$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3a8e6f1f-9e62-312f-b5f3-a19911286853.roa File: 3a8e6f1f-9e62-312f-b5f3-a19911286853.roa (raw, json) Hash identifier: TkSdRs9SuGV38IpQCDyWomJmoDiCdvTVxVwGIxkLJLk= Subject key identifier: C4:E6:8C:F6:3A:D2:BD:3A:BF:29:FA:E1:4B:A1:9E:21:91:A8:C0:81 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C08F1E3172CEE69E28820 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3a8e6f1f-9e62-312f-b5f3-a19911286853.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 199.250.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:08:f1:e3:17:2c:ee:69:e2:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=efe452d0-2fea-4075-b37b-fcff71122726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:72:0e:86:42:47:59:60:7f:bb:13:17:29: d8:dd:58:88:28:99:ee:d8:fa:d4:83:15:f7:96:e2: 50:20:76:41:18:8b:2a:29:3c:43:a1:60:b7:ed:51: e1:3d:46:57:4a:47:4c:e8:24:68:c0:a9:71:91:e0: 89:dc:36:80:97:e2:41:67:95:d2:e3:bb:63:5e:92: 58:a8:92:4d:9b:7c:f5:7f:c2:bd:33:d8:3c:1a:22: 61:5c:1b:10:f8:e7:07:fb:10:1f:d3:a6:20:78:19: 6a:a4:e0:a1:aa:95:fd:d5:e2:cc:43:f6:e2:8d:1a: a7:71:f3:ab:ba:18:00:b1:90:fe:0f:95:c4:96:90: e7:75:69:46:cd:3d:05:50:e2:94:2b:94:22:84:f2: f7:19:cb:e4:20:2b:78:eb:3c:14:16:96:4f:f3:21: 7c:a5:ed:33:a8:33:30:f8:35:69:f7:06:40:80:f9: 6e:96:34:9f:76:0c:4c:dd:c4:91:e6:85:e8:7b:5b: 21:92:a5:21:40:58:20:00:f9:11:00:30:3d:ab:0d: f8:90:42:66:f7:d5:40:73:a1:2d:c9:75:2b:d5:31: 83:17:99:e5:c4:ec:0c:28:bb:dc:e4:c1:cc:a0:bf: cc:84:52:d5:fc:2e:61:a6:5c:76:f6:27:5d:59:7a: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:8C:F6:3A:D2:BD:3A:BF:29:FA:E1:4B:A1:9E:21:91:A8:C0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3a8e6f1f-9e62-312f-b5f3-a19911286853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.250.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:3e:31:3a:89:9a:3e:ed:c9:47:f7:25:d9:21:0e:22:0f:e7: e3:2e:aa:f3:42:ea:f2:b5:55:95:b5:7b:1b:4b:eb:69:67:78: a8:f4:9a:36:c0:0f:75:37:68:1c:a6:eb:9a:33:24:de:80:5a: 87:ad:0a:1a:c1:f6:cf:e7:96:4f:46:a2:09:45:ae:68:c0:e2: 91:58:86:30:4f:18:99:ac:c0:57:b0:55:82:04:2f:b0:0a:d8: f8:68:4d:76:33:81:0c:c2:a1:0d:51:08:23:a2:df:6a:e5:5f: 09:7e:bb:29:5b:27:5a:d1:59:69:b6:ee:0b:a2:cc:ec:46:e1: f3:c6:1c:cd:81:17:86:5b:2d:e3:ab:fc:dc:fd:62:b2:b2:4d: b1:f5:5f:3c:bd:a7:88:53:97:a7:57:10:6e:cd:c1:47:de:fc: 27:48:4d:b0:48:c5:9c:ab:8a:15:42:86:90:3b:3d:79:e9:eb: e0:28:b7:9d:dc:02:4a:e2:20:8e:e1:6a:53:a0:a5:29:12:95: 9f:2a:ba:49:9e:4c:ce:89:25:6a:12:4d:5b:76:2c:5f:77:77: 41:76:0e:23:8b:52:a5:a5:ac:ea:1f:dc:94:9a:c7:22:5b:7b: 8e:0a:f5:ad:1a:8d:d4:c0:03:ec:7f:08:79:e8:5f:91:c7:8e: 6e:57:b7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAjx4xcs7mniiCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZWZlNDUyZDAtMmZlYS00MDc1LWIzN2ItZmNmZjcxMTIyNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bVyDoZCR1lgf7sTFynY3ViIKJnu2PrUgxX3 luJQIHZBGIsqKTxDoWC37VHhPUZXSkdM6CRowKlxkeCJ3DaAl+JBZ5XS47tjXpJY qJJNm3z1f8K9M9g8GiJhXBsQ+OcH+xAf06YgeBlqpOChqpX91eLMQ/bijRqncfOr uhgAsZD+D5XElpDndWlGzT0FUOKUK5QihPL3GcvkICt46zwUFpZP8yF8pe0zqDMw +DVp9wZAgPluljSfdgxM3cSR5oXoe1shkqUhQFggAPkRADA9qw34kEJm99VAc6Et yXUr1TGDF5nlxOwMKLvc5MHMoL/MhFLV/C5hplx29iddWXpA1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTmjPY60r06vyn64UuhniGRqMCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2E4ZTZmMWYtOWU2Mi0z MTJmLWI1ZjMtYTE5OTExMjg2ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMA+MTqJmj7tyUf3JdkhDiIP5+MuqvNC6vK1VZW1extL62lneKj0mjbA D3U3aBym65ozJN6AWoetChrB9s/nlk9GoglFrmjA4pFYhjBPGJmswFewVYIEL7AK 2PhoTXYzgQzCoQ1RCCOi32rlXwl+uylbJ1rRWWm27guizOxG4fPGHM2BF4ZbLeOr /Nz9YrKyTbH1Xzy9p4hTl6dXEG7NwUfe/CdITbBIxZyrihVChpA7PXnp6+Aot53c AkriII7halOgpSkSlZ8qukmeTM6JJWoSTVt2LF93d0F2DiOLUqWlrOof3JSaxyJb e44K9a0ajdTAA+x/CHnoX5HHjm5Xt6Y= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:01 2025 by rpki-client