$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c88f3e5-88a7-3096-b53a-d44961772ea8.roa File: 6c88f3e5-88a7-3096-b53a-d44961772ea8.roa (raw, json) Hash identifier: nmKSm4M49jLpTmdWxe4PPsBpO/DZp6TK8yP3PujVNCE= Subject key identifier: D3:6E:E0:EE:58:13:B8:67:D3:9B:15:08:BE:48:2B:6A:67:C3:57:E4 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A7A4B4709905F2E7CA1F32E90 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c88f3e5-88a7-3096-b53a-d44961772ea8.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 64267 IP address blocks: 52.128.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:47:09:90:5f:2e:7c:a1:f3:2e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=a3d4d6e0-a654-443f-ade8-81919e26115b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:e8:08:6d:c0:41:71:d0:91:9e:70:c7:14: a2:a9:e5:41:4d:c6:31:d6:05:cd:31:5b:ca:83:f7: 73:a8:42:72:a2:4f:50:65:c9:0f:b2:f0:c6:8d:86: 16:0e:f9:6e:92:3c:eb:92:0c:55:d5:a5:75:7e:92: 40:4d:4a:7c:df:7b:ce:f8:a9:52:95:56:73:a2:2c: 99:b4:f2:ab:c4:2b:7b:02:a5:80:71:46:68:fd:a1: a5:d4:f6:4b:32:a3:e0:1a:3c:78:15:29:7d:8c:54: 43:38:81:a3:33:2d:8f:e5:12:f4:ca:c9:c6:95:c5: 30:5f:c6:9f:66:c9:e0:a1:6c:de:e7:3a:3c:f4:88: b7:52:ef:a4:95:5a:60:b4:ef:df:af:82:20:bf:ef: 7e:b7:ad:ed:1f:5a:59:1d:9f:ce:52:35:e2:d9:e4: da:2e:1a:dc:94:b1:55:b9:86:d7:0b:e9:01:7d:8a: aa:cb:39:14:cc:79:0a:04:98:8a:e7:52:1a:06:a1: 1a:9f:8b:ec:45:58:d4:11:6b:f1:54:13:9f:d0:9b: e8:78:9d:5c:1e:7f:2e:2e:0b:9a:8d:87:aa:45:91: 32:3d:07:18:5e:53:bd:f6:14:41:c2:19:2d:af:07: 60:9e:b2:98:b7:f7:49:f3:87:61:e5:23:1f:dd:37: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:E0:EE:58:13:B8:67:D3:9B:15:08:BE:48:2B:6A:67:C3:57:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6c88f3e5-88a7-3096-b53a-d44961772ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 52.128.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:e8:68:c8:b8:78:dc:23:cf:f7:b6:a6:f5:2e:8c:eb:06:c5: 36:49:90:62:b2:90:7a:b3:77:8f:25:87:69:2d:ba:eb:c2:d9: f7:96:05:84:6d:44:a2:9f:68:ef:17:ff:8e:c5:b8:18:d0:fb: ab:01:3c:01:8b:c8:a8:14:6d:f5:d3:56:82:5c:77:e2:c8:45: 9b:c4:ec:dc:c1:3f:16:1d:41:92:e1:6c:fb:5f:2f:7d:03:b5: 55:db:f2:df:9e:8b:2b:c0:c9:07:32:6a:07:eb:4a:e0:26:bc: f1:5a:76:1d:10:38:d0:3a:eb:d7:f8:b2:7c:d7:e8:f9:d3:02: b3:dc:bf:6f:c5:c8:ca:20:f4:cf:42:15:96:6b:ed:9a:6a:30: b1:2d:43:b2:46:07:dc:79:dc:66:e3:3f:17:a1:a0:c3:c0:f4: f4:39:9a:b4:b0:15:e3:21:8e:10:aa:ec:22:ca:22:69:6b:c4: 77:78:88:e8:05:71:17:c1:74:cb:04:55:1c:d9:14:ca:35:ce: 70:e4:33:62:48:d5:d8:4f:79:d7:25:4f:6b:b4:a0:db:6e:13: a8:38:8b:cf:34:69:18:80:7c:c8:35:32:87:9f:77:59:a4:ea: 93:55:e4:e1:27:47:6e:8d:58:89:4a:78:f8:97:d2:62:24:94: 7b:4e:93:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0cJkF8ufKHzLpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YTNkNGQ2ZTAtYTY1NC00NDNmLWFkZTgtODE5MTllMjYxMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAToCG3AQXHQkZ5wxxSiqeVBTcYx1gXNMVvK g/dzqEJyok9QZckPsvDGjYYWDvlukjzrkgxV1aV1fpJATUp833vO+KlSlVZzoiyZ tPKrxCt7AqWAcUZo/aGl1PZLMqPgGjx4FSl9jFRDOIGjMy2P5RL0ysnGlcUwX8af ZsngoWze5zo89Ii3Uu+klVpgtO/fr4Igv+9+t63tH1pZHZ/OUjXi2eTaLhrclLFV uYbXC+kBfYqqyzkUzHkKBJiK51IaBqEan4vsRVjUEWvxVBOf0JvoeJ1cHn8uLgua jYeqRZEyPQcYXlO99hRBwhktrwdgnrKYt/dJ84dh5SMf3TdgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNu4O5YE7hn05sVCL5IK2pnw1fkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNmM4OGYzZTUtODhhNy0z MDk2LWI1M2EtZDQ0OTYxNzcyZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALboaMi4eNwjz/e2pvUujOsGxTZJkGKykHqzd48lh2ktuuvC2feWBYRt RKKfaO8X/47FuBjQ+6sBPAGLyKgUbfXTVoJcd+LIRZvE7NzBPxYdQZLhbPtfL30D tVXb8t+eiyvAyQcyagfrSuAmvPFadh0QONA669f4snzX6PnTArPcv2/FyMog9M9C FZZr7ZpqMLEtQ7JGB9x53GbjPxehoMPA9PQ5mrSwFeMhjhCq7CLKImlrxHd4iOgF cRfBdMsEVRzZFMo1znDkM2JI1dhPedclT2u0oNtuE6g4i880aRiAfMg1Moefd1mk 6pNV5OEnR26NWIlKePiX0mIklHtOk9Q= -----END CERTIFICATE-----Generated at Sun Jul 20 20:25:56 2025 by rpki-client