$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa File: ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa (raw, json) Hash identifier: +q+1p4bNI2LHvZGOED2TpuZeT0e9EtaZafsEGjWAM1I= Subject key identifier: 35:C0:38:EF:8A:C6:1A:48:CE:AD:27:ED:43:05:48:FC:EE:6A:8F:5C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B2A2C5D9C7D13F9557B10E1C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 192.171.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5d:9c:7d:13:f9:55:7b:10:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=06e6576c-5a72-4d6a-98ab-891f45cadd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:09:8c:d2:c0:83:a0:25:3c:c4:b4:55:5b: e4:81:5d:52:17:60:65:99:b8:82:67:66:1e:01:e5: 94:3f:53:51:7e:53:1f:b5:97:71:3e:9d:7b:d6:0d: ec:5f:f6:46:ca:4b:1c:f8:d5:51:12:11:d8:33:c6: 67:c1:12:43:e4:a2:c7:7d:6e:66:97:be:2f:eb:03: a0:3c:eb:12:42:26:0d:3c:09:fa:bb:5c:38:bc:b2: f8:7e:93:a6:d2:c8:7e:ab:59:d9:c8:e9:d7:45:3b: 5a:63:c8:b1:79:fb:b7:76:79:28:4f:82:20:f5:3d: 5c:bd:63:c4:95:91:94:a5:db:8a:c0:71:fb:fc:f9: 8d:ca:e7:d0:59:84:e4:4f:ca:1f:0b:8a:2f:55:36: 2f:a7:59:3c:bc:56:c7:45:af:c6:7f:ea:22:26:d1: c5:7a:05:a8:a0:cb:ad:b3:9b:a3:4a:26:5b:7b:fa: 36:7f:f2:7f:0d:35:8b:dd:51:9b:cf:a8:6b:03:6a: 27:f5:d0:d8:99:3d:a8:34:cf:88:3d:f9:3b:03:fb: 0c:1a:d2:ef:ca:4d:5e:83:ab:e2:a9:01:5f:1e:56: 53:1a:f9:be:c0:9f:cf:f0:35:b3:8d:97:38:8e:82: f3:3a:cf:17:2d:17:14:47:16:b6:5f:4a:c2:b0:ed: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:38:EF:8A:C6:1A:48:CE:AD:27:ED:43:05:48:FC:EE:6A:8F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:21:e2:e8:86:9c:d8:d2:05:ef:cb:58:11:86:c7:eb:47:03: a6:4d:2f:1c:80:84:74:d4:f0:de:a7:2f:79:6c:fc:41:e7:76: b2:be:8d:54:43:61:96:0f:ec:23:0c:42:99:b2:bc:c5:54:07: cd:47:37:3c:aa:55:a0:24:53:aa:95:07:4e:61:c8:82:dd:6f: fa:c8:1d:c8:4b:8a:b0:e9:5f:3c:10:2a:3d:90:cf:aa:ed:b4: fb:bf:64:43:9c:4c:bf:21:e3:b2:50:ab:e5:f6:c0:c0:c5:ce: 28:1b:a3:7e:72:12:a1:b4:43:28:7b:fb:b6:c2:83:7a:75:71: 12:b0:72:8e:c1:15:0f:0c:6c:c8:68:10:98:e9:3f:d9:a9:4e: 56:37:71:cb:06:ad:f0:4d:6f:c9:35:e4:71:b5:7b:00:68:81: b8:2a:5f:eb:74:55:01:56:bc:a5:29:c0:70:f3:28:d3:34:7e: 84:6d:d6:fa:55:83:29:c9:d9:46:5c:6a:d2:2d:5f:6c:81:ef: 2f:bc:38:6e:10:3d:d7:c9:69:46:83:31:a5:0c:9b:55:a4:4d: 43:e3:d4:64:1a:b0:f0:f1:bd:5c:ba:d6:bf:ed:c0:ec:1b:bd: 1b:7f:cf:2d:cd:3b:ee:09:ee:84:4c:e4:75:07:6d:76:52:f9: 4a:6b:20:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF2cfRP5VXsQ4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MDZlNjU3NmMtNWE3Mi00ZDZhLTk4YWItODkxZjQ1Y2FkZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSoJjNLAg6AlPMS0VVvkgV1SF2BlmbiCZ2Ye AeWUP1NRflMftZdxPp171g3sX/ZGyksc+NVREhHYM8ZnwRJD5KLHfW5ml74v6wOg POsSQiYNPAn6u1w4vLL4fpOm0sh+q1nZyOnXRTtaY8ixefu3dnkoT4Ig9T1cvWPE lZGUpduKwHH7/PmNyufQWYTkT8ofC4ovVTYvp1k8vFbHRa/Gf+oiJtHFegWooMut s5ujSiZbe/o2f/J/DTWL3VGbz6hrA2on9dDYmT2oNM+IPfk7A/sMGtLvyk1eg6vi qQFfHlZTGvm+wJ/P8DWzjZc4joLzOs8XLRcURxa2X0rCsO3wnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXAOO+KxhpIzq0n7UMFSPzuao9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWNiNmUyYTMtYzRlZS0z OGNhLWEyNmQtNDU3MWE0MjkyYmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANwh4uiGnNjSBe/LWBGGx+tHA6ZNLxyAhHTU8N6nL3ls/EHndrK+jVRD YZYP7CMMQpmyvMVUB81HNzyqVaAkU6qVB05hyILdb/rIHchLirDpXzwQKj2Qz6rt tPu/ZEOcTL8h47JQq+X2wMDFzigbo35yEqG0Qyh7+7bCg3p1cRKwco7BFQ8MbMho EJjpP9mpTlY3ccsGrfBNb8k15HG1ewBogbgqX+t0VQFWvKUpwHDzKNM0foRt1vpV gynJ2UZcatItX2yB7y+8OG4QPdfJaUaDMaUMm1WkTUPj1GQasPDxvVy61r/twOwb vRt/zy3NO+4J7oRM5HUHbXZS+UprIIQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:42 2025 by rpki-client