$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa File: 28575f9c-570b-3118-a718-2754ac5ad8a1.roa (raw, json) Hash identifier: /wsiJZw/aoIK0nZYJmYqSbi5d1SOSQAfrudg++hjGaQ= Subject key identifier: 4B:BD:4D:F0:E8:07:EB:AB:CD:91:C7:0E:3C:32:07:84:0E:F3:68:3C Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B5F372E9B34FF69801AD1B4E0 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 104.237.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:2e:9b:34:ff:69:80:1a:d1:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=35e240f3-8520-48a0-9d51-1e23b25b2614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:ab:f2:cb:98:5a:a6:0b:e3:58:af:b3:2f: a8:58:17:4d:3c:de:6f:c3:1a:04:32:e4:b9:40:95: f5:4b:f0:09:7e:c9:7f:49:f5:79:9b:3b:85:cb:3a: 9f:8d:ec:df:f9:fa:0a:0d:dd:0b:4b:72:8e:84:02: 79:95:b9:25:26:cd:d2:bc:9e:3a:e4:3a:b7:5d:f6: 4e:07:b4:0b:dd:2a:b5:1f:9a:aa:dd:79:39:e3:1e: 33:11:65:ab:73:5e:e6:6c:e0:cb:ff:9a:c2:43:61: 97:f6:4e:37:3a:cf:10:6c:00:25:84:e7:74:5b:9b: dd:3a:8a:a8:57:d1:ee:57:29:b5:5f:49:fa:0f:05: 76:55:ea:f5:41:6a:fd:0d:98:21:20:db:d8:04:82: 42:b8:0c:58:e3:4d:51:63:4d:5a:db:de:c1:d2:bb: b1:ba:52:5a:10:10:a0:d1:10:86:e4:24:b2:b5:7f: 31:65:3c:9e:fb:89:07:37:c9:3b:55:58:3c:f7:11: be:12:5e:6f:e1:2b:7c:a9:2e:2a:db:23:da:c9:f1: 9d:2b:c2:57:d9:00:11:7f:2b:88:62:16:93:a0:d0: bd:e4:71:95:65:74:d1:8d:00:c8:91:73:90:b8:2b: 7e:61:07:d3:93:7a:69:3e:e4:6f:76:e5:c7:66:7d: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:4D:F0:E8:07:EB:AB:CD:91:C7:0E:3C:32:07:84:0E:F3:68:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:94:dd:f1:62:95:f9:29:08:00:ed:cf:59:3c:03:63:6a:3f: 86:9f:88:da:c8:b8:01:3c:75:01:c6:48:8c:27:47:26:14:dd: 38:bf:ce:e5:8d:11:81:43:fa:08:8c:1d:cb:0f:f2:cd:28:f2: 70:fc:48:1b:d7:22:2d:ea:84:e7:d9:d2:0c:a2:84:1b:43:58: 8a:9f:4e:d5:70:09:8a:05:bb:32:9e:21:b7:92:f3:27:c8:9f: 14:9f:3d:11:f7:bf:ef:98:8f:ea:f2:06:34:c4:4e:bb:4a:a1: 7a:70:d3:c0:65:c8:88:b6:4f:b8:66:07:74:51:9b:60:3b:21: 8c:af:b8:50:e1:bb:e2:28:51:77:f9:b1:2a:72:21:36:5d:a5: 8b:0d:da:68:60:2d:f1:3f:03:4f:8d:e9:b9:c5:f6:1f:39:34: f4:cd:bc:54:62:b4:b7:83:50:2b:c3:69:7a:21:aa:7c:8a:e2: f4:a3:b7:50:a9:13:3c:af:2a:cf:80:b7:46:1c:44:c5:e2:e2: bb:ca:19:57:dd:ff:83:50:d3:f8:fe:12:a6:e5:71:e4:78:24: 45:c2:2a:07:19:bd:14:80:a9:70:94:bf:2b:18:af:d4:94:fa: b4:51:f8:1f:7b:7e:83:1a:fe:88:cb:00:71:42:41:e0:87:10: a8:de:d7:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNy6bNP9pgBrRtOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MzVlMjQwZjMtODUyMC00OGEwLTlkNTEtMWUyM2IyNWIyNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGKr8suYWqYL41ivsy+oWBdNPN5vwxoEMuS5 QJX1S/AJfsl/SfV5mzuFyzqfjezf+foKDd0LS3KOhAJ5lbklJs3SvJ465Dq3XfZO B7QL3Sq1H5qq3Xk54x4zEWWrc17mbODL/5rCQ2GX9k43Os8QbAAlhOd0W5vdOoqo V9HuVym1X0n6DwV2Ver1QWr9DZghINvYBIJCuAxY401RY01a297B0ruxulJaEBCg 0RCG5CSytX8xZTye+4kHN8k7VVg89xG+El5v4St8qS4q2yPayfGdK8JX2QARfyuI YhaToNC95HGVZXTRjQDIkXOQuCt+YQfTk3ppPuRvduXHZn2oCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu9TfDoB+urzZHHDjwyB4QO82g8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMjg1NzVmOWMtNTcwYi0z MTE4LWE3MTgtMjc1NGFjNWFkOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKU3fFilfkpCADtz1k8A2NqP4afiNrIuAE8dQHGSIwnRyYU3Ti/zuWN EYFD+giMHcsP8s0o8nD8SBvXIi3qhOfZ0gyihBtDWIqfTtVwCYoFuzKeIbeS8yfI nxSfPRH3v++Yj+ryBjTETrtKoXpw08BlyIi2T7hmB3RRm2A7IYyvuFDhu+IoUXf5 sSpyITZdpYsN2mhgLfE/A0+N6bnF9h85NPTNvFRitLeDUCvDaXohqnyK4vSjt1Cp EzyvKs+At0YcRMXi4rvKGVfd/4NQ0/j+EqblceR4JEXCKgcZvRSAqXCUvysYr9SU +rRR+B97foMa/ojLAHFCQeCHEKje180= -----END CERTIFICATE-----Generated at Mon Oct 20 05:30:54 2025 by rpki-client