$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa File: d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa (raw, json) Hash identifier: N3e/LXiU+e/52ZouhyRKsYU07/lflRAhHIInKT3FygI= Subject key identifier: BE:9F:A7:91:47:A4:27:AA:09:ED:3B:71:D9:53:66:07:72:DF:AC:32 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B2A2C5D33E0E3671C6F040800 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 172.96.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5d:33:e0:e3:67:1c:6f:04:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=f9b6785c-6bd7-47d8-bcc4-6ad909428c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:1b:09:7c:46:b9:96:38:a2:ff:18:94:e7: ec:bc:cd:4b:3a:df:47:1e:6a:a6:2a:3b:a0:ae:04: 4d:e5:c8:b4:d2:5e:61:62:47:e9:08:da:6e:da:98: f9:40:59:49:62:67:8c:a1:37:1f:75:f8:b9:5e:4e: 93:01:99:fc:5c:f4:ca:4d:f7:75:54:bd:27:27:33: ad:d4:39:ba:c0:3a:5b:ef:f5:bd:ee:0b:3f:14:fa: f5:83:9c:21:18:32:75:14:ee:31:ec:c8:dc:e6:ae: e0:8e:01:96:88:ed:88:9f:8a:ed:cd:e6:ad:9d:4a: 8a:5d:b5:87:04:f4:ea:de:d6:67:3b:26:a1:47:cd: 66:24:05:0a:e1:ae:07:30:4e:dd:b4:f1:ce:0a:e2: 63:31:86:cd:21:52:a8:bb:15:02:54:06:c8:8d:d7: 7e:3a:54:9b:3d:83:0d:92:8e:c8:cc:1a:84:42:80: 6d:f9:47:d8:e9:77:30:44:a2:d8:e4:6b:b1:94:69: 73:55:aa:cb:4b:aa:b8:13:c5:80:b7:d0:a2:98:87: fe:5a:17:69:97:53:20:30:45:f3:8c:57:42:74:12: ed:e0:21:4e:f9:00:f3:89:16:94:04:cc:c0:ea:0f: 92:ff:19:b8:6d:0d:95:a6:5d:0c:d4:89:0f:d8:23: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9F:A7:91:47:A4:27:AA:09:ED:3B:71:D9:53:66:07:72:DF:AC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7c:f2:6b:24:0c:1c:0e:e7:f3:8a:fb:b4:e2:53:49:45:9f: a4:3c:a3:14:ca:a0:ae:ba:07:65:c4:b6:9a:f4:5f:e1:d0:8c: 10:38:e9:03:c4:ca:d1:96:a6:28:d6:57:0b:8c:bb:fe:f3:67: 50:ae:36:d6:d0:5a:f0:d9:02:77:a8:f7:29:c1:5f:cc:2d:46: 8b:c7:27:ee:74:04:ae:cd:2d:c5:1b:e6:f0:0a:8a:24:a3:78: 3a:8f:89:e8:0e:be:18:7f:7f:9a:0d:6e:02:f7:91:a2:bc:9f: 2d:73:9f:ed:b3:1d:a7:81:81:fe:b2:b6:94:fa:98:f8:b9:c1: 8e:ba:16:ea:51:f3:d5:3b:66:9e:26:f2:51:5f:98:b8:42:c9: dc:5a:f5:9d:ee:12:20:67:0b:16:c1:07:72:38:5e:ea:98:e1: 38:1e:4a:f3:8c:a0:1d:3f:56:3f:9b:8d:48:03:4c:fd:30:32: 73:b0:a0:0f:e4:8d:ba:f2:a8:d2:38:10:26:6d:80:e5:cb:24: c8:4e:84:f1:a5:15:c5:7e:f2:49:4a:d1:be:a7:fd:58:df:24: f3:8f:5d:74:8b:1e:bb:a2:2e:ec:22:76:c3:cf:9e:34:e6:d7: 6c:28:37:4c:8c:44:45:c2:bf:f2:75:33:bf:6e:d3:8f:29:e8: b4:e5:b3:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF0z4ONnHG8ECAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjliNjc4NWMtNmJkNy00N2Q4LWJjYzQtNmFkOTA5NDI4YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHsbCXxGuZY4ov8YlOfsvM1LOt9HHmqmKjug rgRN5ci00l5hYkfpCNpu2pj5QFlJYmeMoTcfdfi5Xk6TAZn8XPTKTfd1VL0nJzOt 1Dm6wDpb7/W97gs/FPr1g5whGDJ1FO4x7Mjc5q7gjgGWiO2In4rtzeatnUqKXbWH BPTq3tZnOyahR81mJAUK4a4HME7dtPHOCuJjMYbNIVKouxUCVAbIjdd+OlSbPYMN ko7IzBqEQoBt+UfY6XcwRKLY5GuxlGlzVarLS6q4E8WAt9CimIf+Whdpl1MgMEXz jFdCdBLt4CFO+QDziRaUBMzA6g+S/xm4bQ2Vpl0M1IkP2CPDIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6fp5FHpCeqCe07cdlTZgdy36wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDUxNjhhZWQtOWU4OC0z OTVlLWE5ZTQtMjFmNjhjYmIxZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl88mskDBwO5/OK+7TiU0lFn6Q8oxTKoK66B2XEtpr0X+HQjBA46QPE ytGWpijWVwuMu/7zZ1CuNtbQWvDZAneo9ynBX8wtRovHJ+50BK7NLcUb5vAKiiSj eDqPiegOvhh/f5oNbgL3kaK8ny1zn+2zHaeBgf6ytpT6mPi5wY66FupR89U7Zp4m 8lFfmLhCydxa9Z3uEiBnCxbBB3I4XuqY4TgeSvOMoB0/Vj+bjUgDTP0wMnOwoA/k jbryqNI4ECZtgOXLJMhOhPGlFcV+8klK0b6n/VjfJPOPXXSLHruiLuwidsPPnjTm 12woN0yMREXCv/J1M79u048p6LTlsxg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:36 2025 by rpki-client