$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa File: cf757231-1b36-3cd8-9100-018cab8b51c4.roa (raw, json) Hash identifier: XtMJ1zs2zDobuBNdwcu4235+KboQ+fZIvvS3kH84jYE= Subject key identifier: F8:D0:D8:9C:8B:7A:FF:E9:24:D0:02:79:D3:1C:8C:F5:DC:79:52:4D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A963696F2B79EDDD5B3D54E00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 64267 IP address blocks: 199.34.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:96:f2:b7:9e:dd:d5:b3:d5:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=6270b546-b9d4-49a5-a206-8880faab9411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:06:73:bc:ea:a9:b1:72:94:f9:73:1a:af:63: 15:11:e2:35:4d:1a:79:8c:22:9d:58:65:9f:42:d5: d5:02:ce:ba:a7:9f:7f:a2:db:0b:05:ed:a2:dd:dc: 25:9b:25:fe:cf:9d:e7:d7:fe:ad:20:e6:14:cb:ea: 63:11:a6:b1:f0:fe:d6:f7:72:a2:29:c0:9c:12:b8: 6c:5f:96:d5:3b:04:62:f2:18:ea:d7:0a:f2:8f:95: 29:1e:93:3d:36:d0:d6:b6:3a:7a:97:a8:35:8d:1e: 42:2a:c5:ea:74:51:0e:11:c0:20:63:e2:6b:94:44: 47:9e:5f:b8:84:ec:27:ff:87:5a:bf:8b:5c:97:18: aa:a7:36:b7:ba:4c:5d:d9:16:07:85:be:4b:c8:27: 50:86:df:05:f9:7a:79:0b:af:b2:6d:1a:ae:25:3d: 22:b6:3e:41:83:34:3b:93:fe:8f:1a:04:85:83:97: 79:e8:7b:7a:a7:44:26:fd:29:62:f4:b0:b0:d2:89: 84:4a:bd:b2:e4:9f:63:cc:4a:69:84:52:ee:d6:29: ca:dc:a0:73:44:b1:dc:c0:0f:9c:b4:eb:d4:38:df: 78:d7:d5:b6:7a:d1:04:ba:c3:51:99:d0:7e:c4:b8: 5d:0a:e9:26:c4:71:b9:c9:f5:6f:d7:99:7f:71:d1: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D0:D8:9C:8B:7A:FF:E9:24:D0:02:79:D3:1C:8C:F5:DC:79:52:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf757231-1b36-3cd8-9100-018cab8b51c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.34.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a4:6d:b2:f6:99:a9:b5:59:57:a7:db:78:fa:68:b6:0f:17: 25:a3:e3:f8:71:ba:15:26:a4:20:a9:af:07:0b:a3:c5:40:f2: 8a:aa:96:a0:9d:76:5b:e1:4f:91:ce:1a:f8:d1:27:94:88:e9: 1b:59:2d:5e:ec:3d:c6:ec:fb:68:98:fc:8e:e7:b1:e5:82:d6: 8e:0e:81:45:47:e7:f1:5b:4b:d1:46:2d:1e:f1:75:5d:a8:fc: db:7c:cb:9b:54:2e:fd:0d:10:48:55:2e:38:0b:78:4c:a2:04: cf:9d:3f:10:1c:6d:02:c7:55:17:0f:02:17:a3:30:44:94:ce: 17:d5:ae:71:81:83:e1:56:92:d9:52:6f:a9:f0:f3:b7:b5:12: bc:50:06:a0:31:44:fd:b5:dc:13:ff:23:1b:9c:47:e4:90:0d: c2:af:39:06:8a:7d:e9:31:be:7b:00:68:0b:f4:ab:84:ab:58: 4e:7d:e2:31:5a:e0:82:32:cb:25:cc:f8:93:12:aa:c7:a8:6b: 9e:7b:78:6d:a7:d0:93:75:46:3f:c0:d4:84:f8:f3:b0:19:37: 05:06:d1:ba:38:08:bb:d3:84:a1:90:f9:39:52:e0:c4:bf:78: 7a:b3:e8:44:3a:1f:24:4b:72:a5:4a:db:1c:a0:47:26:84:02: 51:2f:7f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpbyt57d1bPVTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NjI3MGI1NDYtYjlkNC00OWE1LWEyMDYtODg4MGZhYWI5NDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAZzvOqpsXKU+XMar2MVEeI1TRp5jCKdWGWf QtXVAs66p59/otsLBe2i3dwlmyX+z53n1/6tIOYUy+pjEaax8P7W93KiKcCcErhs X5bVOwRi8hjq1wryj5UpHpM9NtDWtjp6l6g1jR5CKsXqdFEOEcAgY+JrlERHnl+4 hOwn/4dav4tclxiqpza3ukxd2RYHhb5LyCdQht8F+Xp5C6+ybRquJT0itj5BgzQ7 k/6PGgSFg5d56Ht6p0Qm/Sli9LCw0omESr2y5J9jzEpphFLu1inK3KBzRLHcwA+c tOvUON9419W2etEEusNRmdB+xLhdCukmxHG5yfVv15l/cdGTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjQ2JyLev/pJNACedMcjPXceVJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2Y3NTcyMzEtMWIzNi0z Y2Q4LTkxMDAtMDE4Y2FiOGI1MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIekbbL2mam1WVen23j6aLYPFyWj4/hxuhUmpCCprwcLo8VA8oqqlqCd dlvhT5HOGvjRJ5SI6RtZLV7sPcbs+2iY/I7nseWC1o4OgUVH5/FbS9FGLR7xdV2o /Nt8y5tULv0NEEhVLjgLeEyiBM+dPxAcbQLHVRcPAhejMESUzhfVrnGBg+FWktlS b6nw87e1ErxQBqAxRP213BP/IxucR+SQDcKvOQaKfekxvnsAaAv0q4SrWE594jFa 4IIyyyXM+JMSqseoa557eG2n0JN1Rj/A1IT487AZNwUG0bo4CLvThKGQ+TlS4MS/ eHqz6EQ6HyRLcqVK2xygRyaEAlEvfxA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:25:57 2025 by rpki-client