$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa File: ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa (raw, json) Hash identifier: vtCaeRNyNVEEq/P6vR2Wv5ywbKfhLd3heIyFlUm2CaE= Subject key identifier: E9:61:84:57:60:E7:79:66:EE:65:0F:D9:F8:EB:ED:82:2E:96:5A:11 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A9900BE2CD2198D430041E538 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 64267 IP address blocks: 168.91.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:be:2c:d2:19:8d:43:00:41:e5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=295fbaef-994a-4a45-b6b6-d2179eb35244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:fd:ce:d3:92:07:2b:20:ff:ad:07:c1:c5: bc:b9:7e:a7:ea:92:81:8d:ac:af:fb:00:08:7e:42: ae:4f:c7:17:2d:b7:37:fa:de:ec:75:50:91:6e:69: ea:43:90:b5:7d:ea:31:d6:ad:d9:24:4d:02:87:b3: 6b:b6:37:6f:21:95:b6:27:60:79:13:fa:d0:4e:1e: 8d:93:2e:86:d0:e4:51:96:a3:8a:d0:61:b6:e7:33: 13:06:e0:53:14:76:c1:ac:30:2e:2e:71:af:88:91: 83:f7:9a:9d:fe:58:70:3f:e0:a8:5d:da:60:48:6b: a4:dd:bd:bc:0e:c6:a7:b5:3f:09:59:a8:ca:0e:f1: 17:e8:f8:f1:69:1f:31:c9:40:e9:cb:ee:c9:1d:4f: b5:06:c0:ff:36:01:f1:75:e8:fb:fe:7d:ad:ab:7a: 45:7c:61:a5:26:b0:a9:b8:9b:2e:33:79:aa:56:6d: d0:21:45:43:42:2d:8a:8f:cc:2d:d0:74:f0:b3:7e: b3:4e:5c:45:85:ef:0b:a0:c8:45:78:10:3b:0d:29: 1c:cc:8d:c2:a5:a5:71:ac:b7:97:d0:5d:a1:d0:75: 76:6b:ab:28:0e:89:2c:c6:50:29:88:a6:38:1e:70: 36:ea:67:aa:63:af:cb:51:a0:52:0f:8a:14:f2:1a: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:61:84:57:60:E7:79:66:EE:65:0F:D9:F8:EB:ED:82:2E:96:5A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:fe:15:74:08:5b:6f:ff:59:9b:61:15:ff:0b:aa:d3:93:f1: c6:d7:d0:e3:ac:37:76:ec:a2:74:14:92:12:b5:b5:7a:9f:45: c6:2c:c9:21:28:f6:29:47:e3:40:c5:f2:3c:25:ff:f5:98:2e: 51:82:0f:1f:2a:5b:cd:88:26:29:93:6f:97:ae:b3:d9:bb:f1: 54:50:de:87:4e:2c:4d:0f:93:18:fe:38:3f:b4:67:bc:77:ec: c6:7d:36:24:79:53:c0:44:f9:b9:46:85:00:11:3b:e4:af:2c: 89:4b:dd:a7:1e:2d:75:bc:79:fa:83:86:65:e8:ba:59:ec:a2: 55:1b:27:48:92:2a:9d:4e:54:f9:76:99:0b:27:bd:7e:53:bb: c7:46:d6:ef:e0:b5:ae:88:59:17:9e:fd:11:8a:9c:24:2f:95: 1c:bd:ba:e4:57:fb:93:ac:0b:3e:43:a1:44:e4:6c:5b:cc:53: 76:6b:fd:3f:31:5f:46:14:ac:b5:a4:24:61:06:93:69:97:67: 0c:8c:9d:68:2e:c0:01:8a:b0:5a:ba:15:2f:e9:9b:27:56:41: dd:8a:96:18:2d:ac:39:9d:f6:2f:6f:7b:2f:6b:39:75:1d:ba: d7:58:64:d2:e6:ee:35:a4:5b:a4:17:17:14:f5:7a:35:01:c5: 9d:aa:e4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAL4s0hmNQwBB5TgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk Mjk1ZmJhZWYtOTk0YS00YTQ1LWI2YjYtZDIxNzllYjM1MjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo879ztOSBysg/60HwcW8uX6n6pKBjayv+wAI fkKuT8cXLbc3+t7sdVCRbmnqQ5C1feox1q3ZJE0Ch7NrtjdvIZW2J2B5E/rQTh6N ky6G0ORRlqOK0GG25zMTBuBTFHbBrDAuLnGviJGD95qd/lhwP+CoXdpgSGuk3b28 DsantT8JWajKDvEX6PjxaR8xyUDpy+7JHU+1BsD/NgHxdej7/n2tq3pFfGGlJrCp uJsuM3mqVm3QIUVDQi2Kj8wt0HTws36zTlxFhe8LoMhFeBA7DSkczI3CpaVxrLeX 0F2h0HV2a6soDoksxlApiKY4HnA26meqY6/LUaBSD4oU8hpuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlhhFdg53lm7mUP2fjr7YIulloRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2E5OTgwMTctNjM0Mi0z YmQ4LWI1YWYtMmMzYmEzMTZiNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/+FXQIW2//WZthFf8LqtOT8cbX0OOsN3bsonQUkhK1tXqfRcYsySEo 9ilH40DF8jwl//WYLlGCDx8qW82IJimTb5eus9m78VRQ3odOLE0Pkxj+OD+0Z7x3 7MZ9NiR5U8BE+blGhQARO+SvLIlL3aceLXW8efqDhmXoulnsolUbJ0iSKp1OVPl2 mQsnvX5Tu8dG1u/gta6IWRee/RGKnCQvlRy9uuRX+5OsCz5DoUTkbFvMU3Zr/T8x X0YUrLWkJGEGk2mXZwyMnWguwAGKsFq6FS/pmydWQd2KlhgtrDmd9i9vey9rOXUd utdYZNLm7jWkW6QXFxT1ejUBxZ2q5Jc= -----END CERTIFICATE-----Generated at Tue Jul 22 19:22:47 2025 by rpki-client