$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa File: ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa (raw, json) Hash identifier: 5umSuaVQlhDqyB5LmP/QsF62xawFhQzqOnobxRmJLQw= Subject key identifier: 43:3B:BA:49:4B:65:55:E0:BD:BA:A6:30:C2:E8:7A:E7:46:D2:C1:41 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B79BCB3A17B9BED3E21B0E650 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 64267 IP address blocks: 168.91.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b3:a1:7b:9b:ed:3e:21:b0:e6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=7b132bb7-b1de-4e06-94f6-6f8a3dddddfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:64:01:03:28:27:b2:be:39:72:70:b9:2e: f7:ca:b2:e2:19:64:b5:73:ca:b0:db:92:94:1f:10: d8:c1:74:de:4f:e0:1b:ee:b2:3e:c0:4e:aa:a7:2c: ec:1d:bb:5c:b7:4c:80:b8:5f:bf:ec:c6:6f:cd:12: 33:1b:1d:44:25:47:92:86:66:b8:ad:1b:15:e6:00: 13:04:fa:bc:41:62:d1:53:14:08:1d:5c:6d:37:dd: 3e:2f:3f:8d:0f:2a:93:e4:17:08:44:27:e3:29:87: 61:aa:aa:7c:54:1f:86:09:16:b1:11:ae:7b:6c:25: f0:80:b8:8d:37:4b:77:ea:b6:f2:84:8d:55:a5:82: c7:eb:5b:de:c1:96:5a:4f:a9:91:a6:83:b1:6f:95: 59:66:62:0b:ef:12:c3:98:1a:7c:df:f4:ce:03:ea: ac:38:25:e4:54:05:35:0d:57:d2:30:d8:53:43:94: 56:f3:f6:2e:79:65:9a:83:79:aa:b0:d6:3f:e0:85: 6b:57:bc:ff:db:82:28:21:30:89:62:b3:df:fd:69: 70:66:d5:71:8b:6e:97:be:11:49:84:a6:7f:3a:96: af:2d:9e:24:4f:18:7f:bc:1e:48:09:6a:1f:05:2d: e7:4c:5d:99:ed:2f:09:a0:0c:54:d2:b5:69:7d:69: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3B:BA:49:4B:65:55:E0:BD:BA:A6:30:C2:E8:7A:E7:46:D2:C1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:63:5d:bd:df:ef:fb:70:b4:58:00:b6:5b:37:d4:8d:81:cc: 40:5d:5a:ae:af:b5:ed:11:ed:a4:12:db:3b:17:fb:42:ef:6a: ad:8c:40:70:99:d9:f9:57:70:38:4e:53:2b:db:f2:11:28:48: 26:4c:19:e0:65:74:da:18:dd:0a:77:9b:d7:ad:a2:a7:35:5f: 63:2e:9e:c0:10:a6:bd:4a:2c:2c:8f:cf:0f:1a:2d:3b:a1:c9: f3:8c:ee:59:ce:13:6d:29:c7:c0:53:a6:82:c5:e2:d9:a5:99: 18:83:25:33:10:35:d9:4a:f1:0d:20:52:d8:a3:e7:8d:89:7c: 9c:7f:d0:20:12:88:d2:c4:31:9a:fa:1d:d3:86:20:5f:54:0c: 11:31:b4:73:34:ee:4f:f4:82:07:f2:38:cd:b2:e2:ff:d6:eb: 8f:0c:8c:1b:9b:f8:68:d4:b7:95:77:01:95:33:7d:01:79:3a: a9:ad:9a:3e:03:81:4e:3e:ee:cf:a6:23:a0:ca:e9:f4:1a:b7: 0d:2e:1b:db:0e:c4:15:4e:75:cd:c6:87:7b:2c:e4:c4:79:ac: 55:37:dd:99:2b:eb:d8:bd:af:83:06:cf:14:5b:f0:fc:49:cd: cb:f7:e4:84:46:35:d2:76:4c:af:68:48:5d:d2:c6:7c:38:a4: 98:52:da:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLOhe5vtPiGw5lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk N2IxMzJiYjctYjFkZS00ZTA2LTk0ZjYtNmY4YTNkZGRkZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3JkAQMoJ7K+OXJwuS73yrLiGWS1c8qw25KU HxDYwXTeT+Ab7rI+wE6qpyzsHbtct0yAuF+/7MZvzRIzGx1EJUeShma4rRsV5gAT BPq8QWLRUxQIHVxtN90+Lz+NDyqT5BcIRCfjKYdhqqp8VB+GCRaxEa57bCXwgLiN N0t36rbyhI1VpYLH61vewZZaT6mRpoOxb5VZZmIL7xLDmBp83/TOA+qsOCXkVAU1 DVfSMNhTQ5RW8/YueWWag3mqsNY/4IVrV7z/24IoITCJYrPf/WlwZtVxi26XvhFJ hKZ/OpavLZ4kTxh/vB5ICWofBS3nTF2Z7S8JoAxU0rVpfWm97wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM7uklLZVXgvbqmMMLoeudG0sFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2E5OTgwMTctNjM0Mi0z YmQ4LWI1YWYtMmMzYmEzMTZiNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdjXb3f7/twtFgAtls31I2BzEBdWq6vte0R7aQS2zsX+0Lvaq2MQHCZ 2flXcDhOUyvb8hEoSCZMGeBldNoY3Qp3m9etoqc1X2MunsAQpr1KLCyPzw8aLTuh yfOM7lnOE20px8BTpoLF4tmlmRiDJTMQNdlK8Q0gUtij542JfJx/0CASiNLEMZr6 HdOGIF9UDBExtHM07k/0ggfyOM2y4v/W648MjBub+GjUt5V3AZUzfQF5Oqmtmj4D gU4+7s+mI6DK6fQatw0uG9sOxBVOdc3Gh3ss5MR5rFU33Zkr69i9r4MGzxRb8PxJ zcv35IRGNdJ2TK9oSF3Sxnw4pJhS2gs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:21 2025 by rpki-client