$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa File: 5364c7d8-d88a-387a-887a-c1f60e3aec56.roa (raw, json) Hash identifier: GJyyPYBeYmEoeaRTtskKPCGCgGaQJSyOuUvj/SZPEVA= Subject key identifier: 9A:D1:83:D4:2B:95:08:20:30:76:C0:0D:DD:01:AC:D3:07:B5:2A:18 Certificate issuer: /CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183 Certificate serial: 010D0C9F4328584ABD4BB3931787C915B1668F80 Authority key identifier: 1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 19184 IP address blocks: 137.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:b3:93:17:87:c9:15:b1:66:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=2a5cff87-7658-4aa1-b8a7-915b18c64a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:86:56:10:8b:2d:72:ac:f6:2e:84:ab:c2: 7e:ad:10:a7:02:03:43:24:41:32:97:26:35:a0:02: 7b:da:99:86:90:d9:09:dc:a9:1e:2b:c2:2c:5c:f3: 10:77:47:a5:3c:0c:d5:5f:60:c6:5b:55:71:3d:e6: 5c:e9:c9:8c:5b:6e:36:72:8e:73:ad:ad:03:a9:ae: e6:3a:b8:cb:ab:66:3e:d9:e3:d3:d3:3e:7d:61:c3: 1d:3c:46:0f:79:55:3b:32:5f:b1:7d:20:08:56:47: 0c:04:a6:d9:b2:a4:0f:98:48:25:a8:ee:50:f0:55: 66:e4:4f:13:ed:39:e1:28:66:b4:bc:fe:52:88:39: 82:07:1d:a6:73:6b:9c:7f:3b:3e:cb:e1:0b:85:41: 3b:4e:1c:72:72:08:df:ed:3a:ee:a0:7d:46:7a:73: 3c:e7:7d:60:57:fe:98:e6:07:6f:c0:dc:b4:07:cf: 04:05:09:ed:61:e4:91:65:0a:8d:05:b0:1f:33:bc: f0:d7:b1:d5:26:4c:93:3d:b3:f7:74:2c:23:ad:48: ff:ed:f0:23:36:9a:9d:bd:e6:1d:89:f2:f9:0b:e5: 69:6a:79:fd:ab:ce:b3:4e:12:81:ef:a5:1f:f6:0b: 59:73:e4:ec:3e:08:ec:04:9a:02:41:36:9a:4c:fa: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D1:83:D4:2B:95:08:20:30:76:C0:0D:DD:01:AC:D3:07:B5:2A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl X509v3 Authority Key Identifier: keyid:1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer sbgp-ipAddrBlock: critical IPv4: 137.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b2:72:5d:8f:3f:f3:fe:03:72:e0:2d:a8:e9:b9:34:8d:3b: 4d:f4:5e:90:fb:fc:28:54:49:e8:29:50:cc:55:9f:cf:14:a8: 3b:84:09:a5:5f:33:b1:ec:f8:b3:36:b3:9e:8a:65:76:a7:d5: 0a:a2:0a:b7:8a:f2:40:72:18:e5:82:b1:10:19:fd:e0:7f:fc: bc:37:90:a6:ca:16:49:da:67:dc:a8:8a:4f:6c:18:e6:f5:92: bc:38:1c:01:c3:33:c3:8f:98:95:11:e0:0e:c4:18:e6:e9:b5: 04:8b:7d:13:d5:ff:20:86:14:41:45:9b:6d:fb:fe:b0:cb:c4: e8:84:42:67:ff:4b:80:b0:36:66:4c:dd:05:c1:32:42:1d:f8: 3f:36:ea:31:36:de:bc:df:d1:74:0c:b0:53:1d:c7:d4:b6:da: 84:8f:0c:68:0f:9e:ab:07:e8:69:2b:e7:ed:ab:b0:06:fd:b0: fb:19:25:22:1d:dd:28:a4:30:f5:21:1a:a1:6d:f6:09:82:bb: e6:a8:77:26:65:33:8c:32:f2:80:a5:41:e1:35:e8:d4:5b:95: 70:61:13:c9:76:74:23:85:ee:9a:25:c9:51:d4:22:cb:70:02: 50:ac:14:44:d8:ce:a7:dc:8d:44:51:71:a5:19:c4:a6:61:ca: 84:ce:ba:5c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq9S7OTF4fJFbFmj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE5N2MzMWMtODNkMi00ZTI0LWE0ZjQtOWQ2OWIzZmZh MTgzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MmE1Y2ZmODctNzY1OC00YWExLWI4YTctOTE1YjE4YzY0YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJCGVhCLLXKs9i6Eq8J+rRCnAgNDJEEylyY1 oAJ72pmGkNkJ3KkeK8IsXPMQd0elPAzVX2DGW1VxPeZc6cmMW242co5zra0Dqa7m OrjLq2Y+2ePT0z59YcMdPEYPeVU7Ml+xfSAIVkcMBKbZsqQPmEglqO5Q8FVm5E8T 7TnhKGa0vP5SiDmCBx2mc2ucfzs+y+ELhUE7Thxycgjf7TruoH1GenM8531gV/6Y 5gdvwNy0B88EBQntYeSRZQqNBbAfM7zw17HVJkyTPbP3dCwjrUj/7fAjNpqdveYd ifL5C+Vpann9q86zThKB76Uf9gtZc+TsPgjsBJoCQTaaTPoG2QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJrRg9QrlQggMHbADd0BrNMHtSoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTk3 YzMxYy04M2QyLTRlMjQtYTRmNC05ZDY5YjNmZmExODMvNTM2NGM3ZDgtZDg4YS0z ODdhLTg4N2EtYzFmNjBlM2FlYzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWE5N2MzMWMtODNkMi00ZTI0LWE0 ZjQtOWQ2OWIzZmZhMTgzL2VhOTdjMzFjLTgzZDItNGUyNC1hNGY0LTlkNjliM2Zm YTE4My5jcmwwHwYDVR0jBBgwFoAUH3kI/A7MtQ2T/yt4ZVfRBrYuhQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTk3YzMxYy04M2QyLTRlMjQtYTRmNC05ZDY5 YjNmZmExODMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiRwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMrJyXY8/8/4DcuAtqOm5NI07TfRekPv8KFRJ6ClQzFWfzxSoO4QJpV8z sez4szaznopldqfVCqIKt4ryQHIY5YKxEBn94H/8vDeQpsoWSdpn3KiKT2wY5vWS vDgcAcMzw4+YlRHgDsQY5um1BIt9E9X/IIYUQUWbbfv+sMvE6IRCZ/9LgLA2Zkzd BcEyQh34PzbqMTbevN/RdAywUx3H1LbahI8MaA+eqwfoaSvn7auwBv2w+xklIh3d KKQw9SEaoW32CYK75qh3JmUzjDLygKVB4TXo1FuVcGETyXZ0I4XumiXJUdQiy3AC UKwURNjOp9yNRFFxpRnEpmHKhM66XA== -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:46 2025 by rpki-client