$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa File: 41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa (raw, json) Hash identifier: 2QSo80rNrO7HD9n+8oo08g42d/2/N9lAwg1pakBMpMU= Subject key identifier: B9:4B:2F:1D:5B:88:3B:A1:43:3B:DD:1F:CC:20:6D:22:CC:0D:2E:B5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B79BCB918AF08C69F81AC8D00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397630 IP address blocks: 207.254.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b9:18:af:08:c6:9f:81:ac:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=525ffc77-f1bf-4251-b10e-453f16f8fa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:c0:2e:fc:eb:c2:c4:73:b8:5b:f7:4b:b1: 90:9e:9f:ec:42:96:b0:90:ca:df:af:b5:6d:8c:60: 74:60:17:34:cd:87:13:db:c2:29:d2:fa:e9:e0:d9: 60:75:fb:2f:5e:23:2f:c1:26:cb:9b:1b:ed:d5:91: 61:02:39:f7:01:f9:95:fa:64:36:c3:e9:7a:c6:ab: 62:5b:87:4b:40:d4:8d:df:ba:a5:74:44:e7:78:f5: ab:0a:94:79:35:06:eb:1d:2b:a8:f2:ea:a2:d9:e1: 2e:39:54:73:e5:a5:16:d3:d6:cc:08:40:ac:53:b5: 0d:71:d9:49:6f:5e:a3:bb:a6:e9:1f:97:f8:c4:a1: 5b:68:06:25:42:08:a8:cb:84:ba:a2:42:7d:8d:01: ee:42:05:8f:03:fa:a5:5f:03:b8:72:a8:73:3a:4d: 16:c9:d2:76:b4:e0:be:ef:5e:35:18:41:ad:ae:72: cc:6a:4a:25:ec:30:90:f3:5a:8c:06:2c:c8:81:58: 38:57:13:c0:ac:f0:27:14:f0:85:ef:1b:ce:32:bf: 77:36:d5:8c:02:30:3a:56:4d:b3:f6:b9:c4:58:6a: 4c:73:7e:67:a2:c4:20:38:b2:e6:b9:91:69:a0:5e: ee:11:0e:46:e2:61:08:16:ea:17:34:55:d3:a6:bf: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4B:2F:1D:5B:88:3B:A1:43:3B:DD:1F:CC:20:6D:22:CC:0D:2E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 207.254.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e9:63:15:48:da:7c:1e:22:a8:71:36:1c:cc:87:c6:6a:87: 7e:58:c6:55:12:e5:d3:34:e8:fc:7e:88:3c:a4:3d:ec:22:15: 61:1f:e0:88:ef:6a:4f:dd:3a:5b:9d:ce:8d:0d:21:ca:f5:6c: 95:f8:28:99:d1:12:79:a1:c0:97:ca:32:a8:2b:15:98:54:c0: 0b:69:fd:40:e1:3a:ec:eb:a4:1e:6f:d7:be:db:b2:5a:60:d6: b2:e1:48:12:10:76:7d:b8:09:3c:01:ce:a4:46:ca:6e:23:da: 0d:a5:da:47:e1:bb:76:6a:1f:63:b1:d5:f5:75:f4:c3:6d:6e: 22:c9:e5:78:ac:a5:44:3a:50:4f:23:e9:37:e6:31:05:84:c6: 15:af:e1:23:ca:0c:cb:26:a8:01:f2:3e:01:01:71:77:7b:c0: b5:e2:97:dd:a3:9b:94:13:23:18:ec:97:14:17:81:a0:cd:55: 3a:e5:7c:57:da:02:82:ac:c1:4f:70:6c:5f:b0:24:66:4e:19: 63:69:6d:2d:41:d9:4c:ae:16:8b:c1:2a:d7:9e:06:a9:0f:22: 6f:10:bc:63:c3:02:71:88:c5:cd:2e:44:61:ad:fa:6b:75:7f: a3:c8:17:aa:ad:88:c5:ca:b3:76:18:1a:dc:0b:94:03:de:da: 27:21:34:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLkYrwjGn4GsjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NTI1ZmZjNzctZjFiZi00MjUxLWIxMGUtNDUzZjE2ZjhmYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2bALvzrwsRzuFv3S7GQnp/sQpawkMrfr7Vt jGB0YBc0zYcT28Ip0vrp4NlgdfsvXiMvwSbLmxvt1ZFhAjn3AfmV+mQ2w+l6xqti W4dLQNSN37qldETnePWrCpR5NQbrHSuo8uqi2eEuOVRz5aUW09bMCECsU7UNcdlJ b16ju6bpH5f4xKFbaAYlQgioy4S6okJ9jQHuQgWPA/qlXwO4cqhzOk0WydJ2tOC+ 7141GEGtrnLMakol7DCQ81qMBizIgVg4VxPArPAnFPCF7xvOMr93NtWMAjA6Vk2z 9rnEWGpMc35nosQgOLLmuZFpoF7uEQ5G4mEIFuoXNFXTpr9KtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlLLx1biDuhQzvdH8wgbSLMDS61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDFjNDRiOGQtMTc1Ni0z N2Q1LWJhMmEtNTZiZGVhZjA4YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfpYxVI2nweIqhxNhzMh8Zqh35YxlUS5dM06Px+iDykPewiFWEf4Ijv ak/dOludzo0NIcr1bJX4KJnREnmhwJfKMqgrFZhUwAtp/UDhOuzrpB5v177bslpg 1rLhSBIQdn24CTwBzqRGym4j2g2l2kfhu3ZqH2Ox1fV19MNtbiLJ5XispUQ6UE8j 6TfmMQWExhWv4SPKDMsmqAHyPgEBcXd7wLXil92jm5QTIxjslxQXgaDNVTrlfFfa AoKswU9wbF+wJGZOGWNpbS1B2UyuFovBKteeBqkPIm8QvGPDAnGIxc0uRGGt+mt1 f6PIF6qtiMXKs3YYGtwLlAPe2ichNPE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:36 2025 by rpki-client