$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa File: 5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa (raw, json) Hash identifier: Nqh72SeWKlgOlM8l58+QQWC7lbMCxKCxLgEyJZZLhGE= Subject key identifier: D7:37:37:5B:C8:6B:6A:98:28:72:0A:D9:83:45:91:E5:F8:B3:8E:89 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A4A38AF17F97E12E14591A02C Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa Signing time: Mon 23 Jun 2025 19:44:47 +0000 ROA not before: Mon 23 Jun 2025 19:44:47 +0000 ROA not after: Sun 21 Sep 2025 19:44:47 +0000 asID: 20001 IP address blocks: 208.89.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:38:af:17:f9:7e:12:e1:45:91:a0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 19:44:47 2025 GMT Not After : Sep 21 19:44:47 2025 GMT Subject: CN=37e3fd71-4bde-4fe0-b765-208f8022c1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:7c:6a:a4:c5:4d:9d:46:e9:4d:fc:0d:6c: 1a:84:31:61:8f:03:43:0d:e2:74:85:45:16:e2:d8: e3:29:6f:9f:7b:09:80:ad:31:4b:68:9c:4b:47:59: c6:c5:65:ae:76:81:c8:36:8f:ad:83:76:ca:88:d4: 79:76:f7:77:05:d7:d0:0b:ee:28:99:4e:3e:c3:c2: 3b:4b:c9:7e:9b:a8:53:2c:b0:d5:b8:a4:60:95:42: 24:ea:7d:91:73:77:1b:fe:b0:91:b1:bb:6d:cc:2f: 1c:b5:9e:49:be:5b:f8:ff:3e:27:21:8e:cb:97:c9: 19:03:23:c1:dd:e2:62:65:05:53:27:74:43:af:01: 08:3d:f7:7b:a6:52:58:e5:d0:e6:ec:94:66:05:fa: 43:0b:76:4d:13:d7:d2:50:d7:5e:69:2a:a0:00:c7: b8:38:25:e3:c6:43:9e:62:7b:fe:0a:24:4e:c8:30: 70:2b:2c:55:49:0d:92:21:9b:02:59:b0:78:02:d9: 23:12:ba:d8:bd:6d:8e:c1:44:d0:75:20:89:b5:12: 10:60:9e:ff:13:6b:bc:de:a2:8c:54:9a:a4:69:7f: 8b:bc:11:fa:fb:5c:39:a4:6f:76:5b:05:82:39:f3: 6b:1c:01:ac:86:07:65:cb:88:c8:df:82:11:76:2c: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:37:5B:C8:6B:6A:98:28:72:0A:D9:83:45:91:E5:F8:B3:8E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2d:21:06:0c:d6:85:09:d3:d0:c1:bc:a9:3a:ea:e6:80:a4: b9:98:33:b1:df:6c:50:4f:74:41:c6:e0:1f:54:16:e2:c0:75: f2:0a:5c:74:70:f6:55:2b:c2:9b:a1:96:99:b7:8d:40:9c:56: 3a:f7:73:af:e0:68:62:0b:05:51:76:fe:60:82:eb:da:76:53: 55:ad:a1:bb:55:ec:54:5c:c4:2f:16:66:fa:4d:96:f0:1e:09: 7e:cf:09:89:26:c0:e3:44:ef:1e:2d:8f:6a:74:9c:f3:96:ab: 7c:3e:0d:89:c4:07:28:e5:ac:61:6e:59:fa:b1:9b:e4:8f:e7: d9:8f:64:80:bc:2e:42:c1:e9:95:5a:f1:e7:64:07:84:94:21: d8:ec:09:a3:e8:05:d1:2b:51:71:0e:34:81:36:3f:b3:35:67: 15:7f:b6:d7:b8:fe:94:c5:51:e4:f6:38:35:5d:6f:7f:96:8c: e7:d6:29:6e:7e:0e:4f:ba:75:ef:24:e2:5d:f5:d7:75:e6:34: 41:a9:91:c1:4f:80:32:cc:52:28:2d:f0:8c:bf:6b:1b:d3:d0: 0a:b5:73:c2:82:fa:e9:99:49:4c:f7:7a:10:2f:81:59:38:0d: e0:10:09:a1:51:14:20:31:53:39:63:e1:4d:9e:8f:ee:48:e3: 04:ab:a1:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKOK8X+X4S4UWRoCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzE5NDQ0N1oXDTI1MDkyMTE5NDQ0N1owLzEtMCsGA1UEAxMk MzdlM2ZkNzEtNGJkZS00ZmUwLWI3NjUtMjA4ZjgwMjJjMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytt8aqTFTZ1G6U38DWwahDFhjwNDDeJ0hUUW 4tjjKW+fewmArTFLaJxLR1nGxWWudoHINo+tg3bKiNR5dvd3BdfQC+4omU4+w8I7 S8l+m6hTLLDVuKRglUIk6n2Rc3cb/rCRsbttzC8ctZ5Jvlv4/z4nIY7Ll8kZAyPB 3eJiZQVTJ3RDrwEIPfd7plJY5dDm7JRmBfpDC3ZNE9fSUNdeaSqgAMe4OCXjxkOe Ynv+CiROyDBwKyxVSQ2SIZsCWbB4AtkjErrYvW2OwUTQdSCJtRIQYJ7/E2u83qKM VJqkaX+LvBH6+1w5pG92WwWCOfNrHAGshgdly4jI34IRdix3QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc3N1vIa2qYKHIK2YNFkeX4s46JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWMyYzVjYzQtYjE0My0z Yjk4LTlhYWQtNDNhMjc3MjY4OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAtIQYM1oUJ09DBvKk66uaApLmYM7HfbFBPdEHG4B9UFuLAdfIKXHRw 9lUrwpuhlpm3jUCcVjr3c6/gaGILBVF2/mCC69p2U1WtobtV7FRcxC8WZvpNlvAe CX7PCYkmwONE7x4tj2p0nPOWq3w+DYnEByjlrGFuWfqxm+SP59mPZIC8LkLB6ZVa 8edkB4SUIdjsCaPoBdErUXEONIE2P7M1ZxV/tte4/pTFUeT2ODVdb3+WjOfWKW5+ Dk+6de8k4l3113XmNEGpkcFPgDLMUigt8Iy/axvT0Aq1c8KC+umZSUz3ehAvgVk4 DeAQCaFRFCAxUzlj4U2ej+5I4wSroQg= -----END CERTIFICATE-----Generated at Mon Jul 21 12:37:20 2025 by rpki-client