$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa File: 4dd8305e-e04a-3ce1-a306-cad4284760dd.roa (raw, json) Hash identifier: ZSQGnYgNu/KFIFnVrpKrw9WPz/mNkGvdUYGZu6QrLi0= Subject key identifier: 79:AC:80:1C:99:5A:90:90:F0:DC:11:F7:DD:B2:3A:F2:BD:A7:99:4E Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584B4081A5DE0ABECC0FE6DF3000 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 14230 IP address blocks: 64.71.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a5:de:0a:be:cc:0f:e6:df:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=0ff59b7c-9ee0-4750-9ae6-1ea409eb7dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:0d:21:51:3f:09:05:50:c6:dc:83:3b:b1: 76:88:aa:b8:47:ad:45:ed:26:a0:f2:8c:45:0b:ad: 98:7f:4d:02:b5:13:dd:89:83:8e:e9:be:ec:21:44: bf:80:03:db:60:c5:b6:0f:26:21:e0:3c:74:07:89: ca:9f:66:73:71:9e:bf:37:73:aa:63:2d:b7:68:8a: 0b:33:13:9e:c1:22:33:44:68:c4:11:b8:be:24:59: a8:4a:f5:67:da:5a:5f:fc:27:c8:9e:1b:15:1e:3b: 31:68:0a:a0:8f:d5:fc:1c:48:ae:50:45:d3:57:78: 3e:60:7f:8b:bc:a0:a4:f4:d3:34:66:08:b2:a9:3b: 39:8b:30:7e:37:4b:16:8a:d2:df:7c:3e:26:b6:4b: 4c:cb:ab:ca:82:e5:f4:03:e4:04:40:e8:92:28:5a: d9:b8:39:9e:c0:26:a1:cf:c7:9b:35:f6:cf:3a:7f: 95:8d:09:01:bd:b6:51:c3:d0:68:e2:40:5f:c4:4e: b7:61:ae:bf:62:44:48:a5:c6:5e:1e:d6:ea:14:1c: 62:c4:44:64:a5:4d:29:8f:15:ac:9f:c5:fe:45:45: cc:08:9e:fa:60:8d:11:af:66:51:97:a3:e2:e7:d5: 78:d2:89:14:1a:7b:fd:4a:4d:79:d4:11:c1:43:35: dd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AC:80:1C:99:5A:90:90:F0:DC:11:F7:DD:B2:3A:F2:BD:A7:99:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/4dd8305e-e04a-3ce1-a306-cad4284760dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 64.71.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d4:8e:65:c4:f9:e0:34:ed:0a:e4:87:6c:82:e5:c1:95:04: 65:69:78:ad:b1:2a:04:27:8b:c7:e0:34:09:ac:90:3b:61:62: 2e:ad:f6:74:3d:31:e7:04:85:c5:bf:da:15:83:0b:43:73:65: 80:1f:b9:27:f1:e0:0e:a4:d5:56:7a:a3:54:9a:98:38:80:8b: 68:4c:0f:6a:2f:a3:cf:28:d8:37:e5:45:50:73:62:41:4c:ad: 7d:d2:50:69:c4:c6:ea:34:12:72:53:a9:d8:3e:2b:3d:89:cf: 32:a3:36:ec:94:9f:3a:c3:76:c0:01:2a:18:2a:c7:d3:bd:c2: 2c:b6:9e:7f:dc:7b:4e:c4:ae:0d:92:ec:cd:9b:c4:b6:02:fa: b4:8f:36:a2:13:c6:a0:46:54:86:ab:82:70:15:18:5b:be:40: f5:d9:75:7e:af:b2:fb:5f:3d:20:fc:a3:1c:f0:c4:e6:67:a2: 96:4b:3c:39:5a:38:d5:ed:32:b0:52:d2:2a:7e:98:0a:d1:28: fc:2b:96:11:38:28:99:5c:c5:14:3b:0d:4e:1b:db:87:39:1c: 7d:bb:c0:c3:c3:25:4f:fa:26:87:f8:45:ce:45:35:32:b5:60: 1f:2d:38:09:fc:76:e9:0c:1b:a5:f8:55:79:c4:bf:fd:5d:4c: 08:d8:e3:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaXeCr7MD+bfMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MGZmNTliN2MtOWVlMC00NzUwLTlhZTYtMWVhNDA5ZWI3ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLkNIVE/CQVQxtyDO7F2iKq4R61F7Sag8oxF C62Yf00CtRPdiYOO6b7sIUS/gAPbYMW2DyYh4Dx0B4nKn2ZzcZ6/N3OqYy23aIoL MxOewSIzRGjEEbi+JFmoSvVn2lpf/CfInhsVHjsxaAqgj9X8HEiuUEXTV3g+YH+L vKCk9NM0ZgiyqTs5izB+N0sWitLffD4mtktMy6vKguX0A+QEQOiSKFrZuDmewCah z8ebNfbPOn+VjQkBvbZRw9Bo4kBfxE63Ya6/YkRIpcZeHtbqFBxixERkpU0pjxWs n8X+RUXMCJ76YI0Rr2ZRl6Pi59V40okUGnv9Sk151BHBQzXd5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmsgByZWpCQ8NwR992yOvK9p5lOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvNGRkODMwNWUtZTA0YS0z Y2UxLWEzMDYtY2FkNDI4NDc2MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7UjmXE+eA07Qrkh2yC5cGVBGVpeK2xKgQni8fgNAmskDthYi6t9nQ9 MecEhcW/2hWDC0NzZYAfuSfx4A6k1VZ6o1SamDiAi2hMD2ovo88o2DflRVBzYkFM rX3SUGnExuo0EnJTqdg+Kz2JzzKjNuyUnzrDdsABKhgqx9O9wiy2nn/ce07Erg2S 7M2bxLYC+rSPNqITxqBGVIargnAVGFu+QPXZdX6vsvtfPSD8oxzwxOZnopZLPDla ONXtMrBS0ip+mArRKPwrlhE4KJlcxRQ7DU4b24c5HH27wMPDJU/6Jof4Rc5FNTK1 YB8tOAn8dukMG6X4VXnEv/1dTAjY43I= -----END CERTIFICATE-----Generated at Tue Oct 21 07:25:46 2025 by rpki-client