$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa File: 28f935d3-57e6-314d-95ed-7c825db00b08.roa (raw, json) Hash identifier: oivF4PQy+us8ZFI/cQs4BtYeFYrRd09isD9QbLy6MYE= Subject key identifier: D5:9E:CE:6F:0D:7D:FF:26:9B:D0:7A:B9:1E:1E:EC:C9:9D:E4:E1:35 Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a Certificate serial: 010D0C9F4328584B0A116AFE1BD0B2ECBCA6CC80 Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 18888 IP address blocks: 64.42.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6a:fe:1b:d0:b2:ec:bc:a6:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=f8fe58f0-11f5-4e2e-bc1d-845050410faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:61:c5:de:53:30:9c:8a:25:44:aa:cc:e5: ee:25:3a:fa:e0:55:f3:19:b0:62:b6:d5:9a:d6:9c: 03:d0:44:31:95:e7:72:d2:8b:0b:3b:ff:45:20:bf: 13:01:ca:4e:08:a5:d5:94:05:64:07:3d:72:c6:aa: 59:cd:5f:57:6c:07:7c:48:8f:a0:46:75:f3:64:3f: 2f:32:1d:2a:d5:44:7b:09:ba:6a:7e:df:ba:89:ec: fb:3e:d2:70:e8:d6:bd:d4:89:1d:4f:4e:f4:c7:fc: f0:b2:58:d0:2d:c5:e8:34:30:b2:53:52:2b:1f:26: 89:ca:2b:37:0b:07:29:3c:9e:a1:c4:42:f2:ac:f7: c4:ad:08:f5:ad:51:c3:6c:38:a9:f1:6a:58:27:63: 55:1e:e5:ff:bc:bb:12:e5:3f:fe:38:38:57:fd:e3: bc:22:24:ea:6b:99:4c:11:a3:e1:46:16:52:b1:56: 74:d0:2c:4f:22:57:55:12:2a:05:3c:97:dd:e9:1e: f3:e3:ce:de:ac:e2:5d:19:97:6f:f4:cd:8c:76:05: d3:3c:3f:53:5c:70:29:1b:6e:26:6d:d1:b7:52:4e: 08:b1:27:82:73:16:af:b1:a2:e5:6c:bc:0a:10:93: 3e:0b:30:ae:27:d6:61:f4:ad:d4:07:51:9e:ea:cb: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:CE:6F:0D:7D:FF:26:9B:D0:7A:B9:1E:1E:EC:C9:9D:E4:E1:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl X509v3 Authority Key Identifier: keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer sbgp-ipAddrBlock: critical IPv4: 64.42.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9a:8e:e7:78:fd:f5:13:fe:04:2e:ff:75:f6:e2:f2:45:22: ab:01:e1:67:b4:89:38:d6:27:0e:44:64:a2:7e:ee:b6:da:99: 52:b8:17:26:39:e8:21:a1:7a:33:5a:55:7d:8c:f9:b1:1f:62: 9b:1f:1b:eb:6f:67:46:4e:bf:f0:03:3e:8e:cf:9d:6c:7f:8c: e2:4a:06:11:c5:91:14:00:bf:5b:c7:57:e1:e2:d7:b3:24:45: 9a:17:02:35:97:d0:39:d6:02:0d:13:a5:00:2e:20:a4:cf:5b: 67:df:93:91:af:d4:c9:3c:17:0a:90:c8:7f:c1:47:ad:6f:88: 9e:72:d5:32:a6:13:83:e0:65:ba:30:fc:fe:27:93:a8:00:ee: 76:0f:e4:9a:b5:98:b1:4e:2c:8d:21:3c:35:11:a3:78:bc:df: 89:bc:9b:28:62:2c:d0:69:96:d9:4e:b6:15:4f:fa:47:bb:32: d7:42:bd:0a:bb:18:09:34:cb:24:39:46:da:e8:6e:e4:2e:f1: 41:fa:27:34:d1:e6:bd:fe:a5:73:3e:9a:4f:b7:97:bb:ec:67: a1:02:fc:f5:e3:cb:ff:1c:ba:ef:23:63:7f:10:6a:2b:b7:d2: 09:92:83:d9:9c:a8:2f:eb:9f:ce:8f:9a:18:b4:26:1a:b0:af: dd:4f:0a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWr+G9Cy7LymzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl ZDdhMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZjhmZTU4ZjAtMTFmNS00ZTJlLWJjMWQtODQ1MDUwNDEwZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6dhxd5TMJyKJUSqzOXuJTr64FXzGbBittWa 1pwD0EQxledy0osLO/9FIL8TAcpOCKXVlAVkBz1yxqpZzV9XbAd8SI+gRnXzZD8v Mh0q1UR7Cbpqft+6iez7PtJw6Na91IkdT070x/zwsljQLcXoNDCyU1IrHyaJyis3 CwcpPJ6hxELyrPfErQj1rVHDbDip8WpYJ2NVHuX/vLsS5T/+ODhX/eO8IiTqa5lM EaPhRhZSsVZ00CxPIldVEioFPJfd6R7z487erOJdGZdv9M2MdgXTPD9TXHApG24m bdG3Uk4IsSeCcxavsaLlbLwKEJM+CzCuJ9Zh9K3UB1Ge6st9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWezm8Nff8mm9B6uR4e7Mmd5OE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5 NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvMjhmOTM1ZDMtNTdlNi0z MTRkLTk1ZWQtN2M4MjVkYjAwYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2 ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuajud4/fUT/gQu/3X24vJFIqsB4We0iTjWJw5EZKJ+7rbamVK4FyY5 6CGhejNaVX2M+bEfYpsfG+tvZ0ZOv/ADPo7PnWx/jOJKBhHFkRQAv1vHV+Hi17Mk RZoXAjWX0DnWAg0TpQAuIKTPW2ffk5Gv1Mk8FwqQyH/BR61viJ5y1TKmE4PgZbow /P4nk6gA7nYP5Jq1mLFOLI0hPDURo3i834m8myhiLNBpltlOthVP+ke7MtdCvQq7 GAk0yyQ5RtrobuQu8UH6JzTR5r3+pXM+mk+3l7vsZ6EC/PXjy/8cuu8jY38Qaiu3 0gmSg9mcqC/rn86Pmhi0Jhqwr91PClo= -----END CERTIFICATE-----Generated at Wed Oct 8 23:37:23 2025 by rpki-client