$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa File: 528af9b3-2bf6-317c-94a5-c8fe507fd519.roa (raw, json) Hash identifier: SgdR6LuBQDxJzhfVrXKKhpLyxI1y5K3MYQtwN7eW4g8= Subject key identifier: BC:ED:2D:03:86:97:4C:AF:49:91:14:A1:39:64:CB:7E:AA:DB:87:9F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B583C7EE7AF8D31D81DBAB200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 207.102.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7e:e7:af:8d:31:d8:1d:ba:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=5010505e-d4b9-4c50-b3ea-902428cf3be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:4d:1d:ff:21:cc:20:6c:15:fa:0f:98:34: 59:f0:7b:90:a5:9a:55:be:a8:7a:5b:7c:a3:c6:ea: 6d:46:e6:e1:f3:a2:aa:28:9d:50:64:4e:83:19:cc: 78:f8:10:11:35:c6:7e:c0:71:6b:af:c5:21:b8:e8: 1a:f0:36:34:97:23:57:4a:74:04:71:ff:f0:0e:2c: 9b:6c:1d:29:1a:b7:65:f5:d0:a6:4b:cc:51:e8:a8: 60:84:e7:a2:b8:e7:9e:33:bf:1e:de:8b:62:ff:d5: b0:fc:e6:c6:11:8c:a9:24:d4:95:f7:77:a4:57:f5: 79:92:21:f4:18:8a:e4:21:b2:75:1a:6b:5a:e7:df: 3f:fc:83:b4:5e:42:bb:13:4b:e7:3c:76:07:4a:a8: 63:ee:29:9d:c5:d6:a3:30:a0:11:1f:c5:c8:ba:d8: 9f:ae:32:f4:76:f5:00:55:bb:f7:5f:09:e1:35:be: ed:7c:b2:1e:88:f8:35:93:6b:83:b7:a8:06:4e:c1: 7f:0e:dc:d2:5b:9d:4d:85:f2:2c:df:32:6c:a5:fc: 90:7d:eb:02:96:05:64:37:7a:d8:92:66:24:80:81: f1:6e:b3:2b:24:64:c0:6f:74:e5:31:6d:39:75:3c: 1f:64:63:47:0c:ec:c1:47:fe:97:03:3b:a6:7d:39: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:ED:2D:03:86:97:4C:AF:49:91:14:A1:39:64:CB:7E:AA:DB:87:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:bf:c7:72:f5:76:07:8a:81:b4:af:f3:2c:78:24:a9:f9:c2: a9:de:e8:c5:dc:c4:2b:8d:99:c9:ae:81:89:f3:a0:18:12:55: ed:62:14:42:f4:08:b6:4f:7c:98:88:a5:e0:22:8c:79:84:06: 52:04:01:57:cc:4c:ad:49:5f:5c:d2:57:8a:3c:ec:a9:1f:6c: 95:0c:67:9a:91:59:af:fd:fd:dd:d3:30:86:07:62:7b:d8:1e: 85:38:f9:20:6a:97:81:88:48:7f:89:49:8e:b9:11:cc:68:a6: 58:81:ce:df:1e:ed:85:bb:a2:07:2a:f8:f8:ed:99:96:a1:bb: 94:26:f0:9e:74:43:9b:c5:ca:3f:5e:93:81:ef:87:55:d9:7a: 9c:63:a6:69:1c:b0:ce:16:38:6e:d4:5f:c2:02:b1:be:6c:5d: 49:f7:3d:e4:c8:df:f9:1e:bc:67:f6:83:70:da:c6:61:4b:3d: 99:c6:2f:c5:3e:59:4d:b1:60:f3:f4:c0:33:37:83:70:7c:47: 14:2f:4d:77:b5:ac:94:f7:03:07:e5:24:69:00:e9:e1:1c:8a: 64:0c:6e:eb:27:1a:0d:79:a8:2d:4c:ee:68:66:3b:0b:45:96: 26:41:6a:97:44:69:fd:7a:88:f0:d6:13:17:93:91:51:f9:58: e6:69:79:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPH7nr40x2B26sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NTAxMDUwNWUtZDRiOS00YzUwLWIzZWEtOTAyNDI4Y2YzYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGxNHf8hzCBsFfoPmDRZ8HuQpZpVvqh6W3yj xuptRubh86KqKJ1QZE6DGcx4+BARNcZ+wHFrr8UhuOga8DY0lyNXSnQEcf/wDiyb bB0pGrdl9dCmS8xR6KhghOeiuOeeM78e3oti/9Ww/ObGEYypJNSV93ekV/V5kiH0 GIrkIbJ1Gmta598//IO0XkK7E0vnPHYHSqhj7imdxdajMKARH8XIutifrjL0dvUA Vbv3XwnhNb7tfLIeiPg1k2uDt6gGTsF/DtzSW51NhfIs3zJspfyQfesClgVkN3rY kmYkgIHxbrMrJGTAb3TlMW05dTwfZGNHDOzBR/6XAzumfTmmxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLztLQOGl0yvSZEUoTlky36q24efMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTI4YWY5YjMtMmJmNi0z MTdjLTk0YTUtYzhmZTUwN2ZkNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2aEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMa/x3L1dgeKgbSv8yx4JKn5wqne6MXcxCuNmcmugYnzoBgSVe1iFEL0 CLZPfJiIpeAijHmEBlIEAVfMTK1JX1zSV4o87KkfbJUMZ5qRWa/9/d3TMIYHYnvY HoU4+SBql4GISH+JSY65EcxopliBzt8e7YW7ogcq+PjtmZahu5Qm8J50Q5vFyj9e k4Hvh1XZepxjpmkcsM4WOG7UX8ICsb5sXUn3PeTI3/kevGf2g3DaxmFLPZnGL8U+ WU2xYPP0wDM3g3B8RxQvTXe1rJT3AwflJGkA6eEcimQMbusnGg15qC1M7mhmOwtF liZBapdEaf16iPDWExeTkVH5WOZpeVE= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:59 2025 by rpki-client