$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa File: 9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa (raw, json) Hash identifier: bh5p61Y0tnMvfA3Zoto3MvQI27874lNl1FIuP3PWVuw= Subject key identifier: A2:F0:EE:D8:86:E9:41:D7:D9:77:14:D5:47:6D:CB:B7:E9:4D:8A:DB Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C0B4C2A6F01C974C43240 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22516 IP address blocks: 209.163.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:0b:4c:2a:6f:01:c9:74:c4:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=6b000e8b-347e-4784-aa6f-84515ce13116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:9e:9c:c3:d7:58:13:38:b3:de:35:d0:de: 06:d1:7c:b7:e5:69:a4:10:5b:52:86:ec:32:cb:9d: b8:29:0a:f7:a8:7a:41:02:cf:bb:ed:0c:61:42:24: 49:26:11:1d:d9:eb:e8:b9:94:d4:6d:0e:0b:d1:63: 22:50:e3:97:1c:35:d6:c4:61:77:bc:2c:69:38:49: 53:da:ae:d1:9e:09:b2:18:63:1f:19:e0:f7:24:76: 26:a1:da:3c:90:2d:77:a7:2f:fb:27:35:b4:6b:fb: ea:1f:e8:2b:95:37:4c:8d:04:83:88:2f:6e:e4:94: 53:db:60:5e:53:37:b2:a8:4c:68:ac:22:02:16:c7: 76:3b:48:08:24:41:f2:80:55:b8:d7:4a:08:f0:06: 65:5b:8c:83:45:e3:ae:73:d3:1b:de:ec:62:88:cf: 5e:ba:af:46:8d:1c:8f:88:fc:60:8e:3c:7c:0b:e6: a8:a6:00:83:8c:14:3b:f2:7f:3b:b9:7a:ad:3b:61: 48:4e:35:e6:bb:94:f6:ea:25:d0:59:89:0c:de:df: 4d:c9:c1:e6:0c:43:d6:72:d0:c1:f9:81:e3:d2:91: 4c:ae:7c:04:ca:45:7a:58:a0:fb:10:bf:27:e7:ce: 8e:3b:8a:36:9f:ef:39:ca:83:ea:c0:b4:8e:02:37: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F0:EE:D8:86:E9:41:D7:D9:77:14:D5:47:6D:CB:B7:E9:4D:8A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.163.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fb:27:aa:03:25:0a:a4:df:a3:c0:59:b8:55:b8:24:bf:d9: 42:68:95:ea:ff:20:79:d3:34:7d:0b:61:c7:bd:e7:6e:46:4f: e5:24:ec:b5:4b:51:5e:ec:9a:38:83:77:11:94:27:cc:f4:7c: b4:a0:85:4c:db:1f:57:0f:80:9b:0e:6d:f2:98:49:0c:3b:47: 56:dc:63:b7:d0:63:8c:00:03:37:63:13:af:96:58:31:8e:fb: 0e:27:98:bb:3f:81:36:70:b0:a7:52:5c:46:55:23:cc:b7:7f: 98:db:9e:20:79:35:bc:3a:ea:90:48:21:f6:63:89:3e:04:8a: ce:ce:52:a7:be:66:8c:a1:e2:5a:93:91:7e:7b:b8:49:17:13: f5:2e:fb:7d:62:37:6d:2e:b5:b6:14:6f:5a:a8:b7:37:d0:b7: 53:42:00:9f:c0:f4:56:34:85:90:3e:91:e0:4c:02:e5:49:06: 0a:8d:ee:86:21:32:87:f4:f8:83:aa:b5:ee:e7:e0:9c:d0:ef: bb:40:80:bd:54:e0:6b:1f:53:b8:b4:c3:68:bb:80:ac:55:9e: 32:6c:3f:e9:93:09:14:c0:d5:d6:db:4f:2d:f6:a2:0c:dd:6d: 3f:d2:a5:d5:f3:86:15:06:bb:50:86:0f:d2:03:b6:15:05:c0: 85:77:d2:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAtMKm8ByXTEMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NmIwMDBlOGItMzQ3ZS00Nzg0LWFhNmYtODQ1MTVjZTEzMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXKenMPXWBM4s9410N4G0Xy35WmkEFtShuwy y524KQr3qHpBAs+77QxhQiRJJhEd2evouZTUbQ4L0WMiUOOXHDXWxGF3vCxpOElT 2q7RngmyGGMfGeD3JHYmodo8kC13py/7JzW0a/vqH+grlTdMjQSDiC9u5JRT22Be UzeyqExorCICFsd2O0gIJEHygFW410oI8AZlW4yDReOuc9Mb3uxiiM9euq9GjRyP iPxgjjx8C+aopgCDjBQ78n87uXqtO2FITjXmu5T26iXQWYkM3t9NycHmDEPWctDB +YHj0pFMrnwEykV6WKD7EL8n586OO4o2n+85yoPqwLSOAjdc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLw7tiG6UHX2XcU1Udty7fpTYrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOWVmMWM0M2MtOWY4ZS0z MTdkLTlmZTctYzg4MTQ1NGQ0NzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aN1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj7J6oDJQqk36PAWbhVuCS/2UJoler/IHnTNH0LYce9525GT+Uk7LVL UV7smjiDdxGUJ8z0fLSghUzbH1cPgJsObfKYSQw7R1bcY7fQY4wAAzdjE6+WWDGO +w4nmLs/gTZwsKdSXEZVI8y3f5jbniB5Nbw66pBIIfZjiT4Eis7OUqe+Zoyh4lqT kX57uEkXE/Uu+31iN20utbYUb1qotzfQt1NCAJ/A9FY0hZA+keBMAuVJBgqN7oYh Mof0+IOqte7n4JzQ77tAgL1U4GsfU7i0w2i7gKxVnjJsP+mTCRTA1dbbTy32ogzd bT/SpdXzhhUGu1CGD9IDthUFwIV30vE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:04 2025 by rpki-client