$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa File: 28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa (raw, json) Hash identifier: zj57+8SVs3Sjpcxi8mLlORFBBhPx9R9BZqvy5EbbBd8= Subject key identifier: 7D:AD:AE:20:3A:92:12:C0:EE:15:BE:73:07:A3:88:7C:41:94:89:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F375E056AE048F060B95D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 107.167.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:5e:05:6a:e0:48:f0:60:b9:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=fafdfa59-fffc-4c46-a2b6-ac89ef0cc11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:b9:62:37:9f:e2:00:e6:97:41:e8:5e:63: cc:2c:b5:76:15:a5:d4:86:84:80:e5:55:1f:a5:4f: 0f:5d:38:86:aa:44:58:84:ee:93:d7:e6:4a:c0:07: be:17:9f:35:20:15:53:d9:ac:27:7f:a8:cf:7e:cc: 58:38:08:e3:38:fd:98:58:9d:f1:d5:5c:a5:e8:e3: ad:9d:3d:9a:69:d6:49:95:9d:2c:3f:9c:f0:0a:71: 93:be:db:bd:dc:ac:b0:d8:ef:fe:64:ab:ff:53:ac: ee:ee:ed:f4:55:3d:f8:58:8c:5e:79:f9:5c:81:43: 84:54:ed:12:ec:6e:e8:69:12:c8:8e:00:4e:2a:3c: a6:d1:3c:ae:4f:c1:29:d9:c5:20:0c:13:85:40:2a: 2a:50:54:af:3a:22:c0:f5:e8:6e:5b:a7:ef:d7:70: 37:69:5a:57:20:48:1c:0f:70:71:27:bc:a1:95:53: 8d:b6:e5:4b:86:b2:b8:9d:f9:4d:4c:9e:c9:b3:75: 32:ec:5f:da:f5:e7:85:ef:41:d9:10:1b:93:a8:70: e2:4e:43:bf:f5:f8:3f:22:fb:1e:80:9b:84:44:d3: 68:34:5d:e0:5f:cf:c7:f9:5d:e1:95:0c:74:59:5a: 86:ad:42:15:2c:9b:84:8b:45:10:c5:7e:4a:51:69: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AD:AE:20:3A:92:12:C0:EE:15:BE:73:07:A3:88:7C:41:94:89:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28aa0558-7dd6-32b0-bfc2-1caa8ab0a611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:99:ce:9c:04:59:5b:f7:2b:34:7e:93:24:f7:4c:63:ea:a7: 2e:69:10:25:1a:d2:9e:db:9c:0d:6e:22:88:81:78:c8:21:30: 99:bd:ce:7f:a6:95:29:93:c9:6a:58:3e:e6:4a:78:5b:b7:51: b5:67:fd:d0:1f:83:40:f2:be:4c:93:46:f5:be:b5:37:c7:f1: 97:f2:1a:66:7f:44:45:3a:c9:a2:12:f3:d8:95:f2:b5:0c:fa: 09:a4:b2:cc:e9:98:46:9e:8e:aa:d6:a4:a8:12:aa:f4:c0:82: d6:9c:7b:9b:b7:b9:81:06:c3:ba:cc:11:f4:96:79:9c:62:e7: 87:a5:90:de:7d:6c:cd:61:ae:68:98:aa:0c:46:cd:fe:5f:3b: 2f:98:d8:0c:de:74:1e:97:56:1a:fd:76:a5:70:09:b3:29:4c: 4e:b3:75:65:aa:b1:0e:ad:41:5b:64:40:d2:d2:50:2a:ba:ca: 44:82:8c:53:54:9d:cd:fd:ff:ce:ef:58:15:40:c0:0f:12:be: 92:a4:99:2c:67:2f:b7:f3:98:60:4b:88:ee:31:f9:a0:d7:18: cc:88:d2:8f:43:23:20:76:c3:37:54:7e:f4:1d:40:81:21:b3: 20:d1:71:77:25:b6:37:62:63:59:c8:94:cb:59:1a:63:bb:e9: 01:98:20:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN14FauBI8GC5XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmFmZGZhNTktZmZmYy00YzQ2LWEyYjYtYWM4OWVmMGNjMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBu5Yjef4gDml0HoXmPMLLV2FaXUhoSA5VUf pU8PXTiGqkRYhO6T1+ZKwAe+F581IBVT2awnf6jPfsxYOAjjOP2YWJ3x1Vyl6OOt nT2aadZJlZ0sP5zwCnGTvtu93Kyw2O/+ZKv/U6zu7u30VT34WIxeeflcgUOEVO0S 7G7oaRLIjgBOKjym0TyuT8Ep2cUgDBOFQCoqUFSvOiLA9ehuW6fv13A3aVpXIEgc D3BxJ7yhlVONtuVLhrK4nflNTJ7Js3Uy7F/a9eeF70HZEBuTqHDiTkO/9fg/Ivse gJuERNNoNF3gX8/H+V3hlQx0WVqGrUIVLJuEi0UQxX5KUWlOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2triA6khLA7hW+cwejiHxBlImwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhhYTA1NTgtN2RkNi0z MmIwLWJmYzItMWNhYThhYjBhNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6e0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaZzpwEWVv3KzR+kyT3TGPqpy5pECUa0p7bnA1uIoiBeMghMJm9zn+m lSmTyWpYPuZKeFu3UbVn/dAfg0DyvkyTRvW+tTfH8ZfyGmZ/REU6yaIS89iV8rUM +gmksszpmEaejqrWpKgSqvTAgtace5u3uYEGw7rMEfSWeZxi54elkN59bM1hrmiY qgxGzf5fOy+Y2AzedB6XVhr9dqVwCbMpTE6zdWWqsQ6tQVtkQNLSUCq6ykSCjFNU nc39/87vWBVAwA8SvpKkmSxnL7fzmGBLiO4x+aDXGMyI0o9DIyB2wzdUfvQdQIEh syDRcXcltjdiY1nIlMtZGmO76QGYIEs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:42:50 2025 by rpki-client