$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2de61dd3-d6a1-321c-97a8-d60d75671f16.roa File: 2de61dd3-d6a1-321c-97a8-d60d75671f16.roa (raw, json) Hash identifier: gZn2og/Wu+XrKgK+LfIK1E1Vmej7SwASxd1FpeyY1lM= Subject key identifier: 41:C9:AA:5D:99:5A:40:0D:11:02:7D:57:83:95:0B:64:9F:85:50:0B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C0BA14302A31934CDAAC8 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2de61dd3-d6a1-321c-97a8-d60d75671f16.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22516 IP address blocks: 209.163.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:0b:a1:43:02:a3:19:34:cd:aa:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=38525d84-9621-4fdf-8a17-6bb58bb4ff85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:10:86:9b:3a:0a:cc:08:28:d4:d3:c1:c5: be:f6:52:fc:43:d3:db:95:cd:cc:00:f1:9c:18:b8: d5:49:aa:71:8c:8c:32:05:a8:c9:60:1b:8b:02:b6: 22:c4:22:d7:e4:a4:05:54:5f:9f:78:40:9d:fc:ec: 5e:a1:2a:62:9f:78:34:55:25:ef:d3:3b:dc:76:5c: 07:81:b8:dc:8a:d8:f7:cf:d3:ac:e2:2d:dc:9c:bd: 5f:8f:3b:06:68:97:e7:8d:f6:30:9d:a9:c2:dd:b8: 8e:80:1d:88:5f:c4:2e:13:92:3e:06:4d:d4:02:35: 51:28:45:46:ee:82:25:4d:c7:85:76:cf:7a:31:3e: fd:c5:0d:b9:63:c3:f6:18:60:b5:40:11:3d:83:02: a4:a6:45:82:fa:82:15:b7:99:fd:93:97:cf:a5:bd: 61:38:83:83:5b:36:98:74:2e:2e:64:3b:d8:8c:e2: 6a:4b:f5:38:f2:0e:51:f3:67:a6:2f:e4:97:cd:0c: 81:f1:6a:73:62:b7:01:ab:2c:55:6c:2f:40:6f:56: e9:54:df:e6:b5:5c:be:c8:12:29:de:0f:ac:45:f8: 79:73:84:05:22:9c:0b:ed:06:05:2e:3c:99:0e:25: 3e:03:6d:a6:b3:3e:87:b6:6a:e9:bf:41:28:42:f0: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C9:AA:5D:99:5A:40:0D:11:02:7D:57:83:95:0B:64:9F:85:50:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2de61dd3-d6a1-321c-97a8-d60d75671f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.163.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:24:25:ba:d0:08:6c:7a:99:71:f8:b8:f1:5c:53:66:e2:bc: 4e:b1:8c:49:24:55:d1:73:40:27:96:4d:41:cc:cd:ea:78:aa: 0e:0e:e8:54:90:b8:06:07:b6:45:48:2d:93:1f:3e:ca:73:85: 47:28:39:92:ad:3e:94:03:d0:9b:32:6f:4e:0e:06:6d:25:a8: 56:73:49:0c:58:26:91:bb:63:5a:94:48:cd:21:1e:2f:72:fb: 2c:50:03:62:f6:5a:73:ac:f1:c1:8c:b9:1f:10:94:a1:6c:6b: c6:89:28:69:95:3c:d5:22:2e:4a:8a:28:0a:8c:8e:83:5c:20: 59:3e:9e:2b:b4:66:03:55:b9:08:43:b8:b4:89:4c:63:86:45: 91:7b:cc:53:1f:29:fa:a8:53:b8:9d:e4:69:9d:72:89:67:28: 73:78:83:37:96:0a:3d:c3:e0:a4:53:f3:6d:8a:a3:bb:81:83: 6a:17:9d:0b:9b:23:b0:a8:7d:58:8c:f2:b3:9d:a1:7f:a9:0f: f2:5c:21:34:cb:4b:18:f5:6f:44:4f:ec:4f:3e:bc:67:fa:ea: 89:84:a2:21:69:eb:8f:0b:5a:f3:f2:fa:94:16:82:09:47:43: 25:17:3f:95:fc:d9:37:5c:47:8c:6c:bd:21:0d:37:fb:00:c5: 04:a4:af:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAuhQwKjGTTNqsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk Mzg1MjVkODQtOTYyMS00ZmRmLThhMTctNmJiNThiYjRmZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh80Qhps6CswIKNTTwcW+9lL8Q9Pblc3MAPGc GLjVSapxjIwyBajJYBuLArYixCLX5KQFVF+feECd/OxeoSpin3g0VSXv0zvcdlwH gbjcitj3z9Os4i3cnL1fjzsGaJfnjfYwnanC3biOgB2IX8QuE5I+Bk3UAjVRKEVG 7oIlTceFds96MT79xQ25Y8P2GGC1QBE9gwKkpkWC+oIVt5n9k5fPpb1hOIODWzaY dC4uZDvYjOJqS/U48g5R82emL+SXzQyB8WpzYrcBqyxVbC9Ab1bpVN/mtVy+yBIp 3g+sRfh5c4QFIpwL7QYFLjyZDiU+A22msz6Htmrpv0EoQvA53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHJql2ZWkANEQJ9V4OVC2SfhVALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmRlNjFkZDMtZDZhMS0z MjFjLTk3YTgtZDYwZDc1NjcxZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aN3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkkJbrQCGx6mXH4uPFcU2bivE6xjEkkVdFzQCeWTUHMzep4qg4O6FSQ uAYHtkVILZMfPspzhUcoOZKtPpQD0Jsyb04OBm0lqFZzSQxYJpG7Y1qUSM0hHi9y +yxQA2L2WnOs8cGMuR8QlKFsa8aJKGmVPNUiLkqKKAqMjoNcIFk+niu0ZgNVuQhD uLSJTGOGRZF7zFMfKfqoU7id5GmdcolnKHN4gzeWCj3D4KRT822Ko7uBg2oXnQub I7CofViM8rOdoX+pD/JcITTLSxj1b0RP7E8+vGf66omEoiFp648LWvPy+pQWgglH QyUXP5X82TdcR4xsvSENN/sAxQSkr+8= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:29 2025 by rpki-client