$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ee8ab8ac-78f9-3be0-8fa4-122e4759c7b3.roa File: ee8ab8ac-78f9-3be0-8fa4-122e4759c7b3.roa (raw, json) Hash identifier: k0AfbhJViEEMiTcWlVOAdWlYQGBW9766pCa2shbnEow= Subject key identifier: 77:11:5D:3C:22:BB:5C:6D:CE:E0:8C:39:47:F8:18:74:89:11:CA:B8 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806FACB6FD0DDE079E4C0A0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ee8ab8ac-78f9-3be0-8fa4-122e4759c7b3.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 172.96.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:fa:cb:6f:d0:dd:e0:79:e4:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=06f52d85-2b13-4944-aa8c-9e78f4428416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:91:9b:04:a8:70:60:47:d3:b3:b8:f3:3e: 1b:09:13:f9:1e:d4:54:15:d4:2b:56:35:58:ed:75: 9d:f1:c2:3e:4f:0e:ba:1e:5c:f5:03:47:83:ba:06: e7:b4:47:aa:c3:47:3a:52:9c:3f:89:64:43:fd:cc: 43:00:ef:77:45:6f:38:aa:21:37:56:ee:81:b2:e8: c9:ab:10:92:8d:d0:73:f5:13:6d:69:c9:64:ba:7e: 7f:dc:44:57:b6:b7:6f:18:fb:17:30:14:47:86:bf: 92:35:83:a4:83:d6:77:61:4b:28:dc:65:e9:3f:4c: 43:64:a2:83:a2:43:bb:40:af:b8:1d:37:89:05:57: 02:0f:8b:4b:a7:a7:1f:69:93:65:ee:4b:5b:c4:12: b4:17:d9:ed:96:7d:ed:df:43:fe:82:c1:c2:ea:e4: 89:c0:75:49:91:d9:6f:76:73:7d:db:ce:1e:de:41: 8a:c7:56:a8:9d:a4:dd:e2:0d:39:60:a9:10:d6:f3: ec:d6:4e:f4:54:48:d9:1a:ef:d1:50:c8:b5:49:a9: 3a:36:63:35:bf:c2:d0:06:8a:10:4c:b5:ae:b8:00: 5f:93:09:25:66:ad:ac:33:dd:20:c8:d6:d0:fa:78: bf:70:74:83:d0:4c:5f:ba:f4:91:36:f8:2e:63:af: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:11:5D:3C:22:BB:5C:6D:CE:E0:8C:39:47:F8:18:74:89:11:CA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ee8ab8ac-78f9-3be0-8fa4-122e4759c7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:05:c8:49:9d:1d:4f:b7:ce:94:28:0b:15:8a:62:85:a9:4d: 7d:c4:5f:a6:07:a4:cc:84:65:28:31:16:47:eb:6c:98:55:54: 63:1e:99:6a:e5:05:36:45:af:e7:88:5c:e5:42:68:ab:78:58: c8:a1:45:8f:96:48:c5:1c:86:b6:40:1a:4b:b2:93:4f:9d:ac: 50:35:83:32:1d:f0:d7:e4:62:ec:af:4e:39:cb:22:e5:3b:2d: f9:84:99:07:61:d3:43:ee:98:b6:94:e4:9e:b4:52:0a:0f:6c: 59:f4:5c:97:2d:6b:86:d8:f7:dc:42:20:43:4e:0a:ce:19:e5: fc:5e:70:1e:03:de:c1:0b:d7:6e:bb:db:a1:97:d3:08:7e:5f: 4b:d9:8d:b2:19:4b:d3:25:0a:f9:40:fb:78:6c:08:9d:c5:af: 8d:25:ef:b6:8a:c9:55:f2:03:b8:0c:43:89:56:81:a9:31:2f: c9:0b:9f:8a:fb:63:bc:5a:29:e8:1a:6a:71:f7:cb:ac:1e:13: f5:07:b0:c9:d8:6a:9e:65:7f:a3:52:37:6a:bd:28:ab:b1:e1: e1:e9:ae:6b:1c:f8:32:27:1c:44:50:bf:a5:35:d5:7b:54:fc: c2:a0:ba:0f:59:65:42:8b:27:d0:7e:0b:f0:89:52:dc:3b:13: 56:48:5a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvrLb9Dd4HnkwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MDZmNTJkODUtMmIxMy00OTQ0LWFhOGMtOWU3OGY0NDI4NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ6RmwSocGBH07O48z4bCRP5HtRUFdQrVjVY 7XWd8cI+Tw66Hlz1A0eDugbntEeqw0c6Upw/iWRD/cxDAO93RW84qiE3Vu6BsujJ qxCSjdBz9RNtaclkun5/3ERXtrdvGPsXMBRHhr+SNYOkg9Z3YUso3GXpP0xDZKKD okO7QK+4HTeJBVcCD4tLp6cfaZNl7ktbxBK0F9ntln3t30P+gsHC6uSJwHVJkdlv dnN9284e3kGKx1aonaTd4g05YKkQ1vPs1k70VEjZGu/RUMi1Sak6NmM1v8LQBooQ TLWuuABfkwklZq2sM90gyNbQ+ni/cHSD0ExfuvSRNvguY68n0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcRXTwiu1xtzuCMOUf4GHSJEcq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWU4YWI4YWMtNzhmOS0z YmUwLThmYTQtMTIyZTQ3NTljN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsFyEmdHU+3zpQoCxWKYoWpTX3EX6YHpMyEZSgxFkfrbJhVVGMemWrl BTZFr+eIXOVCaKt4WMihRY+WSMUchrZAGkuyk0+drFA1gzId8NfkYuyvTjnLIuU7 LfmEmQdh00PumLaU5J60UgoPbFn0XJcta4bY99xCIENOCs4Z5fxecB4D3sEL1267 26GX0wh+X0vZjbIZS9MlCvlA+3hsCJ3Fr40l77aKyVXyA7gMQ4lWgakxL8kLn4r7 Y7xaKegaanH3y6weE/UHsMnYap5lf6NSN2q9KKux4eHprmsc+DInHERQv6U11XtU /MKgug9ZZUKLJ9B+C/CJUtw7E1ZIWkk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:40 2025 by rpki-client