$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/18f5c96f-14eb-3372-9eca-1733fe1ed835.roa File: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (raw, json) Hash identifier: M9OZp34aKCYeaX1TxdtkYuUs1h2FBBLK0gYrbUVGzFU= Subject key identifier: B6:33:0C:F8:6B:71:27:DC:DA:4B:B1:DC:98:EB:2E:7E:76:80:1C:EA Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584AA24109A5D461AD694946A200 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/18f5c96f-14eb-3372-9eca-1733fe1ed835.roa Signing time: Fri 25 Jul 2025 08:32:45 +0000 ROA not before: Fri 25 Jul 2025 08:32:45 +0000 ROA not after: Thu 23 Oct 2025 08:32:45 +0000 asID: 22641 IP address blocks: 216.169.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:41:09:a5:d4:61:ad:69:49:46:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jul 25 08:32:45 2025 GMT Not After : Oct 23 08:32:45 2025 GMT Subject: CN=72c6f227-d201-439c-a4f3-c03696765363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:55:2e:cd:65:d4:a6:10:ec:77:c0:06:05: 42:70:5a:c0:48:b4:67:24:ce:3e:bb:82:ff:c1:14: 35:ac:cd:b1:4b:d5:ad:83:7f:33:de:af:56:40:e7: 43:39:54:00:aa:0d:02:09:57:3b:7c:e2:45:ac:d9: 96:a6:fe:e7:3b:93:85:44:c9:d3:98:7c:2f:8b:07: 75:81:9a:b1:0f:c7:27:5e:d6:40:99:f5:44:da:e3: 8f:1a:a9:2c:b9:b8:84:f2:f8:ec:b5:50:dc:a8:6f: 1d:45:6f:8a:08:61:7c:30:28:9a:fc:63:81:18:1e: 1e:96:a8:b9:27:15:fe:bd:ea:8d:cc:0b:b9:6d:23: 83:ec:08:1a:97:1e:f2:07:fe:67:f7:43:d7:aa:28: 25:03:db:88:fb:e5:4b:6c:72:ef:9e:86:b3:7a:fb: d9:c6:fe:d1:ad:18:cb:f8:74:64:26:e0:73:65:5c: d5:59:af:b9:66:0b:26:c2:db:e5:90:b3:1b:08:d1: de:1c:d7:02:52:fe:ba:d6:15:07:d3:e8:ff:f0:6a: b0:84:f9:3f:57:63:d3:29:57:8a:65:2e:4d:03:cc: da:30:c9:10:26:15:4a:0b:03:88:2f:13:a4:ac:e3: c4:fb:20:94:8f:be:dc:92:c2:df:9c:8f:66:24:04: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:33:0C:F8:6B:71:27:DC:DA:4B:B1:DC:98:EB:2E:7E:76:80:1C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/18f5c96f-14eb-3372-9eca-1733fe1ed835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:6e:a1:6b:fb:28:42:25:36:61:d9:bc:31:b9:56:c2:44:65: d5:04:b9:48:21:a9:a3:b2:60:25:34:0e:e2:2d:f6:70:02:53: b0:ae:f0:c4:38:18:30:05:5a:bd:1c:12:47:a6:f0:82:82:98: b3:96:44:43:a8:6f:b6:72:fb:36:ae:93:17:09:73:42:d5:bc: 08:f7:66:4d:bd:68:c4:c5:8f:90:0d:e6:39:ac:6a:97:5e:71: 09:c0:fe:fd:43:30:be:a1:e6:f1:ac:e3:a2:0b:43:9f:66:7b: 83:34:50:53:62:7e:8d:58:be:53:99:d8:f9:28:5b:f3:ce:21: 12:bc:09:25:27:23:c0:55:24:7c:42:d5:8a:b8:ae:49:ab:54: 63:b3:84:ed:4e:30:a7:20:01:62:16:36:4e:79:71:62:2f:e0: ea:63:eb:fc:b2:54:f3:e8:91:31:c4:c6:2d:da:70:ab:fb:3c: 91:04:c1:a0:a7:5a:0c:18:6e:fb:a1:84:80:fa:0c:8d:9c:fc: ba:a9:1d:97:c9:45:2f:77:0a:d0:68:0d:d4:cc:b8:fe:18:ff: c6:1a:15:fd:7c:93:5a:15:34:a1:e3:ae:a9:5a:8e:3f:ae:6a: 58:3b:3b:ab:f9:9a:d2:6c:ec:c0:f1:87:da:7f:35:64:02:31: 55:01:fb:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqiQQml1GGtaUlGogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI1MDcyNTA4MzI0NVoXDTI1MTAyMzA4MzI0NVowLzEtMCsGA1UEAxMk NzJjNmYyMjctZDIwMS00MzljLWE0ZjMtYzAzNjk2NzY1MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+tVLs1l1KYQ7HfABgVCcFrASLRnJM4+u4L/ wRQ1rM2xS9Wtg38z3q9WQOdDOVQAqg0CCVc7fOJFrNmWpv7nO5OFRMnTmHwviwd1 gZqxD8cnXtZAmfVE2uOPGqksubiE8vjstVDcqG8dRW+KCGF8MCia/GOBGB4elqi5 JxX+veqNzAu5bSOD7Agalx7yB/5n90PXqiglA9uI++VLbHLvnoazevvZxv7RrRjL +HRkJuBzZVzVWa+5ZgsmwtvlkLMbCNHeHNcCUv661hUH0+j/8GqwhPk/V2PTKVeK ZS5NA8zaMMkQJhVKCwOILxOkrOPE+yCUj77cksLfnI9mJAQqVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYzDPhrcSfc2kux3JjrLn52gBzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMThmNWM5NmYtMTRlYi0z MzcyLTllY2EtMTczM2ZlMWVkODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2KnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBuoWv7KEIlNmHZvDG5VsJEZdUEuUghqaOyYCU0DuIt9nACU7Cu8MQ4 GDAFWr0cEkem8IKCmLOWREOob7Zy+zaukxcJc0LVvAj3Zk29aMTFj5AN5jmsapde cQnA/v1DML6h5vGs46ILQ59me4M0UFNifo1YvlOZ2PkoW/POIRK8CSUnI8BVJHxC 1Yq4rkmrVGOzhO1OMKcgAWIWNk55cWIv4Opj6/yyVPPokTHExi3acKv7PJEEwaCn WgwYbvuhhID6DI2c/LqpHZfJRS93CtBoDdTMuP4Y/8YaFf18k1oVNKHjrqlajj+u alg7O6v5mtJs7MDxh9p/NWQCMVUB+yM= -----END CERTIFICATE-----Generated at Sun Aug 10 13:42:57 2025 by rpki-client