzqm6EFMP1 Wzy8xx+MQ60IaBXtv36ucMxhx5xko4UGjqOmHnAgpwX4NhzQ8jWN1ZDr/QrLCFDT 0Z5jM0Mf5PcaRN9yqcu0xPejoETTcmofaCaYiJ+UwoTjA28UpLmGxNKGl5lYakm2 HvYIqmtlaEulTZnI5HPv5HE+iP+1sDMVYu2b2EOKACNZfPaRRr8XDONU8VSkw5RQ ev6eo8k4LDEXswVmyYXuMkiaBh2heAaXTQMVHwZVBS20AlZV8YXCIV+8tUVTJiKr aZtxRQ+nO2nsRfaitXQkFkzWoC1R4/5U1Wjv0VhEQgpoEpMaaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7hIO0XgnVbBbZkuCk3GaINP+uNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzFiM2Y1MjUtYThiMC0z MjQ2LTliNWQtYmY5YjdhMTBiNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+v/Q+4115qJea8SZZDUVORvhV6hM0TQE1Akv/uIyTscapdpiVaRPoH 3gacFLD/SqtX3Ok3Odq54qLkqnXI7E2RcJ9bunKL3cmGiHj147igcDcNPToYJI/W fMrpNoM9hnhI3gFABzCiQ2aazfD4YWqV/l/GYGM2axkrgY3GAEqTF6KsmJ9tZozw w2tncJ1JsaMxGNi0hn1QbqLKjyECO9yxBlLnxo8B3lkKm2Tk2CyDLmLdBS82XIwX qeefcfgU4AuScGR2Ab8APphCYtj8q0OZEbwrD6dQBAiHhbeh/hcyry6YeuCAo7/W 8qoSEVFlBJcmyPgX5VSya7kYYp/WX28= -----END CERTIFICATE-----Generated at Tue Jul 1 20:38:36 2025 by rpki-client