$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa File: f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa (raw, json) Hash identifier: wcE50dU7tXUC4zuIqd+DNu4VZFAnwFL5NOvk9CHNFeE= Subject key identifier: CA:D1:91:6A:BC:94:7A:7E:14:27:7B:44:DF:51:AB:3A:69:33:3F:C3 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B5B073B16D68646D1EC752200 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 64267 IP address blocks: 168.245.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3b:16:d6:86:46:d1:ec:75:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=ae794baa-f409-429a-830e-c15d95012a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:b3:9b:7a:ea:37:97:16:cf:54:bc:84:5a: c7:ef:3d:f6:97:48:16:41:8d:0c:67:21:4d:3d:de: 00:98:41:90:ca:bd:e3:4f:f4:69:35:03:ca:b0:1f: 2c:a5:74:dd:50:fa:79:d5:41:ed:68:2f:8d:7d:1d: fb:f3:01:32:5e:b8:09:ee:57:03:4b:e2:4b:22:06: 48:5f:51:12:ac:db:01:cd:3c:55:fb:04:ae:a8:d5: de:55:1a:6d:b3:1e:1a:b0:12:e7:51:bc:24:c7:d6: 8f:e7:ba:a1:7b:14:9d:3d:5f:79:05:6e:86:b4:91: c2:1b:59:4c:7b:95:00:dc:fa:c1:66:a0:54:76:d6: 60:34:ab:b0:f6:49:8f:60:62:31:d2:8e:2b:96:98: 67:0f:df:8a:ce:e4:71:3f:a6:30:37:79:c4:ef:d0: f8:de:cb:a3:fc:c9:6e:ec:9c:a9:89:b9:f2:74:2b: 40:35:d1:04:69:74:03:79:27:a0:72:81:a6:4a:00: 63:ef:8e:1c:1e:d2:ed:e5:0c:56:e9:21:b7:b3:a3: b1:a2:47:8e:93:b5:79:f2:c0:c8:40:2b:51:5d:af: 5f:4d:d4:f1:01:2d:fc:66:65:c8:ef:63:d3:74:97: 14:7a:6c:b0:88:7d:fc:08:d1:0f:ea:05:9e:55:44: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D1:91:6A:BC:94:7A:7E:14:27:7B:44:DF:51:AB:3A:69:33:3F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.245.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2f:1a:5c:f7:3c:dd:b9:cd:27:48:99:06:e2:a4:da:68:43: 40:09:2b:f1:5b:a1:dc:ce:27:17:95:74:6b:11:f2:bf:ae:b6: f1:88:d5:aa:b8:28:86:bd:bf:9b:a8:cc:16:53:7b:72:15:5d: 78:08:ac:f1:ed:4d:c4:db:0c:a2:94:5b:50:f7:b5:73:1b:7c: 8d:d5:fa:21:bd:4c:82:3c:a1:ae:a2:87:6e:a2:fe:c8:2b:16: 6a:89:ee:71:5f:d3:b0:e5:e5:54:ca:5b:fb:e5:f7:5a:53:35: b0:90:9d:6a:20:57:fd:81:b4:e0:9f:ab:5e:0e:1b:8d:7a:0b: a5:46:95:94:25:22:4b:b7:de:22:6e:cf:a0:df:82:3f:78:60: 13:51:4d:47:3c:26:db:5d:7a:54:fc:65:16:03:42:4a:f4:b6: f0:46:b8:e9:25:fe:73:e6:3d:c9:10:c9:85:68:1e:62:5b:e0: 5e:4e:b5:94:5d:51:97:31:e2:1f:9e:06:b8:a1:7e:92:f2:3b: 12:5d:48:b0:b7:4e:c2:da:e9:0b:34:95:fd:2c:6a:97:2f:e9: c0:c6:6a:db:a1:7e:7d:af:28:53:f0:70:d4:b0:59:56:1d:cb: 4c:91:38:60:bc:92:35:d1:59:0f:e6:f8:e2:eb:f1:fc:a4:25: ae:2e:ae:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzsW1oZG0ex1IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YWU3OTRiYWEtZjQwOS00MjlhLTgzMGUtYzE1ZDk1MDEyYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcGzm3rqN5cWz1S8hFrH7z32l0gWQY0MZyFN Pd4AmEGQyr3jT/RpNQPKsB8spXTdUPp51UHtaC+NfR378wEyXrgJ7lcDS+JLIgZI X1ESrNsBzTxV+wSuqNXeVRptsx4asBLnUbwkx9aP57qhexSdPV95BW6GtJHCG1lM e5UA3PrBZqBUdtZgNKuw9kmPYGIx0o4rlphnD9+KzuRxP6YwN3nE79D43suj/Mlu 7JypibnydCtANdEEaXQDeSegcoGmSgBj744cHtLt5QxW6SG3s6OxokeOk7V58sDI QCtRXa9fTdTxAS38ZmXI72PTdJcUemywiH38CNEP6gWeVUSM0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrRkWq8lHp+FCd7RN9RqzppMz/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjAyM2JiZGUtZDE1OS0z N2I2LTgyY2ItYWM0NmY1MmUwZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0vGlz3PN25zSdImQbipNpoQ0AJK/FbodzOJxeVdGsR8r+utvGI1aq4 KIa9v5uozBZTe3IVXXgIrPHtTcTbDKKUW1D3tXMbfI3V+iG9TII8oa6ih26i/sgr FmqJ7nFf07Dl5VTKW/vl91pTNbCQnWogV/2BtOCfq14OG416C6VGlZQlIku33iJu z6Dfgj94YBNRTUc8JttdelT8ZRYDQkr0tvBGuOkl/nPmPckQyYVoHmJb4F5OtZRd UZcx4h+eBrihfpLyOxJdSLC3TsLa6Qs0lf0sapcv6cDGatuhfn2vKFPwcNSwWVYd y0yROGC8kjXRWQ/m+OLr8fykJa4urrw= -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:58 2025 by rpki-client