$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/935aecb0-4624-30ef-a160-31451ea08540.roa File: 935aecb0-4624-30ef-a160-31451ea08540.roa (raw, json) Hash identifier: lHNLEnzaVETML8dNhtr/O2llJfcZ3kDhspEPB24MGLA= Subject key identifier: 7B:E7:C9:65:4B:57:95:71:A2:5B:B1:F1:47:F3:4A:B0:29:D8:5B:B6 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B48E1C64BE9A0939AFB589D80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/935aecb0-4624-30ef-a160-31451ea08540.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397630 IP address blocks: 170.199.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c6:4b:e9:a0:93:9a:fb:58:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0c66b087-b25a-4049-8476-13b61b4e3120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:9b:b6:98:da:08:28:bd:4f:5d:1a:32:c0: d9:3b:a8:b7:85:6b:39:b8:66:30:98:56:d5:96:bf: e4:65:24:c4:38:32:71:13:1a:5f:b6:4c:15:5c:7f: 7b:a8:2d:2e:ce:dc:88:54:cb:04:ab:79:f6:62:24: d0:e1:da:72:de:cc:c1:46:67:3b:e0:19:8e:24:a9: 8a:9a:fa:c1:24:6b:45:f6:da:89:a2:6b:13:c9:2e: 56:b4:b1:5d:8b:18:df:ea:72:ab:f5:c1:a3:c7:11: 37:aa:27:6b:4b:ec:dd:51:46:fa:14:0a:5e:a6:7c: 79:f0:28:06:77:41:18:91:d5:79:bd:59:04:9d:a9: f9:cf:fa:5c:ff:62:e0:f3:ef:25:32:57:1d:64:ff: aa:3c:69:7d:20:49:6d:57:08:25:55:a4:d3:03:68: 8b:7a:0a:66:a9:48:ee:1f:a8:d7:d2:0d:3a:55:47: 34:f9:75:7e:32:7f:20:22:47:de:60:dc:80:00:73: 1a:2a:6e:f8:66:f8:af:5d:da:ac:27:7e:f1:13:d0: 95:bb:42:0d:b5:63:96:bb:36:83:bf:ae:aa:c6:6e: 22:d8:52:d3:ac:3b:5c:32:3e:72:e1:fc:bf:06:e0: 4e:25:5e:66:bc:14:d5:58:c1:0a:9a:5d:29:fa:c7: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E7:C9:65:4B:57:95:71:A2:5B:B1:F1:47:F3:4A:B0:29:D8:5B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/935aecb0-4624-30ef-a160-31451ea08540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:58:84:97:8e:c5:2d:af:33:99:a8:a1:17:f6:30:ce:72:fa: 52:13:6b:9e:cc:88:1f:c5:ed:c1:e9:34:d7:b8:1d:fb:fa:72: 8d:3e:42:32:cf:c3:79:a5:e9:5e:ba:8f:72:3a:01:82:55:ff: 79:d2:30:c9:42:ad:9c:88:43:3e:7b:e1:72:29:26:e0:93:5a: 8c:7c:03:9a:21:70:ad:16:a0:34:18:c7:d4:1c:db:56:8b:a5: 50:1e:0d:75:f3:bc:61:75:82:1a:46:95:cb:fc:40:04:6b:b3: e2:a4:db:75:1b:61:d2:ad:79:3b:eb:b8:b4:c7:c2:35:24:aa: 5d:d3:03:aa:c2:d5:f7:16:bb:32:20:91:9f:05:33:0f:65:b4: c5:e4:6e:12:36:1c:ff:9c:a0:b8:06:cc:0c:2e:42:6e:11:fb: b0:92:1a:3c:d1:ae:6c:82:e7:d2:a2:3f:fa:29:ed:1c:a8:17: c1:36:8c:70:7d:08:76:8d:cf:16:bc:33:82:7d:ce:d9:d7:2b: 19:be:68:28:cf:2b:bc:c3:55:50:3f:99:68:76:19:da:a7:93: f7:33:28:ea:46:0b:69:e6:82:31:cf:2c:da:6d:43:78:9c:d6: 8b:07:fe:60:aa:b6:d0:82:d9:bb:74:ab:d1:1f:fa:f4:62:94: 28:6d:c9:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cZL6aCTmvtYnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGM2NmIwODctYjI1YS00MDQ5LTg0NzYtMTNiNjFiNGUzMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprabtpjaCCi9T10aMsDZO6i3hWs5uGYwmFbV lr/kZSTEODJxExpftkwVXH97qC0uztyIVMsEq3n2YiTQ4dpy3szBRmc74BmOJKmK mvrBJGtF9tqJomsTyS5WtLFdixjf6nKr9cGjxxE3qidrS+zdUUb6FApepnx58CgG d0EYkdV5vVkEnan5z/pc/2Lg8+8lMlcdZP+qPGl9IEltVwglVaTTA2iLegpmqUju H6jX0g06VUc0+XV+Mn8gIkfeYNyAAHMaKm74ZvivXdqsJ37xE9CVu0INtWOWuzaD v66qxm4i2FLTrDtcMj5y4fy/BuBOJV5mvBTVWMEKml0p+scvowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvnyWVLV5Vxolux8UfzSrAp2Fu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOTM1YWVjYjAtNDYyNC0z MGVmLWExNjAtMzE0NTFlYTA4NTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNYhJeOxS2vM5mooRf2MM5y+lITa57MiB/F7cHpNNe4Hfv6co0+QjLP w3ml6V66j3I6AYJV/3nSMMlCrZyIQz574XIpJuCTWox8A5ohcK0WoDQYx9Qc21aL pVAeDXXzvGF1ghpGlcv8QARrs+Kk23UbYdKteTvruLTHwjUkql3TA6rC1fcWuzIg kZ8FMw9ltMXkbhI2HP+coLgGzAwuQm4R+7CSGjzRrmyC59KiP/op7RyoF8E2jHB9 CHaNzxa8M4J9ztnXKxm+aCjPK7zDVVA/mWh2Gdqnk/czKOpGC2nmgjHPLNptQ3ic 1osH/mCqttCC2bt0q9Ef+vRilChtyYA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:14 2025 by rpki-client