$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa File: 8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa (raw, json) Hash identifier: hzOhVg2vpYdAy0zBHbgOMCzsA793JkBXKX9yHwijzv8= Subject key identifier: C3:DC:20:A1:F5:D6:46:A5:FE:1A:4F:69:93:40:98:CF:6F:46:AA:6A Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584B52A77F6DE619074A24B58C20 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 40466 IP address blocks: 170.186.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:7f:6d:e6:19:07:4a:24:b5:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c38cf6e0-be40-4d1a-9110-f96b69500432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:7a:cf:35:2d:5f:cf:ee:99:f8:5b:50:de: 61:7d:ab:e4:c9:a9:67:99:9a:c9:01:e4:2f:42:0a: 04:6d:a3:62:8a:5f:81:8e:51:58:51:d7:dd:ae:fe: 36:20:22:6f:45:4c:8a:9b:5f:fc:48:4a:11:a0:93: ca:8d:12:68:dd:67:56:5e:f7:76:07:a0:5c:01:4f: f9:ec:1e:75:66:11:aa:27:f4:5c:15:08:ee:36:e6: ef:a2:38:c1:20:ce:9a:af:df:1f:04:2e:b1:4c:06: f8:e1:4d:b9:e3:43:58:56:37:88:9f:94:99:7a:9a: 3a:60:40:97:20:12:40:61:e9:d1:30:5c:8f:c2:f7: 33:d0:0d:2d:81:b9:aa:1c:f3:e6:bf:01:d3:a0:9f: 9f:45:6b:15:33:bd:45:2a:ba:69:b6:71:47:c0:cf: b1:28:8f:9c:4e:85:1b:75:45:f4:c7:c7:bd:66:8b: 9d:d6:59:69:9c:02:2a:5f:74:db:9c:a7:b9:62:7b: 34:1b:2f:7e:65:a5:f5:a7:3b:15:8d:29:8c:d2:61: 47:86:cd:17:7d:58:cc:cf:ff:a4:4b:b0:0f:95:9f: 3c:a8:ba:dc:e6:f6:be:70:2b:e0:f5:76:0c:fd:c7: cc:07:0d:5d:bd:ad:0e:f5:47:dc:a8:06:86:73:83: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:20:A1:F5:D6:46:A5:FE:1A:4F:69:93:40:98:CF:6F:46:AA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:94:45:69:07:64:4b:bc:7f:72:63:a8:8d:23:8f:fa:61:27: 63:19:e5:d0:50:9e:46:a2:43:ad:75:03:d4:29:42:f0:3c:44: f1:39:97:ca:91:6c:aa:5f:0e:df:2a:c9:e3:9a:cd:fd:af:b4: 93:e7:cf:17:aa:88:bd:29:98:1e:11:11:32:62:95:be:e2:9e: 26:b0:2b:d2:a9:18:80:e0:4c:41:1d:12:a4:66:9a:d5:a7:43: df:9f:c1:09:07:9a:37:44:45:6c:49:69:e2:fc:81:76:43:11: 56:28:2e:b8:8c:2d:ca:4b:2a:18:38:81:a2:a9:86:25:b6:88: 83:c9:58:1a:8d:1e:4b:14:9f:44:7b:36:2a:c5:e6:4f:ae:62: 63:30:18:13:21:f9:40:8d:f5:2c:9a:3f:0e:90:11:8c:d2:93: 27:5e:88:55:4a:5a:81:d8:66:8c:75:c2:db:eb:22:d4:03:74: d5:77:99:15:f5:de:a5:37:06:a6:ff:f9:1f:46:f5:5c:46:f8: 2b:9f:e3:6b:45:24:b9:dc:7a:16:a3:fa:a4:7a:db:35:cb:bb: 4a:88:50:a1:35:b2:ea:4a:57:a2:cb:e4:01:38:b2:2e:1c:70: 59:f6:5f:35:68:31:75:c3:69:20:6a:b7:c0:b3:14:07:b9:4b: 8a:e3:17:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp39t5hkHSiS1jCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzM4Y2Y2ZTAtYmU0MC00ZDFhLTkxMTAtZjk2YjY5NTAwNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+h6zzUtX8/umfhbUN5hfavkyalnmZrJAeQv QgoEbaNiil+BjlFYUdfdrv42ICJvRUyKm1/8SEoRoJPKjRJo3WdWXvd2B6BcAU/5 7B51ZhGqJ/RcFQjuNubvojjBIM6ar98fBC6xTAb44U2540NYVjeIn5SZepo6YECX IBJAYenRMFyPwvcz0A0tgbmqHPPmvwHToJ+fRWsVM71FKrpptnFHwM+xKI+cToUb dUX0x8e9Zoud1llpnAIqX3TbnKe5Yns0Gy9+ZaX1pzsVjSmM0mFHhs0XfVjMz/+k S7APlZ88qLrc5va+cCvg9XYM/cfMBw1dva0O9UfcqAaGc4NVkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPcIKH11kal/hpPaZNAmM9vRqpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOGFhYjNjZDctZTM0ZC0z MGU5LTg0YjEtNzQwM2FiNjIwZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+URWkHZEu8f3JjqI0jj/phJ2MZ5dBQnkaiQ611A9QpQvA8RPE5l8qR bKpfDt8qyeOazf2vtJPnzxeqiL0pmB4RETJilb7iniawK9KpGIDgTEEdEqRmmtWn Q9+fwQkHmjdERWxJaeL8gXZDEVYoLriMLcpLKhg4gaKphiW2iIPJWBqNHksUn0R7 NirF5k+uYmMwGBMh+UCN9SyaPw6QEYzSkydeiFVKWoHYZox1wtvrItQDdNV3mRX1 3qU3Bqb/+R9G9VxG+Cuf42tFJLncehaj+qR62zXLu0qIUKE1supKV6LL5AE4si4c cFn2XzVoMXXDaSBqt8CzFAe5S4rjF/s= -----END CERTIFICATE-----Generated at Tue Nov 4 19:56:03 2025 by rpki-client