$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa File: 3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa (raw, json) Hash identifier: Gjjcd4gYn0HCWigfF4DBs4yklqR4cdqXeop+bHumdA8= Subject key identifier: 14:56:0E:FE:47:47:BE:02:FC:FF:3A:E6:BB:1E:53:BE:A6:94:31:C7 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B9E07C0F237CFA0A0958EEE80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 7018 IP address blocks: 142.147.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c0:f2:37:cf:a0:a0:95:8e:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=68b1e36d-cd6f-4ff4-9802-6fa83091a7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:56:4a:be:c2:5a:0f:4b:ab:50:96:3a:8e: f7:86:52:36:1e:99:29:cc:7b:b7:89:9c:bf:a3:64: 05:32:10:13:52:9f:0c:86:8c:2a:cd:9b:17:8b:f6: db:0c:04:58:97:72:5e:37:be:cd:8c:c3:f2:c7:c6: bd:a6:9e:2e:d8:55:29:00:ce:d0:2a:63:77:f6:a9: b4:53:78:77:45:ed:1c:ed:13:2d:80:fb:5b:d0:f3: e3:24:df:7d:b4:ce:cf:d9:77:06:8f:6f:2c:33:d6: cd:29:5e:6d:16:77:9f:c8:6b:55:a0:fb:4e:ae:13: d5:35:4a:e1:b0:ec:dd:c3:d5:7d:fc:66:9e:be:1e: 04:b0:1d:5c:f9:87:84:a7:de:ab:35:1d:36:50:b2: 8a:b2:3e:ab:b7:0e:44:ff:44:44:30:fa:76:a1:46: cb:e4:80:ea:e3:24:33:91:65:e0:ff:53:99:23:a3: 40:70:be:8c:cc:e5:4b:45:fe:4b:66:a9:01:71:f9: 2c:87:54:23:f3:b9:da:9c:af:bd:39:d9:2e:64:e5: 49:86:70:96:2a:8a:56:4f:4e:39:6a:07:02:80:14: 3c:97:05:97:f5:12:21:fc:ae:6b:41:e6:80:15:b0: 20:6d:5f:d7:cf:56:b4:bf:5c:99:fe:f5:28:0d:90: 00:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:56:0E:FE:47:47:BE:02:FC:FF:3A:E6:BB:1E:53:BE:A6:94:31:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d1eb318-b0a0-33fb-8bf0-302711d01cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 142.147.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:69:ac:b8:fb:d0:c6:61:29:4e:63:33:ac:ad:12:02:2d:c6: a8:10:9b:b9:cc:5f:61:7e:0a:2d:85:b1:71:f2:a0:bc:79:25: e5:08:b6:0d:95:72:eb:59:02:10:a7:00:a5:7e:ea:f6:71:73: 0f:d3:b5:6a:11:95:ad:b0:52:d0:bc:23:65:c0:2c:59:3d:1f: 62:ca:3b:d2:85:8e:64:bf:45:f7:c7:73:32:ab:1f:c9:5d:cb: 6a:2a:18:1d:94:f6:87:3f:86:68:25:d1:3a:a5:21:94:ed:cf: 13:64:d3:a8:d4:ac:e1:65:24:fa:d0:e2:d2:25:3a:12:d8:85: ca:af:46:cd:98:51:18:f6:e6:06:81:a7:8c:3c:76:a0:ee:3c: 9b:21:1c:5b:71:43:f1:39:ad:58:58:db:f8:91:de:bd:09:36: 93:19:ee:93:e0:36:91:d9:1d:c9:9e:44:5a:05:4b:a9:fe:42: 9e:63:f2:b6:93:65:56:48:07:36:30:16:6c:bd:a0:3b:ed:b1: 32:bc:7a:b9:36:92:45:15:21:da:1e:66:67:ee:26:e1:af:d1: 25:6f:94:2f:be:0c:fa:6c:a5:b0:d6:90:4b:d9:1d:b7:2f:33: ee:bd:d4:05:8c:e3:89:a8:a4:d0:13:7e:0d:db:e7:59:8b:00: b8:52:4c:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8DyN8+goJWO7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NjhiMWUzNmQtY2Q2Zi00ZmY0LTk4MDItNmZhODMwOTFhN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmRWSr7CWg9Lq1CWOo73hlI2HpkpzHu3iZy/ o2QFMhATUp8MhowqzZsXi/bbDARYl3JeN77NjMPyx8a9pp4u2FUpAM7QKmN39qm0 U3h3Re0c7RMtgPtb0PPjJN99tM7P2XcGj28sM9bNKV5tFnefyGtVoPtOrhPVNUrh sOzdw9V9/Gaevh4EsB1c+YeEp96rNR02ULKKsj6rtw5E/0REMPp2oUbL5IDq4yQz kWXg/1OZI6NAcL6MzOVLRf5LZqkBcfksh1Qj87nanK+9OdkuZOVJhnCWKopWT045 agcCgBQ8lwWX9RIh/K5rQeaAFbAgbV/Xz1a0v1yZ/vUoDZAAdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRWDv5HR74C/P865rseU76mlDHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2QxZWIzMTgtYjBhMC0z M2ZiLThiZjAtMzAyNzExZDAxY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlprLj70MZhKU5jM6ytEgItxqgQm7nMX2F+Ci2FsXHyoLx5JeUItg2V cutZAhCnAKV+6vZxcw/TtWoRla2wUtC8I2XALFk9H2LKO9KFjmS/RffHczKrH8ld y2oqGB2U9oc/hmgl0TqlIZTtzxNk06jUrOFlJPrQ4tIlOhLYhcqvRs2YURj25gaB p4w8dqDuPJshHFtxQ/E5rVhY2/iR3r0JNpMZ7pPgNpHZHcmeRFoFS6n+Qp5j8raT ZVZIBzYwFmy9oDvtsTK8erk2kkUVIdoeZmfuJuGv0SVvlC++DPpspbDWkEvZHbcv M+691AWM44mopNATfg3b51mLALhSTOo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:19 2025 by rpki-client