$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa File: 7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa (raw, json) Hash identifier: S2+LQYOv3TJlKaT+q2a71noWFQOIC8TcdDIQdHi5+j4= Subject key identifier: 81:03:1C:AA:BD:5C:8B:F9:2B:93:D3:73:2B:05:B5:FE:70:76:19:02 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A8B0B5B5707B3A2724D41D380 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 397630 IP address blocks: 208.89.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5b:57:07:b3:a2:72:4d:41:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=282855a8-0596-4eaf-b158-0268e8102f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:fd:f2:e8:db:e8:fc:f1:44:be:82:aa:9b: ec:f4:f0:12:8d:6b:fe:83:87:6c:e1:46:21:0a:8d: bd:b0:86:0c:31:65:ae:ea:a8:93:9f:53:e9:e2:49: de:f4:b8:f2:be:d0:65:49:5b:1f:fa:80:eb:79:25: bd:19:da:8e:04:b7:6d:4b:6b:07:cb:47:da:5c:2c: b3:36:96:67:89:e9:74:a8:7b:61:bc:0f:6b:b9:b5: 4c:2e:8a:8c:f7:9f:82:17:e9:9a:04:64:eb:bb:06: 45:ac:f2:24:d1:ee:da:c0:a0:96:9d:aa:1f:8e:d6: f2:06:77:1a:e9:56:da:f9:ff:35:f2:26:d8:dd:e9: 0b:fc:a9:c8:6a:82:ba:11:a2:50:ec:62:a9:c4:71: 5a:23:7d:60:ae:5e:54:12:d0:6e:20:2e:df:43:cc: 2a:ec:82:a2:dc:66:e0:54:df:d3:56:63:d7:8a:d9: fb:c9:b5:4b:0d:8a:43:f6:a6:2c:4e:59:e8:43:84: 53:56:48:47:0d:81:85:76:70:ab:59:b8:6c:4c:c4: da:6e:0a:87:47:b4:d9:e7:35:3c:09:a1:3b:a5:4d: 17:12:db:f0:a0:3e:20:91:df:e0:75:25:90:c0:ea: fc:11:36:84:ae:3c:3a:c5:28:2d:c0:2e:34:2f:14: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:03:1C:AA:BD:5C:8B:F9:2B:93:D3:73:2B:05:B5:FE:70:76:19:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:dd:b6:e4:b3:2f:b0:4e:36:59:1b:20:39:2c:5a:03:66:08: f8:db:cd:1b:16:5d:ab:5b:93:62:88:d2:1a:48:8b:bd:48:28: ee:b4:31:86:b1:fc:51:51:90:84:a5:8c:8a:e8:84:0e:bd:36: 84:8f:c9:46:c4:54:45:d6:4c:99:d5:3f:0e:88:67:d1:a6:3d: 1b:59:c4:91:1d:c2:fd:dc:ea:71:7f:83:46:e3:62:6e:c7:48: c6:fb:08:0d:39:28:54:be:5d:d6:95:c5:db:c6:4a:a1:63:0f: 7c:af:70:e4:b2:07:b3:ea:c5:70:c4:58:56:e5:bc:fd:fc:94: e1:a6:af:cc:46:02:2a:ab:07:46:27:4e:ca:c2:ea:40:32:3f: 95:90:29:bf:f7:d4:d0:fc:b8:ab:f7:14:1c:de:1b:f2:28:fb: 9d:2a:46:08:8f:20:88:38:4e:d0:0e:65:51:ca:1f:bf:dc:64: d9:36:0e:de:86:3e:af:16:f4:c3:0d:10:c3:1b:c9:ce:7a:be: a3:34:9f:02:63:c1:e8:58:d5:05:00:b9:f9:05:e1:b9:a1:03: ad:02:3e:48:49:45:e9:d1:fc:53:a1:c6:94:f5:8e:a3:44:68: b0:2c:04:1a:b2:d8:87:c3:bc:f9:ca:d3:f3:93:2c:df:ce:b1: c1:99:7c:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1tXB7Oick1B04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MjgyODU1YTgtMDU5Ni00ZWFmLWIxNTgtMDI2OGU4MTAyZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5T98ujb6PzxRL6Cqpvs9PASjWv+g4ds4UYh Co29sIYMMWWu6qiTn1Pp4kne9LjyvtBlSVsf+oDreSW9GdqOBLdtS2sHy0faXCyz NpZniel0qHthvA9rubVMLoqM95+CF+maBGTruwZFrPIk0e7awKCWnaofjtbyBnca 6Vba+f818ibY3ekL/KnIaoK6EaJQ7GKpxHFaI31grl5UEtBuIC7fQ8wq7IKi3Gbg VN/TVmPXitn7ybVLDYpD9qYsTlnoQ4RTVkhHDYGFdnCrWbhsTMTabgqHR7TZ5zU8 CaE7pU0XEtvwoD4gkd/gdSWQwOr8ETaErjw6xSgtwC40LxSQMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEDHKq9XIv5K5PTcysFtf5wdhkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvN2RmYmFmM2ItMTMyZi0z YmZhLTliZDctMmY2YTdkOWU3OWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfdtuSzL7BONlkbIDksWgNmCPjbzRsWXatbk2KI0hpIi71IKO60MYax /FFRkISljIrohA69NoSPyUbEVEXWTJnVPw6IZ9GmPRtZxJEdwv3c6nF/g0bjYm7H SMb7CA05KFS+XdaVxdvGSqFjD3yvcOSyB7PqxXDEWFblvP38lOGmr8xGAiqrB0Yn TsrC6kAyP5WQKb/31ND8uKv3FBzeG/Io+50qRgiPIIg4TtAOZVHKH7/cZNk2Dt6G Pq8W9MMNEMMbyc56vqM0nwJjwehY1QUAufkF4bmhA60CPkhJRenR/FOhxpT1jqNE aLAsBBqy2IfDvPnK0/OTLN/OscGZfKg= -----END CERTIFICATE-----Generated at Wed Aug 6 04:17:35 2025 by rpki-client