$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f3706e1c-6d0c-34c6-9e4e-b9f9c4ccef84.roa File: f3706e1c-6d0c-34c6-9e4e-b9f9c4ccef84.roa (raw, json) Hash identifier: HBbtC5TpiSJ67CDgkALKBUc4+gRJqjlP70Qi58CtHqY= Subject key identifier: CA:42:DD:09:F5:E0:D6:E4:79:55:90:0B:5B:16:BF:49:23:7C:96:21 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B2A2C5F0019C4939BA1CCD380 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f3706e1c-6d0c-34c6-9e4e-b9f9c4ccef84.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 66.146.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5f:00:19:c4:93:9b:a1:cc:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=19d1d309-46b9-4f55-a8ce-f24ad926028a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:1f:7d:9b:f0:80:1f:56:72:2d:9f:bf:a1: 9f:cf:a1:75:4a:c8:50:53:e7:a9:e3:da:6e:28:b5: b1:de:5e:22:63:79:7c:a7:34:1f:af:40:33:df:a7: 90:78:7f:1f:f7:64:56:2a:0a:47:bb:fb:dd:d6:de: 5b:16:e7:cc:31:2f:d5:23:16:39:d4:86:9d:75:51: 2a:b0:b2:28:d8:66:16:ac:6d:61:2a:28:58:a0:4e: 11:ca:eb:34:fa:2c:4f:d9:2e:22:d8:de:58:b4:b9: c2:7f:37:01:65:3c:b5:13:92:65:d8:47:c2:d8:41: 8d:d5:97:62:03:6e:79:1c:09:da:3b:24:5d:a5:7b: c8:fc:7f:89:d2:1d:bd:92:7f:d9:4d:ec:53:58:b5: 08:66:d5:5d:0c:0e:18:90:8c:91:19:6c:c4:e0:86: af:60:1b:2d:59:f6:ac:bf:ad:6b:ca:b2:07:d4:91: 7f:86:2d:e6:a1:a6:08:63:72:61:14:76:4a:12:45: f8:60:db:df:60:0e:20:57:a7:2a:93:0d:84:80:ba: 50:cd:a7:39:26:b7:e5:88:e5:88:e5:fa:c6:68:90: fe:4b:c0:67:cd:1f:1f:af:f7:7d:99:20:d2:86:10: b8:0c:d1:45:f1:e2:4d:e5:9f:ef:31:a8:0c:25:d3: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:42:DD:09:F5:E0:D6:E4:79:55:90:0B:5B:16:BF:49:23:7C:96:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f3706e1c-6d0c-34c6-9e4e-b9f9c4ccef84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 66.146.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2e:a0:d5:21:da:ae:34:a1:5c:8d:a1:64:1b:ef:12:e8:06: d8:2b:64:2d:fa:5c:df:96:e8:5c:73:c0:2d:5b:ad:24:b3:8d: 85:87:76:26:7c:08:d4:fe:7c:8b:f2:e5:69:f0:3c:8c:76:2b: cb:4e:c8:ca:c2:34:c1:c2:67:3b:5c:00:89:ce:81:1b:86:6b: c0:1b:c0:a3:fd:f6:11:e1:05:46:f3:93:2e:30:64:3c:c3:03: 96:18:a0:28:aa:2a:1f:03:b9:af:80:45:27:e2:f2:4f:5b:df: 65:27:a8:c5:df:c4:f2:a0:cb:b0:f9:43:0f:ec:89:3e:43:df: ef:26:9a:26:e9:62:d6:a3:ae:7e:0c:52:f9:de:be:fa:b3:70: ba:8b:f5:65:29:82:b5:00:04:ba:a4:53:83:3e:7b:9b:87:85: 1d:1e:d8:63:e2:d6:46:a8:7e:0d:78:d2:ec:5d:b7:a4:5e:b3: 07:ac:cf:f6:99:d3:c0:b0:cd:c9:4b:05:63:64:0a:1f:17:20: 33:17:0b:37:ee:37:89:3a:16:31:56:2f:90:f6:20:3c:e1:2a: 1c:01:ab:22:fd:e5:78:3e:56:ad:29:dd:f9:a2:00:38:54:e0: c6:45:41:97:75:e2:fa:cf:cd:2f:81:53:f5:4d:25:7f:52:8e: 5c:90:90:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF8AGcSTm6HM04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MTlkMWQzMDktNDZiOS00ZjU1LWE4Y2UtZjI0YWQ5MjYwMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozAffZvwgB9Wci2fv6Gfz6F1SshQU+ep49pu KLWx3l4iY3l8pzQfr0Az36eQeH8f92RWKgpHu/vd1t5bFufMMS/VIxY51IaddVEq sLIo2GYWrG1hKihYoE4Ryus0+ixP2S4i2N5YtLnCfzcBZTy1E5Jl2EfC2EGN1Zdi A255HAnaOyRdpXvI/H+J0h29kn/ZTexTWLUIZtVdDA4YkIyRGWzE4IavYBstWfas v61ryrIH1JF/hi3moaYIY3JhFHZKEkX4YNvfYA4gV6cqkw2EgLpQzac5JrfliOWI 5frGaJD+S8BnzR8fr/d9mSDShhC4DNFF8eJN5Z/vMagMJdMKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpC3Qn14NbkeVWQC1sWv0kjfJYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjM3MDZlMWMtNmQwYy0z NGM2LTllNGUtYjlmOWM0Y2NlZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpLtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMuoNUh2q40oVyNoWQb7xLoBtgrZC36XN+W6FxzwC1brSSzjYWHdiZ8 CNT+fIvy5WnwPIx2K8tOyMrCNMHCZztcAInOgRuGa8AbwKP99hHhBUbzky4wZDzD A5YYoCiqKh8Dua+ARSfi8k9b32UnqMXfxPKgy7D5Qw/siT5D3+8mmibpYtajrn4M UvnevvqzcLqL9WUpgrUABLqkU4M+e5uHhR0e2GPi1kaofg140uxdt6Reswesz/aZ 08CwzclLBWNkCh8XIDMXCzfuN4k6FjFWL5D2IDzhKhwBqyL95Xg+Vq0p3fmiADhU 4MZFQZd14vrPzS+BU/VNJX9SjlyQkMU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:41:51 2025 by rpki-client