$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa File: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (raw, json) Hash identifier: XMBSAaW9GS6xX8pPbm+ca93v7Zzq8KcY1Q2zfrt+m50= Subject key identifier: AA:CF:F6:3C:A6:8B:F6:10:52:6D:E5:10:4D:E5:63:8A:E2:9C:70:A2 Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Certificate serial: 010D0C9F4328584B08ABEB9FAC15085E7AEBC000 Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 14497 IP address blocks: 199.168.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:eb:9f:ac:15:08:5e:7a:eb:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=278e7427-b137-4fab-97bd-46a4683f3b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ae:41:a1:b5:d7:09:14:c9:d8:04:60:fc:15: 45:8d:94:a2:fe:83:e5:44:a4:22:6f:99:9f:5d:ba: 44:d0:26:87:8b:9a:69:f5:72:cf:7b:40:a5:f1:17: f7:60:b7:bb:23:c5:07:f6:e5:11:10:9f:fb:f1:12: 28:7d:7c:51:6a:7a:42:74:14:c4:97:52:a4:ae:df: 5d:d9:ca:0c:0d:9c:41:50:e4:b0:fc:dd:0f:e7:c6: 7a:3d:1f:2a:49:50:91:29:e4:52:bd:17:33:e4:20: 5b:8c:3a:78:f4:08:f7:1a:24:48:0e:53:74:d9:36: 02:b0:90:54:5c:90:2e:9a:39:82:19:e8:3f:b1:9c: 7d:55:6a:64:2b:dc:25:84:2d:51:a2:36:e8:b4:f3: 96:ac:bc:a9:4e:c5:0c:84:05:63:d0:a3:ec:74:0c: 82:9b:9d:03:56:3d:22:d1:92:b0:45:81:53:fd:c6: 39:e9:57:51:4a:6b:b9:f7:ee:4d:36:d0:6e:32:4d: b4:7f:80:33:12:69:17:b6:14:dd:57:9b:9c:f8:8e: 71:86:9e:8f:c4:32:ae:c2:73:57:99:67:66:d5:69: 0e:47:65:93:8f:c0:25:b8:44:a7:c9:ab:aa:98:a2: 0c:97:b6:c4:1b:f4:72:ff:e2:7a:7e:1e:93:aa:e4: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CF:F6:3C:A6:8B:F6:10:52:6D:E5:10:4D:E5:63:8A:E2:9C:70:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl X509v3 Authority Key Identifier: keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer sbgp-ipAddrBlock: critical IPv4: 199.168.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f0:8e:0e:f4:95:39:c2:98:c9:fd:93:62:5d:d0:27:8f:67: 7a:3a:b9:de:8e:7e:56:c8:25:bd:cd:82:75:f0:4f:bc:9a:57: 2e:23:15:1c:32:71:4b:4c:8a:23:4c:10:f4:e3:b5:09:29:2a: 36:2e:83:96:97:99:a8:0c:61:a0:b3:51:f9:3b:51:1a:d9:a4: 9e:f8:89:6f:7b:5d:7b:ef:10:37:11:03:5e:de:6d:b4:ef:07: c6:da:ed:c6:91:41:09:4f:ef:a8:7e:66:d5:79:94:0e:70:59: d2:6f:02:46:1d:86:52:0d:26:a6:4d:57:6d:3b:8c:af:c1:ce: 93:bf:e7:13:b3:88:87:f5:9c:d3:e2:68:1e:fd:14:d6:da:79: 27:eb:3d:eb:b6:41:34:45:e2:c7:b0:3e:f2:62:bc:ff:43:9e: 45:cb:ec:94:da:10:5c:d8:ee:67:43:3e:36:42:30:9f:8c:79: cb:33:45:d4:31:3b:00:83:63:b5:32:7a:18:9a:d0:e1:3d:d2: 67:46:26:80:12:4d:36:b5:01:91:f1:88:5e:41:d8:43:13:79: e6:ce:1d:bb:fe:93:6d:ad:77:87:71:4e:d1:8a:2e:e7:18:e0: 16:57:6c:ef:9c:1b:14:8f:17:15:0f:80:40:f7:e8:95:d3:4a: 3a:6f:2a:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq+ufrBUIXnrrwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl MDg3MB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk Mjc4ZTc0MjctYjEzNy00ZmFiLTk3YmQtNDZhNDY4M2YzYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia5BobXXCRTJ2ARg/BVFjZSi/oPlRKQib5mf XbpE0CaHi5pp9XLPe0Cl8Rf3YLe7I8UH9uUREJ/78RIofXxRanpCdBTEl1Kkrt9d 2coMDZxBUOSw/N0P58Z6PR8qSVCRKeRSvRcz5CBbjDp49Aj3GiRIDlN02TYCsJBU XJAumjmCGeg/sZx9VWpkK9wlhC1RojbotPOWrLypTsUMhAVj0KPsdAyCm50DVj0i 0ZKwRYFT/cY56VdRSmu59+5NNtBuMk20f4AzEmkXthTdV5uc+I5xhp6PxDKuwnNX mWdm1WkOR2WTj8AluESnyauqmKIMl7bEG/Ry/+J6fh6TquSfjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrP9jymi/YQUm3lEE3lY4rinHCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvOWZkODEwODYtZDJhYi0z YjY5LTg3M2YtYzA0M2Q1ZjExMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0 ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj Y2M4NGUwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6gcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfwjg70lTnCmMn9k2Jd0CePZ3o6ud6OflbIJb3NgnXwT7yaVy4jFRwy cUtMiiNMEPTjtQkpKjYug5aXmagMYaCzUfk7URrZpJ74iW97XXvvEDcRA17ebbTv B8ba7caRQQlP76h+ZtV5lA5wWdJvAkYdhlINJqZNV207jK/BzpO/5xOziIf1nNPi aB79FNbaeSfrPeu2QTRF4sewPvJivP9DnkXL7JTaEFzY7mdDPjZCMJ+MecszRdQx OwCDY7Uyehia0OE90mdGJoASTTa1AZHxiF5B2EMTeebOHbv+k22td4dxTtGKLucY 4BZXbO+cGxSPFxUPgED36JXTSjpvKoE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:38:34 2025 by rpki-client