$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa File: aefef297-d69c-3e8f-a44d-67a05d5e4438.roa (raw, json) Hash identifier: BAYWLNni4LYAgLIfRIRzBaj+Adz9YGHUFS4drFtD/Xk= Subject key identifier: 48:20:9D:E6:20:F0:C3:AE:31:2C:2B:31:AB:1E:05:10:EC:3C:41:54 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6BC75636EA5137404B9AA000 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397630 IP address blocks: 199.101.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:56:36:ea:51:37:40:4b:9a:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5930b52e-f81a-4fd3-b6aa-6b0f67eb4b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:f2:bb:b7:cd:13:bb:fa:93:dc:62:8c:17: 5f:21:c4:a0:06:59:4b:45:dc:a1:1c:b7:9b:99:ca: 07:0b:d9:7f:73:c0:80:52:be:74:89:2b:c3:70:17: 8d:fd:7c:c3:6f:36:c5:49:a7:50:a2:e8:2e:a8:a3: 9a:f1:21:f9:b9:c4:89:ba:ba:e7:f7:91:c4:a9:ff: 56:da:4a:f9:ff:6a:45:73:21:60:63:dc:61:28:4e: a6:54:04:e6:3a:42:d0:4e:42:cb:6b:c2:24:b6:ef: f6:3c:20:6a:90:aa:a1:a7:c1:57:e3:e0:2a:b5:aa: 8d:b6:aa:77:c8:3a:83:cd:ab:21:25:db:0f:27:6e: 8d:ea:7c:46:19:97:fc:5a:62:9d:2e:84:a7:45:d8: 78:3f:eb:7b:ba:6d:68:70:f2:35:28:8f:10:c0:9c: e5:56:ce:6b:8b:72:8d:dd:28:88:9b:e3:c8:b2:b8: 41:c9:22:64:bc:93:28:3d:57:0c:5e:24:ce:72:ca: c6:da:4b:99:c3:95:9f:2e:73:71:0d:b9:32:7e:9c: af:0a:56:62:14:80:ef:a0:0e:48:8d:85:47:62:3a: 1c:65:1d:01:ae:3a:3c:c6:df:81:9f:fc:b3:fb:fd: 1e:f6:6a:07:7c:f7:25:40:cc:82:66:0a:3b:0a:1c: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:9D:E6:20:F0:C3:AE:31:2C:2B:31:AB:1E:05:10:EC:3C:41:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.101.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:20:5c:d4:8e:26:12:17:34:21:9e:90:e8:ab:dc:bf:47:42: c0:03:91:c8:1a:8d:62:9d:a5:d3:05:b5:1e:ee:4b:a4:ef:f5: 90:1d:c3:f7:5e:4d:3f:13:a0:95:ca:2d:aa:db:69:e2:b5:c4: c7:25:b6:d3:75:25:73:26:63:97:52:95:ad:61:88:e1:4d:ce: ef:d3:2f:56:f1:f7:f5:af:e4:34:e6:ee:45:4b:c3:8f:e6:3d: c9:77:59:50:30:64:2f:11:21:51:bb:93:84:0d:a9:40:9d:41: 0f:51:84:f5:c6:78:43:c7:d9:74:39:31:ec:2a:6f:25:fd:fb: d0:3d:20:7d:20:06:98:d4:6b:15:ee:95:be:98:f4:59:4d:d0: 33:58:1e:69:4c:d2:24:ea:05:f1:3d:35:ed:e5:8d:df:1a:44: 2c:4f:11:cd:77:99:16:20:18:97:f1:ba:8c:33:94:9d:40:4b: 07:f4:28:a7:28:fe:4a:05:10:9a:a7:6b:84:09:34:9a:0b:61: 19:2b:9b:c3:0b:bd:16:95:23:f9:40:6e:c5:52:b7:a3:80:eb: 8b:84:a2:35:4e:5f:71:e6:ef:93:5a:35:28:64:82:25:c2:37: 65:50:1f:7e:9e:bb:29:0a:ea:b8:86:e1:ec:81:59:c8:15:87: a6:e0:00:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1Y26lE3QEuaoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTkzMGI1MmUtZjgxYS00ZmQzLWI2YWEtNmIwZjY3ZWI0YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVzyu7fNE7v6k9xijBdfIcSgBllLRdyhHLeb mcoHC9l/c8CAUr50iSvDcBeN/XzDbzbFSadQouguqKOa8SH5ucSJurrn95HEqf9W 2kr5/2pFcyFgY9xhKE6mVATmOkLQTkLLa8Iktu/2PCBqkKqhp8FX4+AqtaqNtqp3 yDqDzashJdsPJ26N6nxGGZf8WmKdLoSnRdh4P+t7um1ocPI1KI8QwJzlVs5ri3KN 3SiIm+PIsrhBySJkvJMoPVcMXiTOcsrG2kuZw5WfLnNxDbkyfpyvClZiFIDvoA5I jYVHYjocZR0Brjo8xt+Bn/yz+/0e9moHfPclQMyCZgo7Chy7kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEggneYg8MOuMSwrMaseBRDsPEFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWVmZWYyOTctZDY5Yy0z ZThmLWE0NGQtNjdhMDVkNWU0NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2WOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsgXNSOJhIXNCGekOir3L9HQsADkcgajWKdpdMFtR7uS6Tv9ZAdw/de TT8ToJXKLarbaeK1xMclttN1JXMmY5dSla1hiOFNzu/TL1bx9/Wv5DTm7kVLw4/m Pcl3WVAwZC8RIVG7k4QNqUCdQQ9RhPXGeEPH2XQ5MewqbyX9+9A9IH0gBpjUaxXu lb6Y9FlN0DNYHmlM0iTqBfE9Ne3ljd8aRCxPEc13mRYgGJfxuowzlJ1ASwf0KKco /koFEJqna4QJNJoLYRkrm8MLvRaVI/lAbsVSt6OA64uEojVOX3Hm75NaNShkgiXC N2VQH36euykK6riG4eyBWcgVh6bgABo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:25:01 2025 by rpki-client