$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa File: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (raw, json) Hash identifier: Ec6ssb2VN/eWdoMZf4jaCm+feqLm/yH48awfJFdKwLU= Subject key identifier: 3B:DC:61:8D:3F:4A:D8:7A:8A:55:45:ED:D2:E7:5F:C5:69:B7:CC:C0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584AA2485FD4BDCFCB9FF05E2DA0 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa Signing time: Fri 25 Jul 2025 08:47:32 +0000 ROA not before: Fri 25 Jul 2025 08:47:32 +0000 ROA not after: Thu 23 Oct 2025 08:47:32 +0000 asID: 22641 IP address blocks: 216.169.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:48:5f:d4:bd:cf:cb:9f:f0:5e:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jul 25 08:47:32 2025 GMT Not After : Oct 23 08:47:32 2025 GMT Subject: CN=8e890e45-713d-4261-b6b6-1077fdfddde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:52:02:cb:4b:88:da:82:bb:d1:15:13:03: a9:b3:58:d1:be:2e:d0:08:81:f7:2a:a9:e9:0d:17: 66:1d:76:30:71:37:5b:8d:27:87:c7:f9:b1:31:89: 9c:3f:b7:c0:4c:dd:a2:28:69:5c:58:ef:7b:23:7a: 9d:3e:44:fa:68:3e:df:12:65:d6:1a:5e:fe:1b:c0: 83:35:3a:6a:47:e0:b8:bd:7e:27:bc:3c:a3:60:70: f1:38:1b:72:00:36:64:60:7c:f9:19:e6:67:8a:07: d7:b1:53:85:c7:e4:43:0b:c8:d2:c6:ff:0d:88:66: 66:f4:17:9a:b2:b6:aa:3d:54:fb:5c:d0:93:93:6c: ae:f7:6a:42:ab:a5:56:37:b6:7d:c3:85:52:21:b0: 7c:c7:a7:81:f7:95:fb:2e:f7:85:92:b3:12:70:9f: 0b:41:9f:8c:92:83:dc:2d:ef:e5:de:9e:04:28:8e: d0:a2:88:02:a5:7e:32:fa:37:d3:80:d6:12:01:ee: 92:f2:52:d0:fe:e5:ce:6c:9b:ce:b6:9d:57:f5:6f: 59:0d:bb:4b:9b:df:3f:e7:17:98:16:63:18:e1:a7: fb:45:f3:df:21:7e:d7:91:32:76:4e:42:fd:46:32: db:ab:83:60:fe:fa:d5:c2:02:41:20:d7:37:23:a5: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DC:61:8D:3F:4A:D8:7A:8A:55:45:ED:D2:E7:5F:C5:69:B7:CC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2c:e7:9c:a4:ff:ec:c5:ac:f3:12:fc:ae:eb:b2:7e:c4:57: 92:9b:bf:bf:bc:f1:ce:71:b8:d6:4f:32:05:c8:7e:59:5f:56: 5d:cd:f0:e2:47:5c:62:fd:10:37:95:b6:2b:9c:22:10:02:8f: c2:4a:da:7a:8d:5c:09:1c:3a:06:96:ee:97:fd:c0:a7:8b:d2: 21:06:b6:81:3e:59:37:06:0f:db:5d:08:99:42:a0:d0:8c:8a: 9f:3b:f0:82:0c:80:28:c4:72:bc:aa:a5:fc:a6:6a:25:63:05: e3:54:7e:c5:c1:f1:99:50:1e:01:68:d1:c9:4b:d9:ee:d6:4f: aa:f9:8c:eb:de:93:1a:d8:2c:5f:8d:64:56:23:6f:d5:d9:52: 0a:c7:99:9e:a2:a5:c8:fe:6c:58:56:03:d0:17:df:ad:af:94: df:1f:8c:61:cb:1b:7a:b4:d5:5b:6e:e9:e9:cb:19:81:b9:d6: b0:c0:44:6e:77:91:83:10:88:08:3c:7f:ec:7e:fa:24:74:f4: e7:cd:2e:5c:6e:5a:0e:e0:1c:f0:0a:fd:49:86:50:55:7b:29: 60:69:56:dc:94:16:7a:0f:e4:b0:3c:84:51:b5:f6:d6:56:8f: 8b:93:0a:e3:8d:07:ce:22:55:78:2b:96:a7:5f:ad:b8:d0:61: 0d:da:21:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqiSF/Uvc/Ln/BeLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI1MDcyNTA4NDczMloXDTI1MTAyMzA4NDczMlowLzEtMCsGA1UEAxMk OGU4OTBlNDUtNzEzZC00MjYxLWI2YjYtMTA3N2ZkZmRkZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUdSAstLiNqCu9EVEwOps1jRvi7QCIH3Kqnp DRdmHXYwcTdbjSeHx/mxMYmcP7fATN2iKGlcWO97I3qdPkT6aD7fEmXWGl7+G8CD NTpqR+C4vX4nvDyjYHDxOBtyADZkYHz5GeZnigfXsVOFx+RDC8jSxv8NiGZm9Bea sraqPVT7XNCTk2yu92pCq6VWN7Z9w4VSIbB8x6eB95X7LveFkrMScJ8LQZ+MkoPc Le/l3p4EKI7QoogCpX4y+jfTgNYSAe6S8lLQ/uXObJvOtp1X9W9ZDbtLm98/5xeY FmMY4af7RfPfIX7XkTJ2TkL9RjLbq4Ng/vrVwgJBINc3I6WyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvcYY0/Sth6ilVF7dLnX8Vpt8zAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvNGY3MTRmYzYtMjgxYy0z MDg0LTgwMTgtMDllZjc2NGU3ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2KnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJos55yk/+zFrPMS/K7rsn7EV5Kbv7+88c5xuNZPMgXIfllfVl3N8OJH XGL9EDeVtiucIhACj8JK2nqNXAkcOgaW7pf9wKeL0iEGtoE+WTcGD9tdCJlCoNCM ip878IIMgCjEcryqpfymaiVjBeNUfsXB8ZlQHgFo0clL2e7WT6r5jOvekxrYLF+N ZFYjb9XZUgrHmZ6ipcj+bFhWA9AX362vlN8fjGHLG3q01Vtu6enLGYG51rDARG53 kYMQiAg8f+x++iR09OfNLlxuWg7gHPAK/UmGUFV7KWBpVtyUFnoP5LA8hFG19tZW j4uTCuONB84iVXgrlqdfrbjQYQ3aIR0= -----END CERTIFICATE-----Generated at Sun Aug 10 10:42:07 2025 by rpki-client