$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa File: 328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa (raw, json) Hash identifier: 6R5OlwNpvBgLf4L1yK5t48N+JBdd9jKqWIK9IpJHboI= Subject key identifier: A1:54:57:F4:6F:6E:32:BC:48:16:DA:1B:A6:7B:5D:DB:F1:E7:B9:AE Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A963696B8AE660E075CCFBD40 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 7018 IP address blocks: 158.62.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:96:b8:ae:66:0e:07:5c:cf:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=02ef6f1b-337a-4841-882d-4def1b09a189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3e:7a:be:be:34:cd:20:ed:75:13:75:22:7c: a9:04:74:d7:70:7b:e8:f0:d7:3d:0c:d7:5b:7a:0d: 8b:13:4f:71:24:8c:42:d8:40:51:20:84:e7:83:8a: ef:2a:c0:76:30:7a:a7:59:12:44:ef:c9:8d:c8:c3: 81:01:d2:e4:93:d9:00:79:15:05:4d:7c:e9:2a:c9: 6c:32:6e:3a:9f:48:8e:94:1c:a6:f2:fc:4e:8a:42: 42:12:e2:0a:39:fd:00:40:b6:89:f4:69:e6:94:c5: 9d:41:59:a3:af:ac:45:4e:99:9b:dd:6f:15:ad:f8: da:ef:ec:40:9a:0e:55:74:e1:01:cf:64:74:55:1f: ba:d6:cb:5c:a0:00:47:be:bb:30:b4:f8:9a:4d:c4: 08:00:01:f6:67:ec:a9:c7:4a:4f:7e:d5:45:58:be: c8:89:bc:29:0a:a8:3c:9b:89:c5:e5:dc:83:04:5e: b9:e6:ff:23:dc:4e:fd:0f:18:38:aa:1b:e1:c2:b8: 88:12:59:c1:71:20:65:1f:88:b1:00:e7:e3:b8:1e: 38:35:77:b3:e1:63:3e:b5:8c:92:4c:fc:ed:ba:d2: 38:67:ed:b5:f5:0c:1a:d1:0d:8c:36:9d:12:42:77: 87:e6:be:7d:e9:a9:a8:48:3c:aa:c4:e2:cd:f0:30: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:57:F4:6F:6E:32:BC:48:16:DA:1B:A6:7B:5D:DB:F1:E7:B9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a8:c6:18:cc:57:d1:22:5c:87:13:7e:99:1f:c7:2d:99:1a: 7d:6f:77:f0:4e:f9:0e:25:e7:52:6c:1f:1c:19:a7:06:f6:de: 14:b0:3f:4a:38:ae:49:ab:65:6e:8c:d6:6f:95:a7:81:fe:85: 2b:02:b6:44:19:f6:a3:5f:ae:f4:ad:f8:4c:43:21:b2:99:c4: b8:f0:36:b9:8a:ad:c8:32:a7:9e:bc:8d:94:32:5f:7c:36:3a: b4:1e:ea:81:e2:70:33:fa:fb:39:75:e5:cd:e0:a8:87:29:92: 33:a7:6c:21:73:20:a0:10:1e:e6:cf:9a:40:49:d5:57:aa:1c: c4:c7:f2:7d:f9:6a:fc:0c:65:0e:d5:2b:ba:a0:5a:4f:ca:0b: 4e:8c:83:1e:d3:bd:e3:34:e9:dd:a2:90:2b:b5:60:2d:2d:62: ad:45:81:0b:ea:83:7e:43:95:5c:a3:a4:7c:a1:0b:9c:32:68: 36:1e:e2:5d:55:63:fb:22:df:ec:eb:08:11:9e:53:ca:21:b7: b9:d9:02:83:78:5a:dd:99:a5:42:a8:4b:dd:52:1c:27:48:36: 17:0b:f7:e3:4f:48:55:c3:59:e0:23:7e:77:f6:78:10:c9:e6: d7:31:c8:28:45:54:88:d2:e8:54:97:b7:92:2a:e7:da:ea:a0: 7c:68:2c:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpa4rmYOB1zPvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MDJlZjZmMWItMzM3YS00ODQxLTg4MmQtNGRlZjFiMDlhMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz56vr40zSDtdRN1InypBHTXcHvo8Nc9DNdb eg2LE09xJIxC2EBRIITng4rvKsB2MHqnWRJE78mNyMOBAdLkk9kAeRUFTXzpKsls Mm46n0iOlBym8vxOikJCEuIKOf0AQLaJ9GnmlMWdQVmjr6xFTpmb3W8Vrfja7+xA mg5VdOEBz2R0VR+61stcoABHvrswtPiaTcQIAAH2Z+ypx0pPftVFWL7IibwpCqg8 m4nF5dyDBF655v8j3E79Dxg4qhvhwriIElnBcSBlH4ixAOfjuB44NXez4WM+tYyS TPztutI4Z+219Qwa0Q2MNp0SQneH5r596amoSDyqxOLN8DBk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFUV/RvbjK8SBbaG6Z7Xdvx57muMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzI4YmI4ZmEtOTBmYy0z ODBkLWEyMGItZjg3Y2ZlN2ExYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImoxhjMV9EiXIcTfpkfxy2ZGn1vd/BO+Q4l51JsHxwZpwb23hSwP0o4 rkmrZW6M1m+Vp4H+hSsCtkQZ9qNfrvSt+ExDIbKZxLjwNrmKrcgyp568jZQyX3w2 OrQe6oHicDP6+zl15c3gqIcpkjOnbCFzIKAQHubPmkBJ1VeqHMTH8n35avwMZQ7V K7qgWk/KC06Mgx7TveM06d2ikCu1YC0tYq1FgQvqg35DlVyjpHyhC5wyaDYe4l1V Y/si3+zrCBGeU8oht7nZAoN4Wt2ZpUKoS91SHCdINhcL9+NPSFXDWeAjfnf2eBDJ 5tcxyChFVIjS6FSXt5Iq59rqoHxoLMc= -----END CERTIFICATE-----Generated at Wed Aug 6 13:23:29 2025 by rpki-client