$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef6040de-7df1-32e5-bbc3-23e0077a7237.roa File: ef6040de-7df1-32e5-bbc3-23e0077a7237.roa (raw, json) Hash identifier: 6fIsthEFeLWmSPRy8Q172L92vLhn0FLTG7gak8lFfd4= Subject key identifier: A9:37:1A:65:85:14:1E:E4:24:69:09:8B:EF:3D:02:F1:37:66:D4:AD Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584AE4612491DC2F73DF1964DD40 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef6040de-7df1-32e5-bbc3-23e0077a7237.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 7018 IP address blocks: 209.163.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:24:91:dc:2f:73:df:19:64:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=75b2b2dc-01e6-4f53-91d8-78e8b4fc32fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:a5:30:a6:01:78:2b:1b:d9:e5:4d:54:4c: 99:6a:7b:82:c3:2f:cb:50:6b:06:20:4c:ae:67:db: 4f:0a:ef:cd:bd:c0:50:c9:17:93:1c:3f:56:b9:e0: 5a:2e:94:a1:2d:f2:98:c3:bf:1b:4c:30:8f:b3:5c: 0a:46:3b:48:0d:57:ff:07:de:a9:67:ea:3e:fa:90: 73:12:ed:96:a0:21:9d:48:50:3c:44:c3:af:83:f3: 5a:7f:a4:3e:ae:31:a2:86:93:ef:0b:c8:a6:86:e3: ae:d6:79:f4:22:5f:3a:70:08:fb:08:40:65:5b:6b: 29:96:82:9c:2a:5d:f8:8d:1e:11:99:e5:4a:fa:33: bd:62:8a:c2:ec:f7:f9:ca:57:c2:28:ce:f1:7e:b6: 6b:42:ef:be:85:6c:57:6a:a5:c8:27:67:36:ee:a4: 62:6c:b0:dd:55:15:99:07:27:5c:ac:9e:f6:70:07: bf:df:4e:fc:32:a9:56:2e:10:75:06:28:b6:d7:4a: 8b:ac:6d:c4:3a:91:e1:eb:45:77:ec:4d:b8:d9:ad: f0:47:66:d7:34:b5:e7:59:46:9b:2e:45:71:b5:bb: ac:9f:37:b3:f2:b0:a0:37:3c:66:24:d5:a7:c7:4c: 24:a0:bf:87:3b:40:7d:56:21:e5:63:86:64:7a:30: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:37:1A:65:85:14:1E:E4:24:69:09:8B:EF:3D:02:F1:37:66:D4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef6040de-7df1-32e5-bbc3-23e0077a7237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.163.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:22:9d:33:ab:a9:dd:ba:ed:d0:4d:37:63:59:a0:fc:c7:6d: f0:54:9a:d3:1c:45:14:84:a0:46:d6:51:f6:fe:bd:e0:d9:8b: 88:c9:04:22:cb:f9:d8:f4:d5:4d:1e:c2:6e:01:ba:da:b3:87: 5e:25:7b:77:a2:f6:4d:99:68:a6:79:0e:87:37:51:14:6a:bf: 49:16:31:54:16:46:33:41:32:8f:a9:6b:e0:a7:41:f4:9e:1f: 70:c4:ba:b6:75:72:f2:24:f0:42:9b:25:26:b0:81:5c:6b:27: 7b:ad:db:54:4c:1b:f1:d7:79:20:b0:09:d8:b1:7c:ef:76:97: af:8a:d8:08:2c:9f:10:9b:0c:b6:cd:9d:27:c5:0e:0e:4d:e2: 3b:e0:ea:57:9c:67:0d:21:f3:f2:18:f3:45:fc:89:f5:f6:e1: 65:30:33:78:49:03:4e:1e:50:70:0d:e2:18:8e:57:e4:be:e3: 96:07:8e:21:f3:db:3f:2d:81:28:1f:4e:a9:81:87:e4:e0:9f: 5a:04:4d:ef:b0:e1:0e:e3:70:35:ab:97:83:18:91:96:48:59: 53:5c:de:13:20:e3:c1:93:ed:0b:6e:dd:7b:0d:f9:9d:60:27: f9:4c:7b:4d:7e:84:fc:a7:4e:fc:7d:e2:59:6c:d9:df:e6:31: 22:bf:a3:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSSR3C9z3xlk3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NzViMmIyZGMtMDFlNi00ZjUzLTkxZDgtNzhlOGI0ZmMzMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKilMKYBeCsb2eVNVEyZanuCwy/LUGsGIEyu Z9tPCu/NvcBQyReTHD9WueBaLpShLfKYw78bTDCPs1wKRjtIDVf/B96pZ+o++pBz Eu2WoCGdSFA8RMOvg/Naf6Q+rjGihpPvC8imhuOu1nn0Il86cAj7CEBlW2sploKc Kl34jR4RmeVK+jO9YorC7Pf5ylfCKM7xfrZrQu++hWxXaqXIJ2c27qRibLDdVRWZ BydcrJ72cAe/3078MqlWLhB1Bii210qLrG3EOpHh60V37E242a3wR2bXNLXnWUab LkVxtbusnzez8rCgNzxmJNWnx0wkoL+HO0B9ViHlY4ZkejCukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk3GmWFFB7kJGkJi+89AvE3ZtStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWY2MDQwZGUtN2RmMS0z MmU1LWJiYzMtMjNlMDA3N2E3MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwinTOrqd267dBNN2NZoPzHbfBUmtMcRRSEoEbWUfb+veDZi4jJBCLL +dj01U0ewm4Butqzh14le3ei9k2ZaKZ5Doc3URRqv0kWMVQWRjNBMo+pa+CnQfSe H3DEurZ1cvIk8EKbJSawgVxrJ3ut21RMG/HXeSCwCdixfO92l6+K2AgsnxCbDLbN nSfFDg5N4jvg6lecZw0h8/IY80X8ifX24WUwM3hJA04eUHAN4hiOV+S+45YHjiHz 2z8tgSgfTqmBh+Tgn1oETe+w4Q7jcDWrl4MYkZZIWVNc3hMg48GT7Qtu3XsN+Z1g J/lMe01+hPynTvx94lls2d/mMSK/o7M= -----END CERTIFICATE-----Generated at Sat Aug 23 06:54:21 2025 by rpki-client