$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa File: bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa (raw, json) Hash identifier: YvCFSiLMD9eSukqya/X/uMRjmTdXtNJspOmO2cI4JCI= Subject key identifier: C7:1F:5B:C1:A3:C1:73:73:E2:E6:1B:EC:33:C2:FC:01:C2:9D:D0:9D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6E91F9A9C14B08C662EF3F30 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 397630 IP address blocks: 168.91.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f9:a9:c1:4b:08:c6:62:ef:3f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=b6d4a90f-1c07-4d5f-82b7-a8a2c7b57f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:b2:4c:ce:a5:e8:c0:1e:72:be:94:74:95: 06:38:9f:2a:70:e7:8e:1f:87:fd:22:ee:8c:85:27: e9:1d:dd:b9:19:4e:9e:c7:8c:5e:02:5a:af:55:4f: 2c:b8:f4:12:e8:a5:cb:8f:cf:81:b8:7c:67:30:61: 07:cf:b3:d6:8e:02:46:60:8c:0e:a1:a7:04:03:70: 58:11:df:0a:3a:50:f0:22:e2:3b:e4:80:ac:c6:eb: 02:dc:f4:94:1e:5d:9d:0d:d4:69:21:e0:d8:e8:b5: fb:6f:48:e4:de:bd:ea:4d:10:80:7f:95:60:6f:a2: 17:1d:ab:8f:7b:60:46:ed:6b:ed:9a:93:d2:e4:46: 47:ee:ee:fb:39:b1:7c:6a:96:56:b6:39:30:29:56: 50:1d:39:13:aa:10:72:a8:84:44:39:55:2e:60:82: e0:11:0a:90:7e:e5:d7:19:a2:08:1a:1b:f2:e9:53: e9:c9:51:3a:88:c1:fb:fb:9e:b0:bc:3c:d7:bf:fe: 07:5a:6f:6a:0a:68:e3:dd:77:19:c1:61:33:77:88: aa:3c:8c:4f:1b:a8:dd:3e:dc:43:8d:90:0e:18:31: ce:eb:91:70:4d:ce:0b:86:30:65:c1:f9:46:7e:70: d1:52:2a:8b:84:a7:03:26:2c:da:1d:4a:99:a1:fe: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1F:5B:C1:A3:C1:73:73:E2:E6:1B:EC:33:C2:FC:01:C2:9D:D0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c8:60:28:fb:3c:f2:b3:52:80:3c:9f:e3:45:4a:99:41:60: b5:68:29:ec:98:9a:96:99:36:84:d3:ab:8f:3d:8c:26:76:6d: 4f:24:ed:fb:83:39:39:d1:21:31:25:e0:c8:98:ad:25:22:a1: 9a:17:76:4e:53:9f:f3:db:3f:45:2a:68:6d:dc:63:3d:1d:78: 23:71:65:a0:70:7e:f5:c4:6c:7b:11:69:44:a0:9d:77:c6:61: ad:3c:ee:7e:fd:7a:d5:94:67:87:ba:be:56:3f:36:b7:5f:be: 6a:05:8a:92:57:6c:00:ab:27:84:d4:0c:78:03:09:9c:74:1d: 88:66:75:dc:df:17:96:13:8f:03:73:02:42:f7:ce:5e:cc:35: f8:2c:2d:84:9e:82:e1:7c:9d:c3:87:07:17:a0:57:d0:59:15: b5:87:9e:ae:fe:7b:f7:5a:f6:87:2e:33:93:b1:3f:22:c6:b1: 3d:1f:80:8b:b4:94:ee:f6:75:45:97:b3:96:ce:87:39:2e:fe: 70:e4:c6:f2:dd:3c:fc:6a:b4:8f:ec:c9:3d:31:c4:b6:41:ad: fe:0f:3e:32:c6:f8:76:08:be:c9:1f:35:62:0c:17:cd:bd:5b: e1:92:97:d8:c9:c9:d8:56:ab:3d:32:ed:d9:dc:cb:44:df:2b: 92:6e:54:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfmpwUsIxmLvPzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YjZkNGE5MGYtMWMwNy00ZDVmLTgyYjctYThhMmM3YjU3ZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWiyTM6l6MAecr6UdJUGOJ8qcOeOH4f9Iu6M hSfpHd25GU6ex4xeAlqvVU8suPQS6KXLj8+BuHxnMGEHz7PWjgJGYIwOoacEA3BY Ed8KOlDwIuI75ICsxusC3PSUHl2dDdRpIeDY6LX7b0jk3r3qTRCAf5Vgb6IXHauP e2BG7WvtmpPS5EZH7u77ObF8apZWtjkwKVZQHTkTqhByqIREOVUuYILgEQqQfuXX GaIIGhvy6VPpyVE6iMH7+56wvDzXv/4HWm9qCmjj3XcZwWEzd4iqPIxPG6jdPtxD jZAOGDHO65FwTc4LhjBlwflGfnDRUiqLhKcDJizaHUqZof7uHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcfW8GjwXNz4uYb7DPC/AHCndCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmQwMzk0ZWQtZWRkMy0z MTQyLTlkYzYtNzM2N2FlYjdiMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7IYCj7PPKzUoA8n+NFSplBYLVoKeyYmpaZNoTTq489jCZ2bU8k7fuD OTnRITEl4MiYrSUioZoXdk5Tn/PbP0UqaG3cYz0deCNxZaBwfvXEbHsRaUSgnXfG Ya087n79etWUZ4e6vlY/NrdfvmoFipJXbACrJ4TUDHgDCZx0HYhmddzfF5YTjwNz AkL3zl7MNfgsLYSeguF8ncOHBxegV9BZFbWHnq7+e/da9ocuM5OxPyLGsT0fgIu0 lO72dUWXs5bOhzku/nDkxvLdPPxqtI/syT0xxLZBrf4PPjLG+HYIvskfNWIMF829 W+GSl9jJydhWqz0y7dncy0TfK5JuVHw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:23 2025 by rpki-client