$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea236730-7d41-3930-987a-025491e99693.roa File: ea236730-7d41-3930-987a-025491e99693.roa (raw, json) Hash identifier: HpxyXAsf4/bhiAWohPV2vhEgM/b3B6xVfJmfbyNgVM4= Subject key identifier: 2A:80:35:42:2C:BA:25:54:CE:CC:23:8F:37:A7:3C:02:15:23:73:13 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B76F25A0301429A0F642CEC80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea236730-7d41-3930-987a-025491e99693.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 397630 IP address blocks: 158.62.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5a:03:01:42:9a:0f:64:2c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=255b25ed-0363-4810-88a1-d4c1e0900255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:b8:1e:cf:2a:e5:18:bc:38:2c:a3:4e:21: 2d:98:ac:92:ed:f2:2b:65:69:18:cc:5c:8c:9b:35: ef:2b:5b:ed:bb:b3:1d:ff:80:5d:b5:09:c0:6e:0d: 22:c5:79:62:af:52:b3:40:f1:36:6b:6d:56:54:db: d7:90:1f:03:aa:01:97:11:4b:85:3b:6d:3f:ce:7b: 04:e3:2c:5f:bf:23:ae:ff:24:83:ce:40:bc:d0:d3: c9:e9:51:62:4e:08:61:10:3f:23:5b:70:dd:41:b1: d1:29:c7:91:7c:61:e6:c1:9b:ea:ec:31:39:28:3e: eb:60:b5:2d:80:c0:fb:8a:98:56:1f:7b:78:1f:77: 88:95:74:ad:05:be:c4:9d:30:e3:92:7b:50:55:20: b4:71:b5:07:2b:86:d2:22:51:9f:cd:99:71:3a:f7: 88:11:c5:8a:88:99:41:0a:3b:87:59:14:40:92:73: 7b:05:61:4b:c9:74:bb:ec:45:33:bd:a5:3b:70:4e: fd:6b:ff:0e:db:4a:b8:2a:99:aa:85:2a:6c:d1:b0: a9:c8:2f:f6:8a:0d:1c:31:62:36:ff:c1:32:58:63: 3b:47:d9:79:31:d3:d8:5b:2a:cf:c3:18:ec:45:00: 5d:3a:5d:65:ea:55:61:5e:46:cd:62:12:65:46:c4: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:80:35:42:2C:BA:25:54:CE:CC:23:8F:37:A7:3C:02:15:23:73:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea236730-7d41-3930-987a-025491e99693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:11:94:6c:d4:48:7d:ae:fb:80:7d:08:0e:d8:6a:73:20:f5: 4d:0a:6d:87:8c:73:1b:d8:61:9a:54:86:07:b3:c3:02:df:22: 95:62:f4:37:29:06:68:c7:fe:f6:a1:ef:b6:c8:ca:1f:01:63: 3c:4a:6e:fe:8a:0d:f7:a0:86:64:50:5a:e4:c1:9f:27:df:0a: d1:6f:24:6f:c6:86:cb:21:1d:bf:3d:f6:10:b5:e6:0c:85:b2: 6a:34:79:b4:f9:b4:15:55:6f:12:78:7e:51:27:31:3b:21:02: f1:24:4a:7a:ca:72:35:eb:2e:53:33:63:c9:ad:c5:f2:0c:c7: cf:a7:d6:88:e1:d6:f8:4b:63:23:9d:da:f0:ec:2c:f6:e6:dd: ef:9f:65:1f:1f:0d:65:7c:38:7b:0e:61:bb:cd:8c:dc:ef:67: f4:75:eb:1a:40:fa:65:be:6d:34:3e:39:2f:68:52:8b:e2:6c: 67:1a:03:f6:c8:34:12:b1:d1:aa:87:96:aa:eb:de:02:e1:aa: 60:37:16:aa:c8:c2:5d:57:43:71:83:6c:44:8f:54:43:94:88: 34:24:db:95:a2:4f:2c:84:c4:ca:b3:3a:ab:0a:2f:db:53:b1: a3:c0:c3:72:ee:c2:f9:97:66:48:20:34:d8:f9:7a:e3:83:ca: ed:e3:6d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28loDAUKaD2Qs7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjU1YjI1ZWQtMDM2My00ODEwLTg4YTEtZDRjMWUwOTAwMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihS4Hs8q5Ri8OCyjTiEtmKyS7fIrZWkYzFyM mzXvK1vtu7Md/4BdtQnAbg0ixXlir1KzQPE2a21WVNvXkB8DqgGXEUuFO20/znsE 4yxfvyOu/ySDzkC80NPJ6VFiTghhED8jW3DdQbHRKceRfGHmwZvq7DE5KD7rYLUt gMD7iphWH3t4H3eIlXStBb7EnTDjkntQVSC0cbUHK4bSIlGfzZlxOveIEcWKiJlB CjuHWRRAknN7BWFLyXS77EUzvaU7cE79a/8O20q4KpmqhSps0bCpyC/2ig0cMWI2 /8EyWGM7R9l5MdPYWyrPwxjsRQBdOl1l6lVhXkbNYhJlRsTfvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqANUIsuiVUzswjjzenPAIVI3MTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWEyMzY3MzAtN2Q0MS0z OTMwLTk4N2EtMDI1NDkxZTk5NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYRlGzUSH2u+4B9CA7YanMg9U0KbYeMcxvYYZpUhgezwwLfIpVi9Dcp BmjH/vah77bIyh8BYzxKbv6KDfeghmRQWuTBnyffCtFvJG/GhsshHb899hC15gyF smo0ebT5tBVVbxJ4flEnMTshAvEkSnrKcjXrLlMzY8mtxfIMx8+n1ojh1vhLYyOd 2vDsLPbm3e+fZR8fDWV8OHsOYbvNjNzvZ/R16xpA+mW+bTQ+OS9oUovibGcaA/bI NBKx0aqHlqrr3gLhqmA3FqrIwl1XQ3GDbESPVEOUiDQk25WiTyyExMqzOqsKL9tT saPAw3LuwvmXZkggNNj5euODyu3jbeA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:59 2025 by rpki-client