$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c327cfd8-eb7e-3ad3-849a-be482bf7a009.roa File: c327cfd8-eb7e-3ad3-849a-be482bf7a009.roa (raw, json) Hash identifier: yIL2HeYCyncUrSdMt3SARsVTzlLQlZAIqtfObxTNkDM= Subject key identifier: 87:68:6C:42:95:08:AB:C5:14:DA:3E:6D:E3:DF:EF:19:64:B9:CA:50 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C0DDA7FD3EE7AA311AF00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c327cfd8-eb7e-3ad3-849a-be482bf7a009.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 67.216.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:0d:da:7f:d3:ee:7a:a3:11:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=d1f8c10e-8bbd-49ce-b48d-7c6a90319297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:97:72:3b:eb:22:01:22:2c:68:45:96:60: 3a:d5:04:5f:bf:ae:76:61:11:7a:b3:33:b0:f3:77: 45:32:20:cd:72:17:c7:29:d3:4c:2b:17:76:10:f2: ec:52:4c:18:8b:04:9b:b0:5c:ee:c1:df:3f:4f:64: 09:82:ca:f2:f7:85:46:a5:fa:07:1e:f8:98:74:a3: d7:57:9c:3a:06:71:e4:19:16:af:c9:87:ae:b6:6a: 26:c3:01:6d:44:f7:6d:73:77:88:21:a2:b8:4d:d3: 38:99:bd:b9:78:c8:a8:bb:9d:7f:47:1b:47:f4:ec: 66:3d:95:e2:1d:a8:2e:66:14:d6:ce:ce:6e:ae:b9: b1:4d:f1:10:e8:70:04:62:42:2d:40:9a:bb:42:52: 77:44:c4:05:db:37:30:81:0f:5b:22:70:bc:f0:5f: a9:86:b1:cf:20:24:f1:ed:9a:1f:d0:8f:fb:09:d8: 64:70:01:3d:4f:80:a7:d5:91:ea:b9:3a:72:71:47: 3c:21:44:97:6f:06:37:77:e6:40:b3:71:9c:30:33: 43:a0:d8:c0:cf:19:53:e6:07:02:91:e2:21:fe:ff: 88:21:f1:83:e4:86:4b:14:cf:ce:1d:77:7e:0a:07: 57:f0:cd:3a:4a:10:b3:1a:2d:1d:41:26:22:94:c2: e2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:6C:42:95:08:AB:C5:14:DA:3E:6D:E3:DF:EF:19:64:B9:CA:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c327cfd8-eb7e-3ad3-849a-be482bf7a009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 67.216.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ca:da:a8:95:87:90:7d:9f:95:a0:68:d8:d9:1c:92:93:f6: ec:57:7f:5f:57:fa:96:10:e8:38:80:9a:b3:89:8e:26:dd:81: db:0f:40:a7:a8:22:61:b3:9d:43:b5:30:23:a0:e5:3d:3b:2c: 79:23:90:8d:64:33:6a:10:f8:da:db:aa:d6:99:c9:ce:52:f2: 30:f7:e2:98:de:c4:c9:82:91:23:d1:9e:8f:3e:d1:23:cb:3e: fd:03:20:a2:3b:03:96:8d:c2:ef:38:83:a8:2c:da:6c:30:c4: 85:74:2a:58:c7:ca:7d:d5:91:a0:c1:c3:08:a8:e2:3c:61:a9: 97:65:c5:6e:11:02:20:da:1b:79:a8:44:34:2f:58:41:40:38: a7:80:28:f1:49:5e:90:12:80:ea:68:ed:0d:b2:cd:f7:54:23: 22:19:d1:55:ac:11:15:f9:96:1e:7f:e7:be:96:b7:11:a6:6c: d8:7d:3c:f5:26:78:99:1a:b5:03:85:e9:c5:d5:2e:b4:ca:20: fc:c9:27:af:97:a2:c1:20:fd:84:25:07:1b:0c:8c:7d:54:44: d8:e0:73:79:c3:13:6d:32:10:cd:ce:2c:e5:96:1a:94:a7:e6: 53:44:4f:08:b3:51:42:ed:2b:e7:97:9f:17:05:fb:43:8d:48: 3e:ba:ef:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbA3af9PueqMRrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDFmOGMxMGUtOGJiZC00OWNlLWI0OGQtN2M2YTkwMzE5Mjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCXcjvrIgEiLGhFlmA61QRfv652YRF6szOw 83dFMiDNchfHKdNMKxd2EPLsUkwYiwSbsFzuwd8/T2QJgsry94VGpfoHHviYdKPX V5w6BnHkGRavyYeutmomwwFtRPdtc3eIIaK4TdM4mb25eMiou51/RxtH9OxmPZXi HaguZhTWzs5urrmxTfEQ6HAEYkItQJq7QlJ3RMQF2zcwgQ9bInC88F+phrHPICTx 7Zof0I/7CdhkcAE9T4Cn1ZHquTpycUc8IUSXbwY3d+ZAs3GcMDNDoNjAzxlT5gcC keIh/v+IIfGD5IZLFM/OHXd+CgdX8M06ShCzGi0dQSYilMLiBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdobEKVCKvFFNo+bePf7xlkucpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzMyN2NmZDgtZWI3ZS0z YWQzLTg0OWEtYmU0ODJiZjdhMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9jsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnK2qiVh5B9n5WgaNjZHJKT9uxXf19X+pYQ6DiAmrOJjibdgdsPQKeo ImGznUO1MCOg5T07LHkjkI1kM2oQ+NrbqtaZyc5S8jD34pjexMmCkSPRno8+0SPL Pv0DIKI7A5aNwu84g6gs2mwwxIV0KljHyn3VkaDBwwio4jxhqZdlxW4RAiDaG3mo RDQvWEFAOKeAKPFJXpASgOpo7Q2yzfdUIyIZ0VWsERX5lh5/576WtxGmbNh9PPUm eJkatQOF6cXVLrTKIPzJJ6+XosEg/YQlBxsMjH1URNjgc3nDE20yEM3OLOWWGpSn 5lNETwizUULtK+eXnxcF+0ONSD6674k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:50 2025 by rpki-client