$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d562376e-9b00-3347-abfa-140de0c1f374.roa File: d562376e-9b00-3347-abfa-140de0c1f374.roa (raw, json) Hash identifier: /S8+SrN/L1lejZbk717ZS+I7uxORabcrmkSftuNNAEo= Subject key identifier: 85:83:24:7A:63:B7:F0:14:51:BF:F4:B2:3E:57:1B:C5:36:5D:58:D1 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806F91A53F2BE1682744080 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d562376e-9b00-3347-abfa-140de0c1f374.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 170.199.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:f9:1a:53:f2:be:16:82:74:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=33c701c4-f18a-4db5-bd42-42ef4cf02a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:63:28:a0:ca:c8:dd:d4:75:aa:24:b5:60: 38:5b:bd:31:96:a1:c5:36:c6:b8:37:5c:59:84:ab: a8:e0:88:49:4c:ef:1a:b7:8c:41:2f:b3:8c:27:09: a9:10:75:01:f8:72:98:15:02:2a:36:ef:8d:24:9d: 02:98:d5:b6:94:1b:a7:ff:aa:f2:21:da:57:90:1e: 69:0b:84:28:3f:fa:05:55:d7:ab:a5:67:73:81:48: aa:3b:62:cf:04:cf:90:b3:90:89:60:8b:90:f4:2b: a0:28:ff:dd:bf:c3:8b:41:5d:04:04:a8:56:a5:ae: 5d:61:ff:c6:3b:61:41:0a:6d:44:a6:33:bc:bc:88: 9d:26:d1:05:fd:53:07:e2:4c:b5:2d:37:e8:eb:dd: 8a:58:49:dc:4f:59:55:4d:85:50:5e:2f:d4:76:0c: 8f:be:a2:f4:66:f7:d3:15:18:92:ac:36:0d:40:d7: bf:2e:35:69:89:b5:3e:4e:e2:78:20:5d:51:8f:9e: e0:ae:26:50:53:9d:85:f9:4f:d1:9d:4f:90:f9:f0: d8:31:8c:40:69:de:b3:bd:6d:e2:d0:77:d3:8f:be: 57:8d:4c:5f:a5:17:6b:88:43:bf:d7:fa:57:ea:a5: 7a:5b:d9:64:1e:d5:9a:8c:20:00:6d:e9:e9:a6:a7: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:83:24:7A:63:B7:F0:14:51:BF:F4:B2:3E:57:1B:C5:36:5D:58:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d562376e-9b00-3347-abfa-140de0c1f374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:ad:96:b3:93:a1:5e:cb:2a:b5:63:4f:53:c2:a0:e5:dd:63: b7:13:29:16:3c:16:e1:06:15:3b:66:b4:22:f1:e7:04:83:10: a9:25:c9:5e:34:af:0d:34:78:c5:c9:f7:d6:ea:ce:5a:58:b6: 4e:63:fd:d4:95:97:3a:a0:4f:63:c0:7b:c9:2d:ac:d0:fc:5f: 04:43:bc:87:38:b5:27:d0:64:9b:fb:e2:dd:62:ce:74:3f:91: 3e:2f:ea:0f:ed:c7:48:3c:de:e6:56:e9:21:fa:91:63:8c:2d: 86:07:e0:b8:02:4d:4b:7b:dc:3b:71:91:e8:ce:fa:05:3f:00: 25:dd:e2:47:0f:1b:ec:98:b7:71:89:c2:80:83:34:b4:5b:9c: c9:aa:94:0b:66:2a:5b:6c:19:02:6f:8f:7c:5a:ad:d8:2a:6f: 68:52:1f:65:a5:c0:f1:06:a7:96:0c:a3:e2:6c:e1:5f:28:66: 7a:e3:26:df:9b:b2:ce:87:35:fc:ba:a5:7d:e3:b3:0f:8d:be: 20:15:79:e2:76:0c:6d:45:ee:48:c6:14:5d:f3:28:71:b1:b0: 01:12:3c:7a:b5:56:79:d7:b5:15:8b:ad:7c:65:a3:22:9c:ba: d6:f1:d8:93:6c:08:3c:eb:7c:04:e1:39:c9:3f:ad:d2:66:94: c7:d1:64:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvkaU/K+FoJ0QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzNjNzAxYzQtZjE4YS00ZGI1LWJkNDItNDJlZjRjZjAyYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwljKKDKyN3UdaoktWA4W70xlqHFNsa4N1xZ hKuo4IhJTO8at4xBL7OMJwmpEHUB+HKYFQIqNu+NJJ0CmNW2lBun/6ryIdpXkB5p C4QoP/oFVderpWdzgUiqO2LPBM+Qs5CJYIuQ9CugKP/dv8OLQV0EBKhWpa5dYf/G O2FBCm1EpjO8vIidJtEF/VMH4ky1LTfo692KWEncT1lVTYVQXi/UdgyPvqL0ZvfT FRiSrDYNQNe/LjVpibU+TuJ4IF1Rj57griZQU52F+U/RnU+Q+fDYMYxAad6zvW3i 0HfTj75XjUxfpRdriEO/1/pX6qV6W9lkHtWajCAAbenppqfAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWDJHpjt/AUUb/0sj5XG8U2XVjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDU2MjM3NmUtOWIwMC0z MzQ3LWFiZmEtMTQwZGUwYzFmMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2tlrOToV7LKrVjT1PCoOXdY7cTKRY8FuEGFTtmtCLx5wSDEKklyV40 rw00eMXJ99bqzlpYtk5j/dSVlzqgT2PAe8ktrND8XwRDvIc4tSfQZJv74t1iznQ/ kT4v6g/tx0g83uZW6SH6kWOMLYYH4LgCTUt73DtxkejO+gU/ACXd4kcPG+yYt3GJ woCDNLRbnMmqlAtmKltsGQJvj3xardgqb2hSH2WlwPEGp5YMo+Js4V8oZnrjJt+b ss6HNfy6pX3jsw+NviAVeeJ2DG1F7kjGFF3zKHGxsAESPHq1VnnXtRWLrXxloyKc utbx2JNsCDzrfAThOck/rdJmlMfRZMc= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:10 2025 by rpki-client