$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8556ebff-acc1-3221-af98-c28ea27048b5.roa File: 8556ebff-acc1-3221-af98-c28ea27048b5.roa (raw, json) Hash identifier: 2TvX0Y+2qZmdJ7AUfHXvj0MNHYRFHfJyzyLVdAFhxoI= Subject key identifier: 02:5F:AA:08:47:91:96:94:7A:2C:F4:29:5F:15:82:1A:CE:C7:CF:D5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A4A104DAAA2749CD5F92A8F00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8556ebff-acc1-3221-af98-c28ea27048b5.roa Signing time: Mon 23 Jun 2025 18:23:26 +0000 ROA not before: Mon 23 Jun 2025 18:23:26 +0000 ROA not after: Sun 21 Sep 2025 18:23:26 +0000 asID: 20001 IP address blocks: 170.199.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:10:4d:aa:a2:74:9c:d5:f9:2a:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 18:23:26 2025 GMT Not After : Sep 21 18:23:26 2025 GMT Subject: CN=71ca0406-9895-444c-9a8f-847db8a81966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:69:cb:67:6d:af:00:12:a6:b2:ab:76:cf: 6a:f6:0c:bb:9e:e8:ac:fa:7d:69:fe:cf:f6:6f:9f: ea:8f:0a:fd:b0:44:36:d3:2b:a0:2b:cb:4b:9b:c8: 22:b7:f8:53:73:06:88:9b:a9:1b:dd:1d:1c:60:93: 6a:a9:d2:46:55:56:cf:ab:8f:de:cf:2f:ac:07:52: 60:d9:3b:d0:5d:e1:d8:b4:22:5a:2a:12:cd:90:ee: 74:f0:97:67:c9:f4:e9:2a:24:82:f5:73:c0:86:e2: 07:ec:40:31:82:3c:18:5e:9f:f4:2c:c8:35:69:85: 6d:fa:a6:16:08:1e:f7:3e:f9:c7:78:68:a2:6a:19: 5a:c2:aa:70:1a:6e:6c:97:7c:4e:eb:1b:57:13:ef: 57:90:94:05:c7:31:3e:43:dc:bb:e8:20:f9:44:1c: 33:6b:0e:ff:d9:07:23:c1:94:2d:0a:ef:30:35:97: 5c:29:74:fe:4e:c9:a8:91:ff:09:f3:64:4e:f1:ec: b0:36:99:30:d7:00:7c:40:04:3b:40:54:bb:58:93: 54:22:b3:a4:15:c1:b3:30:c8:91:5a:cb:26:85:aa: 25:6c:3b:90:e8:17:49:63:fe:0b:28:b5:22:53:62: b1:7f:87:d2:7e:2f:c3:c2:b0:57:76:0b:91:6a:38: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:AA:08:47:91:96:94:7A:2C:F4:29:5F:15:82:1A:CE:C7:CF:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8556ebff-acc1-3221-af98-c28ea27048b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3a:de:61:e9:d8:9b:58:80:fd:f6:9d:6f:9d:4a:46:96:a0: 34:ce:46:de:0e:b6:11:e4:6e:ef:30:c9:f5:6a:f8:d7:19:81: 9c:5e:86:5d:51:05:4c:e7:43:e7:80:63:53:73:b1:47:2a:81: 56:ed:d5:ea:7d:ed:e7:1f:ad:ee:4e:1e:12:3e:ff:e5:4d:09: db:b4:34:d0:5d:3e:74:c1:51:f8:79:d2:c8:30:60:11:ef:f3: 24:09:71:10:7d:60:a2:b0:cf:3a:c2:6a:cf:85:3d:fe:54:6d: e6:b2:94:6d:bd:1b:db:4f:b0:a5:f8:11:00:2e:31:b0:5d:b7: 40:85:de:aa:be:e9:2d:bc:6a:b9:92:de:ba:3d:d4:d8:7c:ef: a7:27:37:b5:fe:91:6d:6a:c2:11:55:b1:d4:37:c9:cc:95:88: 75:2b:52:39:d4:23:09:8e:bf:56:fc:8b:a0:64:e3:47:ea:c1: 88:31:2f:53:73:dc:97:f6:f8:46:70:5c:c1:b7:0f:28:0f:82: c7:af:cc:37:5e:96:7e:f4:7c:f3:35:09:b7:88:a8:ff:5e:77: c5:9d:d2:ea:52:39:95:08:f6:65:da:59:cb:d3:94:13:35:90: 7f:e7:e1:d4:26:4d:1d:7f:70:f6:0f:85:7d:26:1e:d1:1b:a4: ed:af:2a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKEE2qonSc1fkqjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzE4MjMyNloXDTI1MDkyMTE4MjMyNlowLzEtMCsGA1UEAxMk NzFjYTA0MDYtOTg5NS00NDRjLTlhOGYtODQ3ZGI4YTgxOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39tpy2dtrwASprKrds9q9gy7nuis+n1p/s/2 b5/qjwr9sEQ20yugK8tLm8git/hTcwaIm6kb3R0cYJNqqdJGVVbPq4/ezy+sB1Jg 2TvQXeHYtCJaKhLNkO508JdnyfTpKiSC9XPAhuIH7EAxgjwYXp/0LMg1aYVt+qYW CB73PvnHeGiiahlawqpwGm5sl3xO6xtXE+9XkJQFxzE+Q9y76CD5RBwzaw7/2Qcj wZQtCu8wNZdcKXT+Tsmokf8J82RO8eywNpkw1wB8QAQ7QFS7WJNUIrOkFcGzMMiR WssmhaolbDuQ6BdJY/4LKLUiU2Kxf4fSfi/DwrBXdguRajheFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJfqghHkZaUeiz0KV8VghrOx8/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODU1NmViZmYtYWNjMS0z MjIxLWFmOTgtYzI4ZWEyNzA0OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg63mHp2JtYgP32nW+dSkaWoDTORt4OthHkbu8wyfVq+NcZgZxehl1R BUznQ+eAY1NzsUcqgVbt1ep97ecfre5OHhI+/+VNCdu0NNBdPnTBUfh50sgwYBHv 8yQJcRB9YKKwzzrCas+FPf5UbeaylG29G9tPsKX4EQAuMbBdt0CF3qq+6S28armS 3ro91Nh876cnN7X+kW1qwhFVsdQ3ycyViHUrUjnUIwmOv1b8i6Bk40fqwYgxL1Nz 3Jf2+EZwXMG3DygPgsevzDdeln70fPM1CbeIqP9ed8Wd0upSOZUI9mXaWcvTlBM1 kH/n4dQmTR1/cPYPhX0mHtEbpO2vKoY= -----END CERTIFICATE-----Generated at Wed Jul 2 22:14:35 2025 by rpki-client