$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d8e500c6-8500-3075-a547-1d20cb1975d1.roa File: d8e500c6-8500-3075-a547-1d20cb1975d1.roa (raw, json) Hash identifier: D5CwZD2D53d82t+kdX3cuQEd6ThU0phSIArTJTu6w9Y= Subject key identifier: B6:0E:B2:E3:00:A9:0A:BD:2B:14:38:D7:DB:D5:15:7C:4F:1E:EC:A3 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B2A2C5954EA50FCF267071900 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d8e500c6-8500-3075-a547-1d20cb1975d1.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 168.91.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:59:54:ea:50:fc:f2:67:07:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=7da61e48-9b9b-4037-8ad4-08fc26a3a0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:4a:08:ad:f2:a4:56:37:0f:15:16:6c:fb: d1:33:22:d6:ea:b7:59:22:01:fd:70:d5:37:0d:66: 40:fa:ff:2f:61:db:a8:67:e8:b4:a9:4e:5b:7b:46: bd:b9:0f:ea:8b:59:51:73:8c:00:86:0e:5d:be:5e: 27:b0:e7:da:62:2d:df:10:b7:ad:26:90:37:6f:3a: d0:ef:e4:38:47:0a:b6:73:51:52:24:8f:09:82:79: 70:59:0a:d1:20:c0:8c:f1:d0:8b:23:c4:bf:dc:e9: b9:90:19:87:a3:64:ac:85:c1:33:82:69:ec:97:25: 79:54:8c:83:f6:2e:b7:42:6e:b9:c1:71:2b:4c:25: bb:ca:2b:52:c2:50:41:4e:e8:25:04:0a:4f:49:dd: 36:a2:c2:c8:ea:68:a4:27:04:fe:94:2c:d0:3e:e4: 59:b2:2b:8d:e8:3a:9c:4f:c2:fa:eb:c5:fd:d6:5d: 20:c7:34:6f:f8:ea:c8:57:5d:6f:da:84:c9:99:cc: a0:ed:45:34:4d:c2:35:0c:f7:a0:91:61:aa:9b:a0: 62:29:9c:e1:dc:33:20:73:5b:da:b2:c2:80:d4:c2: e4:b8:34:c9:17:78:75:a2:e0:68:6e:8d:f1:0b:59: 75:45:c8:e1:37:00:90:40:70:14:8c:30:8e:11:ec: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0E:B2:E3:00:A9:0A:BD:2B:14:38:D7:DB:D5:15:7C:4F:1E:EC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d8e500c6-8500-3075-a547-1d20cb1975d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:dc:12:f0:52:7d:33:e4:4d:8d:25:b5:6c:3c:f3:83:2b:42: 50:b2:aa:80:ee:96:f5:83:1d:5c:1b:2e:f3:4f:80:4c:66:bf: e1:41:a7:f5:e3:44:45:ad:18:a6:d2:c4:85:bd:1c:9c:38:a3: b0:9f:81:67:57:80:45:77:bf:78:5a:c4:94:6b:a9:b3:ba:11: ab:40:36:6d:1a:3d:5e:6b:cc:cc:34:5d:2e:c1:1f:f5:a6:f2: 70:04:c6:48:00:10:01:6e:83:ce:aa:a9:62:95:ba:75:7e:d1: b1:04:b2:46:aa:f9:10:1b:51:e3:fe:ea:3f:1f:50:6c:c7:76: 63:4e:81:6a:36:68:3e:7e:5c:ea:dd:17:69:42:23:b9:cd:58: 65:5f:96:2e:88:c0:a6:25:44:e2:3a:1a:35:29:33:38:c4:a9: bf:47:56:39:8b:ce:49:23:85:e1:ce:97:29:28:eb:f5:c4:39: 9a:c0:b4:b5:1a:ab:09:0b:be:24:5c:21:12:2a:ec:8b:11:6d: d8:30:75:99:41:83:97:e7:6f:12:5b:51:2e:c6:15:b0:06:36: ec:cf:e9:4e:76:7e:06:15:f7:d4:dc:52:c0:e3:4e:59:ca:1c: aa:68:3b:54:a0:da:6c:3c:05:2b:62:c9:7d:70:7d:cf:ca:47: 54:42:ef:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLFlU6lD88mcHGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk N2RhNjFlNDgtOWI5Yi00MDM3LThhZDQtMDhmYzI2YTNhMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOxKCK3ypFY3DxUWbPvRMyLW6rdZIgH9cNU3 DWZA+v8vYduoZ+i0qU5be0a9uQ/qi1lRc4wAhg5dvl4nsOfaYi3fELetJpA3bzrQ 7+Q4Rwq2c1FSJI8JgnlwWQrRIMCM8dCLI8S/3Om5kBmHo2SshcEzgmnslyV5VIyD 9i63Qm65wXErTCW7yitSwlBBTuglBApPSd02osLI6mikJwT+lCzQPuRZsiuN6Dqc T8L668X91l0gxzRv+OrIV11v2oTJmcyg7UU0TcI1DPegkWGqm6BiKZzh3DMgc1va ssKA1MLkuDTJF3h1ouBobo3xC1l1RcjhNwCQQHAUjDCOEewHywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYOsuMAqQq9KxQ419vVFXxPHuyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDhlNTAwYzYtODUwMC0z MDc1LWE1NDctMWQyMGNiMTk3NWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrcEvBSfTPkTY0ltWw884MrQlCyqoDulvWDHVwbLvNPgExmv+FBp/Xj REWtGKbSxIW9HJw4o7CfgWdXgEV3v3haxJRrqbO6EatANm0aPV5rzMw0XS7BH/Wm 8nAExkgAEAFug86qqWKVunV+0bEEskaq+RAbUeP+6j8fUGzHdmNOgWo2aD5+XOrd F2lCI7nNWGVfli6IwKYlROI6GjUpMzjEqb9HVjmLzkkjheHOlyko6/XEOZrAtLUa qwkLviRcIRIq7IsRbdgwdZlBg5fnbxJbUS7GFbAGNuzP6U52fgYV99TcUsDjTlnK HKpoO1Sg2mw8BStiyX1wfc/KR1RC79o= -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:31 2025 by rpki-client