$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9fa2762-1f4b-32bc-83cf-d7ce5700f85e.roa File: d9fa2762-1f4b-32bc-83cf-d7ce5700f85e.roa (raw, json) Hash identifier: d7rOXSlIqE+Ru9+LwrAA6Oe8A+e/RN6XmwgIGn1iUvo= Subject key identifier: 3B:1F:67:0A:27:01:E1:5D:94:62:51:CF:AC:FD:92:D1:9E:06:E6:47 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A7A4B479F3329C6814E539840 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9fa2762-1f4b-32bc-83cf-d7ce5700f85e.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 64267 IP address blocks: 168.245.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:47:9f:33:29:c6:81:4e:53:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=7fed8268-a288-4d7e-98f9-7cbe14e21cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:a5:6d:f5:70:cd:a4:17:a2:4d:d7:d4:8b: 16:40:8e:45:a1:d5:0e:5e:37:3c:ab:ca:4e:ab:30: e1:75:3f:b8:2d:b9:24:04:d8:8c:38:8a:66:b0:75: 1d:d1:33:8d:2f:71:2b:9b:0a:69:69:4b:a8:b0:ad: 1b:a3:08:c4:df:0e:eb:10:3d:c5:92:2e:1f:af:0c: eb:8d:e8:3b:95:50:21:ea:d1:a3:57:43:6a:e0:1f: a0:39:e7:c1:10:83:3a:33:28:bd:f3:a3:c3:3c:09: 3a:35:2f:94:61:77:30:1e:5c:de:60:3c:c6:01:9d: 2d:3b:4a:e0:d7:dd:7b:34:37:b9:fb:c2:35:d2:83: 99:86:c3:05:8a:09:51:e1:86:af:03:da:f5:cb:64: fe:ec:4f:40:86:ac:0a:1b:2e:d7:9b:97:8e:38:0a: a8:7e:39:7a:44:d3:83:23:48:4a:bf:d7:fe:5c:04: 10:c3:97:94:95:50:4d:c6:7b:82:54:75:0b:cd:c7: 16:72:d3:10:e8:17:83:e5:3b:7d:72:2d:3e:f0:ab: 7c:66:86:7b:27:2b:ca:ed:2b:51:e0:62:1f:04:71: b5:6f:43:79:4b:9d:97:45:4c:8d:7d:39:8d:9a:ad: 79:ba:d4:6c:37:f4:80:9d:b3:b6:8c:9a:a7:35:b9: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1F:67:0A:27:01:E1:5D:94:62:51:CF:AC:FD:92:D1:9E:06:E6:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9fa2762-1f4b-32bc-83cf-d7ce5700f85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.245.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:af:24:95:8c:e9:88:72:8d:72:32:3b:32:ae:e7:6c:b4:f4: 0d:03:e1:44:0c:0f:c5:08:53:ad:0a:04:19:e2:85:a5:f8:04: 79:99:bd:d8:8b:44:1d:4b:a3:be:ec:f3:d4:e5:1e:6e:75:92: 00:f6:ab:e9:de:1d:66:13:91:d4:9c:95:ff:70:57:b0:69:61: 2b:ac:10:4d:1d:81:ac:9b:f2:df:6b:2e:c9:cb:4f:8c:ee:62: a1:5a:3f:9c:f9:10:18:e5:92:0e:a0:1c:68:01:d8:08:f5:15: 35:80:41:10:4e:17:a9:32:5c:a9:39:d1:9e:aa:ab:aa:17:73: 35:48:0a:6f:78:48:33:56:88:f8:45:28:84:a0:72:e3:44:40: fb:ce:11:4c:38:08:bf:94:98:c9:94:90:0f:70:fc:68:ab:4e: ed:bb:0f:51:73:f0:4a:a8:c0:f7:c4:77:74:64:ff:06:f3:a1: 9c:30:98:27:ba:0f:93:59:a7:bd:c9:68:dd:95:e7:7f:f4:a9: fe:45:67:63:a2:a8:01:d9:9e:83:f4:19:83:b0:b3:56:8a:c7: e4:72:04:1d:c3:bd:2c:30:23:1a:98:49:2d:c6:eb:0b:9b:b1: ba:a4:4a:77:87:96:a9:3f:93:9a:1b:e4:10:2e:40:9c:98:b7: 90:87:93:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0efMynGgU5TmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk N2ZlZDgyNjgtYTI4OC00ZDdlLTk4ZjktN2NiZTE0ZTIxY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU6lbfVwzaQXok3X1IsWQI5FodUOXjc8q8pO qzDhdT+4LbkkBNiMOIpmsHUd0TONL3ErmwppaUuosK0bowjE3w7rED3Fki4frwzr jeg7lVAh6tGjV0Nq4B+gOefBEIM6Myi986PDPAk6NS+UYXcwHlzeYDzGAZ0tO0rg 1917NDe5+8I10oOZhsMFiglR4YavA9r1y2T+7E9AhqwKGy7Xm5eOOAqofjl6RNOD I0hKv9f+XAQQw5eUlVBNxnuCVHULzccWctMQ6BeD5Tt9ci0+8Kt8ZoZ7JyvK7StR 4GIfBHG1b0N5S52XRUyNfTmNmq15utRsN/SAnbO2jJqnNbn96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsfZwonAeFdlGJRz6z9ktGeBuZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDlmYTI3NjItMWY0Yi0z MmJjLTgzY2YtZDdjZTU3MDBmODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2vJJWM6YhyjXIyOzKu52y09A0D4UQMD8UIU60KBBnihaX4BHmZvdiL RB1Lo77s89TlHm51kgD2q+neHWYTkdSclf9wV7BpYSusEE0dgayb8t9rLsnLT4zu YqFaP5z5EBjlkg6gHGgB2Aj1FTWAQRBOF6kyXKk50Z6qq6oXczVICm94SDNWiPhF KISgcuNEQPvOEUw4CL+UmMmUkA9w/GirTu27D1Fz8EqowPfEd3Rk/wbzoZwwmCe6 D5NZp73JaN2V53/0qf5FZ2OiqAHZnoP0GYOws1aKx+RyBB3DvSwwIxqYSS3G6wub sbqkSneHlqk/k5ob5BAuQJyYt5CHk6c= -----END CERTIFICATE-----Generated at Sun Jul 20 20:35:41 2025 by rpki-client