$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c1836498-6659-3b7d-bcab-d8155977037b.roa File: c1836498-6659-3b7d-bcab-d8155977037b.roa (raw, json) Hash identifier: w7NTijArvoyQ2TJtFKLp2J4m3sEgYgEwJFMwdoZ7Mv4= Subject key identifier: 75:59:EA:3C:38:E9:99:15:EB:33:7C:EE:AF:71:DB:E6:3C:E6:E7:ED Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584B328C64EEA6EA2BB41AAC2464 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c1836498-6659-3b7d-bcab-d8155977037b.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 10988 IP address blocks: 207.70.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:64:ee:a6:ea:2b:b4:1a:ac:24:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=e0895ebe-b579-43d4-9dff-ce512a3fd4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:61:e2:a5:f7:4f:a9:a6:91:94:ba:7e:b8: 49:4e:80:c9:6b:0c:fe:3d:0a:03:22:69:c7:03:cf: bf:a3:de:03:9b:31:ab:2c:5e:f4:43:9d:0f:ef:14: 69:38:17:dd:18:65:46:8c:2b:b4:0d:0d:6f:4c:d8: 01:ca:ca:08:6f:01:9a:c4:c0:84:1d:91:25:9b:f3: 5a:62:a7:b5:3d:86:80:9f:6d:c7:03:cd:00:92:23: 4b:02:fc:ae:9f:48:5c:5d:92:bc:d6:37:67:5a:2a: c4:c0:38:cd:e7:c2:66:34:05:6e:1f:87:13:1d:bd: 8b:e6:4e:87:af:a4:59:8b:8c:f4:77:f2:f6:03:3c: 12:9e:a2:55:11:96:c1:eb:25:ce:45:69:b3:88:70: 3e:5d:17:6b:ae:94:1f:aa:85:b2:8c:51:a6:0d:e9: dd:27:fd:c2:c4:b6:f4:06:27:23:24:31:10:fb:81: 9a:ec:34:05:57:c1:3a:2b:b4:d8:fb:a3:90:4d:40: 34:a7:cd:33:36:e1:9c:45:01:7c:99:df:4f:69:f4: ae:66:67:a0:81:0c:39:7e:1c:7c:fc:2f:ce:a0:9c: 67:dd:50:50:2d:e7:52:aa:6d:45:73:54:60:50:95: 91:52:50:24:f0:5c:48:10:84:f0:5c:99:36:56:e1: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:59:EA:3C:38:E9:99:15:EB:33:7C:EE:AF:71:DB:E6:3C:E6:E7:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c1836498-6659-3b7d-bcab-d8155977037b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 207.70.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:43:02:77:e1:b1:28:95:05:8d:b4:2e:40:4b:5c:a9:a5:e2: fe:42:3e:03:c0:0f:c4:67:3b:58:0d:35:cb:d4:91:3c:f3:6b: a8:d0:ad:f8:8e:9b:83:b5:00:b8:47:3c:1c:2a:7e:7b:af:ef: f0:76:1f:ec:eb:b2:28:b0:31:15:0b:19:d1:f5:25:eb:11:f4: 62:d6:56:da:e8:77:02:fb:48:36:dd:44:dd:01:9a:a9:52:03: 87:5b:a8:a6:1f:d2:8c:a3:8c:f8:cb:5e:1a:ca:72:69:4f:aa: 91:4b:9b:8e:db:d9:7a:af:f4:62:1a:5c:2f:d8:31:e3:3f:8b: fa:55:f2:f3:5a:e5:b4:c2:04:c4:08:1d:84:f8:fa:e8:74:73: 68:c7:3f:88:bd:26:25:62:f1:65:58:49:b2:0e:08:4a:9c:b8: bc:3f:2f:2c:31:1c:b0:7d:d6:e7:d5:cf:d3:41:69:87:57:a7: c8:35:d5:f9:54:f6:81:62:7d:2f:1c:dd:32:e2:78:99:0c:75: 0d:27:95:0d:68:d1:83:0b:62:41:1b:6a:38:ff:78:af:9c:d6: 96:1b:9a:ae:cd:ca:4b:21:17:2e:cc:2d:21:66:27:7c:f6:a8: 76:9a:89:72:98:36:f7:d1:cf:19:f1:eb:f6:30:fd:24:8e:23: a0:b1:05:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGTupuortBqsJGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTA4OTVlYmUtYjU3OS00M2Q0LTlkZmYtY2U1MTJhM2ZkNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsdh4qX3T6mmkZS6frhJToDJawz+PQoDImnH A8+/o94DmzGrLF70Q50P7xRpOBfdGGVGjCu0DQ1vTNgBysoIbwGaxMCEHZElm/Na Yqe1PYaAn23HA80AkiNLAvyun0hcXZK81jdnWirEwDjN58JmNAVuH4cTHb2L5k6H r6RZi4z0d/L2AzwSnqJVEZbB6yXORWmziHA+XRdrrpQfqoWyjFGmDendJ/3CxLb0 BicjJDEQ+4Ga7DQFV8E6K7TY+6OQTUA0p80zNuGcRQF8md9PafSuZmeggQw5fhx8 /C/OoJxn3VBQLedSqm1Fc1RgUJWRUlAk8FxIEITwXJk2VuEhFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVZ6jw46ZkV6zN87q9x2+Y85uftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvYzE4MzY0OTgtNjY1OS0z YjdkLWJjYWItZDgxNTU5NzcwMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlDAnfhsSiVBY20LkBLXKml4v5CPgPAD8RnO1gNNcvUkTzza6jQrfiO m4O1ALhHPBwqfnuv7/B2H+zrsiiwMRULGdH1JesR9GLWVtrodwL7SDbdRN0BmqlS A4dbqKYf0oyjjPjLXhrKcmlPqpFLm47b2Xqv9GIaXC/YMeM/i/pV8vNa5bTCBMQI HYT4+uh0c2jHP4i9JiVi8WVYSbIOCEqcuLw/LywxHLB91ufVz9NBaYdXp8g11flU 9oFifS8c3TLieJkMdQ0nlQ1o0YMLYkEbajj/eK+c1pYbmq7NykshFy7MLSFmJ3z2 qHaaiXKYNvfRzxnx6/Yw/SSOI6CxBZc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:20 2025 by rpki-client