$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa File: aa4e6123-70a5-3699-8fda-43a3b61fc845.roa (raw, json) Hash identifier: T5I52SW1FT9DDBkTHxlnXK+KLRUZLClPGCQme7keSTc= Subject key identifier: 4C:C1:9A:C4:ED:32:34:C9:BE:96:04:E9:FE:08:1B:B3:18:85:2C:16 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B28C6F37C6D53D62D8320D000 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 20001 IP address blocks: 142.147.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f3:7c:6d:53:d6:2d:83:20:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=a60aeee8-814d-4a0e-ad5e-aa1f72a4ab5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:3e:2e:51:36:90:c8:69:23:de:47:2a:16: bc:6d:8d:6f:61:23:bb:36:2b:da:e3:6a:d7:5d:da: 20:31:08:b5:ee:51:64:89:27:89:49:3a:21:3b:29: ce:ee:ff:86:20:e3:75:10:b4:91:ea:5f:08:45:c6: 53:47:85:5d:7d:2d:13:f0:d6:3b:db:f8:af:4e:7e: 4c:e3:a3:4d:0d:40:fb:17:90:59:ba:85:94:9e:ce: 6d:d3:24:58:ef:bf:c0:89:d4:df:d6:3f:a3:31:87: 22:95:1c:f8:ff:67:18:d0:5d:21:54:1c:b2:f5:76: b8:4c:d0:dd:0c:2d:a0:99:08:57:c2:2f:7f:7a:98: d7:4a:10:50:11:85:b6:26:9c:0a:92:6a:3a:af:77: 89:4b:97:a6:93:87:d1:b1:bf:56:66:0f:fe:64:88: 83:23:76:00:5a:85:7a:95:ec:a8:b3:7e:bf:8a:96: 08:fd:7b:3e:5d:e8:0a:d7:d3:02:04:14:d7:45:ab: 88:9c:48:5a:9c:b9:d7:5a:ad:52:27:77:b7:cc:2b: 20:8a:32:28:0e:3f:33:56:4e:69:df:8e:fd:83:f8: 1b:22:e5:e1:2c:11:ba:d7:d1:02:3c:4c:8a:f3:e3: 06:9a:0c:0d:08:b8:82:bf:ca:b0:35:de:d3:76:ba: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C1:9A:C4:ED:32:34:C9:BE:96:04:E9:FE:08:1B:B3:18:85:2C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 142.147.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e8:96:a9:24:7c:55:7d:79:9a:14:ea:cb:97:e7:44:a9:c8: 91:28:52:23:36:e4:ae:a5:28:6f:a6:cd:03:07:a1:42:4f:5e: e4:5f:36:37:3c:f5:78:42:20:0d:43:50:7c:23:a9:13:d2:ea: 78:e5:66:2a:7e:2e:b3:5d:6a:11:ff:29:cf:e5:b4:85:69:90: 4d:58:23:1b:78:7e:b8:60:c2:7c:10:a9:2d:7e:11:fa:c4:57: 2c:ed:a4:81:e3:0e:70:3f:31:2b:30:30:7c:bf:91:17:de:c7: 89:74:ce:80:30:50:6b:36:d1:bc:17:91:c9:da:31:1f:1a:e8: b3:ea:b5:63:b3:40:d3:88:7f:c0:47:84:91:53:c6:1a:d2:bb: a5:ea:ab:dc:be:4e:f0:66:ea:ea:61:79:ef:6e:b5:87:7f:71: e2:c5:aa:a2:13:84:e1:20:03:a4:8e:a0:25:84:6a:19:22:61: 8d:95:d7:ef:69:3e:0e:6e:1b:a1:1c:2c:65:a8:19:b1:f8:c0: 94:a5:03:62:7b:da:09:fd:ca:05:6d:ba:14:4e:2e:8e:8b:7f: bf:fd:cf:53:6b:44:df:89:6f:95:2b:6d:42:7b:fe:89:3a:d2: f2:a4:0c:fd:4a:59:fb:a2:32:64:a2:0f:54:6d:46:ca:ff:2c: 2b:8a:a7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvN8bVPWLYMg0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YTYwYWVlZTgtODE0ZC00YTBlLWFkNWUtYWExZjcyYTRhYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJo+LlE2kMhpI95HKha8bY1vYSO7Niva42rX XdogMQi17lFkiSeJSTohOynO7v+GION1ELSR6l8IRcZTR4VdfS0T8NY72/ivTn5M 46NNDUD7F5BZuoWUns5t0yRY77/AidTf1j+jMYcilRz4/2cY0F0hVByy9Xa4TNDd DC2gmQhXwi9/epjXShBQEYW2JpwKkmo6r3eJS5emk4fRsb9WZg/+ZIiDI3YAWoV6 leyos36/ipYI/Xs+XegK19MCBBTXRauInEhanLnXWq1SJ3e3zCsgijIoDj8zVk5p 3479g/gbIuXhLBG619ECPEyK8+MGmgwNCLiCv8qwNd7TdrpFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzBmsTtMjTJvpYE6f4IG7MYhSwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWE0ZTYxMjMtNzBhNS0z Njk5LThmZGEtNDNhM2I2MWZjODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDolqkkfFV9eZoU6suX50SpyJEoUiM25K6lKG+mzQMHoUJPXuRfNjc8 9XhCIA1DUHwjqRPS6njlZip+LrNdahH/Kc/ltIVpkE1YIxt4frhgwnwQqS1+EfrE VyztpIHjDnA/MSswMHy/kRfex4l0zoAwUGs20bwXkcnaMR8a6LPqtWOzQNOIf8BH hJFTxhrSu6Xqq9y+TvBm6uphee9utYd/ceLFqqIThOEgA6SOoCWEahkiYY2V1+9p Pg5uG6EcLGWoGbH4wJSlA2J72gn9ygVtuhROLo6Lf7/9z1NrRN+Jb5UrbUJ7/ok6 0vKkDP1KWfuiMmSiD1RtRsr/LCuKp70= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:28 2025 by rpki-client