$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/889a0616-a575-364c-979f-3d5a3c126b3d.roa File: 889a0616-a575-364c-979f-3d5a3c126b3d.roa (raw, json) Hash identifier: rDA5jHwFIPYkk6ESiF1ZAZYvX7diNxUjQnSHz6xrID0= Subject key identifier: 7E:5D:8D:20:BF:13:08:6E:86:06:E1:AE:A3:45:5A:83:90:AB:AB:66 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B76F25A7CF0C7B9A5FE13B100 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/889a0616-a575-364c-979f-3d5a3c126b3d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 33287 IP address blocks: 158.62.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5a:7c:f0:c7:b9:a5:fe:13:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a99e8c0d-a11f-46ea-beac-af8933ed825b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:c0:ea:de:48:be:13:bc:9e:3e:b9:52:2f: 2f:ff:de:0a:2d:12:9e:6a:fe:06:c7:f1:8c:d3:d4: db:ef:af:6d:97:22:89:ec:61:0f:d7:e5:66:be:38: 69:1a:a2:7b:19:73:1f:6c:5e:d3:83:ca:c6:23:df: 81:cd:93:3d:7a:85:c6:d1:7f:cb:17:75:63:79:90: 23:83:f3:c5:55:56:be:4d:8a:fa:a1:dc:7a:a5:c5: e1:a4:17:b4:43:c1:0c:1f:df:26:ef:64:8f:59:8d: 88:bc:0e:ac:14:5e:e7:5c:99:66:d7:f9:06:2a:60: 3e:b3:ea:7e:44:24:82:69:d5:02:6a:33:74:a1:5c: 22:a9:72:1d:5a:21:96:48:8b:3c:b7:55:64:50:3f: a2:b2:c5:6f:2f:96:1b:c9:17:68:9a:60:29:89:0e: 5a:7b:46:ca:f4:a6:65:48:08:44:04:40:dc:e6:e0: 3e:a5:26:1f:01:83:d8:c3:c4:f1:94:ae:a5:ee:12: c5:4e:8e:77:41:55:61:76:5a:a4:1b:24:fd:91:22: dc:09:3d:3a:40:66:2a:6b:f7:56:2c:00:1f:c9:0b: c8:51:5f:cb:85:a9:fc:eb:da:b6:09:e5:7f:90:3f: 88:c0:16:9a:83:46:c7:5e:5b:38:2d:51:74:0e:89: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:8D:20:BF:13:08:6E:86:06:E1:AE:A3:45:5A:83:90:AB:AB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/889a0616-a575-364c-979f-3d5a3c126b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e8:fe:d5:5e:44:81:1a:06:54:18:86:e1:88:b8:c2:22:b5: 99:73:e1:f6:73:98:a6:d3:83:f8:20:28:a4:a8:b3:14:ec:a2: f5:20:c3:3f:44:09:42:64:2e:17:56:94:89:29:c8:10:16:13: 97:dc:f7:28:44:91:cf:07:a9:10:ff:6a:87:07:ff:58:5a:6f: f2:bc:b8:35:be:a4:f5:4f:75:d0:65:50:63:f9:f0:01:a0:d0: af:4d:c5:4a:db:cd:f9:7a:d2:75:1f:4d:cc:d8:0f:ca:26:57: 76:7d:54:0f:80:ec:80:1f:56:34:c5:16:ca:2b:5f:db:24:1b: 24:dd:7f:39:6b:00:69:f7:bf:c4:df:b2:52:68:3a:58:c6:e8: f6:39:a6:36:51:8b:c2:ea:2e:b6:f5:d0:0a:76:6f:15:45:89: a6:10:c9:ab:b2:ce:2d:12:9a:74:ea:01:d8:6f:90:91:e9:e3: 7f:cc:3b:0c:df:31:84:1e:75:01:c6:af:f7:0b:80:54:b3:db: e0:f6:86:23:2a:2f:70:78:e7:c1:65:ff:2f:07:ec:fd:7d:75: bf:cd:1d:45:d5:da:79:70:b7:db:98:3b:13:1f:a3:75:c3:f4: 40:6a:e9:4b:9f:bf:4a:87:6a:a2:58:f9:0d:02:ab:3f:aa:a0: 5e:a7:88:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lp88Me5pf4TsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTk5ZThjMGQtYTExZi00NmVhLWJlYWMtYWY4OTMzZWQ4MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikrA6t5IvhO8nj65Ui8v/94KLRKeav4Gx/GM 09Tb769tlyKJ7GEP1+VmvjhpGqJ7GXMfbF7Tg8rGI9+BzZM9eoXG0X/LF3VjeZAj g/PFVVa+TYr6odx6pcXhpBe0Q8EMH98m72SPWY2IvA6sFF7nXJlm1/kGKmA+s+p+ RCSCadUCajN0oVwiqXIdWiGWSIs8t1VkUD+issVvL5YbyRdommApiQ5ae0bK9KZl SAhEBEDc5uA+pSYfAYPYw8TxlK6l7hLFTo53QVVhdlqkGyT9kSLcCT06QGYqa/dW LAAfyQvIUV/Lhan869q2CeV/kD+IwBaag0bHXls4LVF0Dok81wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5djSC/EwhuhgbhrqNFWoOQq6tmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODg5YTA2MTYtYTU3NS0z NjRjLTk3OWYtM2Q1YTNjMTI2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjo/tVeRIEaBlQYhuGIuMIitZlz4fZzmKbTg/ggKKSosxTsovUgwz9E CUJkLhdWlIkpyBAWE5fc9yhEkc8HqRD/aocH/1hab/K8uDW+pPVPddBlUGP58AGg 0K9NxUrbzfl60nUfTczYD8omV3Z9VA+A7IAfVjTFFsorX9skGyTdfzlrAGn3v8Tf slJoOljG6PY5pjZRi8LqLrb10Ap2bxVFiaYQyauyzi0SmnTqAdhvkJHp43/MOwzf MYQedQHGr/cLgFSz2+D2hiMqL3B458Fl/y8H7P19db/NHUXV2nlwt9uYOxMfo3XD 9EBq6Uufv0qHaqJY+Q0Cqz+qoF6niDY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:41 2025 by rpki-client