$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa File: 542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json) Hash identifier: KdqiCQyJ+TPlffDjyyxoBJl3xCmKQhgHLz/BFUJejq0= Subject key identifier: 56:66:E7:B4:44:91:25:53:AB:81:3E:4B:46:FF:9A:5A:03:3D:3D:4C Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584B2B91947619F836A4914519E0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 21530 IP address blocks: 170.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:94:76:19:f8:36:a4:91:45:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=2bad1b06-cbfa-4119-8f2f-5f9a55d05182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:64:ca:28:cf:b1:a3:15:60:72:bb:81:f2: fd:d0:11:81:d5:39:15:c4:46:29:02:39:61:80:ee: 4e:ff:2f:60:3c:94:0d:d9:df:37:55:49:fe:58:b2: a2:77:84:92:15:fd:02:7b:e4:32:6d:6a:fd:c4:20: af:3c:06:8a:13:20:05:28:2d:0f:90:06:36:fb:1f: e1:6e:6d:72:b2:3c:39:44:8b:b6:1d:7a:45:2c:67: 44:66:c7:c1:e2:37:dd:dc:b9:26:8a:f7:6e:f9:f0: 8c:72:a0:f4:61:26:9f:2f:f7:2f:83:97:19:57:37: b0:67:d1:9b:9a:41:a5:86:8f:48:b3:8b:df:1a:39: 3f:72:e6:6d:c5:98:1a:49:80:7e:39:8f:9a:c7:35: 03:99:49:3b:ec:1d:f4:36:6f:37:e9:43:d0:48:50: 54:64:76:da:2f:a3:4d:8e:7e:fa:6d:a9:20:da:f8: 6f:27:c8:7d:c5:75:1d:82:f1:21:18:fe:17:f8:d7: 0c:c9:41:0d:5f:31:ba:04:f4:05:76:74:4f:db:5e: f6:f1:d3:46:22:ff:46:e2:d4:6c:41:2e:8b:c5:75: 85:00:e7:1b:1b:5c:7d:0e:1c:78:9c:8d:40:81:52: 19:bf:52:2b:3e:55:55:58:86:52:81:94:44:96:2a: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:66:E7:B4:44:91:25:53:AB:81:3E:4B:46:FF:9A:5A:03:3D:3D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a7:ff:e6:07:95:0d:ac:31:d2:17:ab:a0:58:55:55:8c:ea: 2a:65:2f:c3:31:a8:1e:7f:c4:9b:0a:3a:45:68:51:09:53:7b: 56:f3:8d:af:41:9e:b9:57:74:23:54:a0:38:72:1c:3f:69:aa: 8c:86:68:25:c1:5b:96:12:5f:f6:e5:89:8b:21:e0:68:e2:0c: eb:c6:98:30:54:4b:05:4c:de:f5:cb:ab:ac:9e:d8:1a:cf:16: 76:ab:c0:55:f6:5b:1b:2f:3a:cb:ea:45:6a:a7:c5:33:67:4e: a2:82:09:52:1f:9c:e6:fb:af:25:79:36:68:bf:ec:71:21:d0: 64:5f:dd:e8:86:b2:d9:26:7f:fc:21:76:ff:e1:eb:f4:33:0d: db:19:32:24:e6:9c:b2:79:59:bd:36:d5:94:0d:d8:42:02:da: 61:95:5e:7b:d2:db:3e:97:ea:3e:b8:70:6a:a8:31:22:82:74: bf:68:87:fc:23:3f:cc:f0:cc:9b:7e:d8:2c:d9:87:6d:df:a7: 9b:23:54:0c:1e:1d:a5:2c:c4:95:0e:c9:f4:3f:f1:9e:64:a4: dc:72:d1:e5:14:66:68:f0:21:58:98:6d:55:13:49:97:dd:22: b2:29:d6:b6:9f:3e:79:2d:3f:ae:0c:f0:93:d6:7b:ca:83:9c: a4:e1:03:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZR2Gfg2pJFFGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MmJhZDFiMDYtY2JmYS00MTE5LThmMmYtNWY5YTU1ZDA1MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkRkyijPsaMVYHK7gfL90BGB1TkVxEYpAjlh gO5O/y9gPJQN2d83VUn+WLKid4SSFf0Ce+QybWr9xCCvPAaKEyAFKC0PkAY2+x/h bm1ysjw5RIu2HXpFLGdEZsfB4jfd3Lkmivdu+fCMcqD0YSafL/cvg5cZVzewZ9Gb mkGlho9Is4vfGjk/cuZtxZgaSYB+OY+axzUDmUk77B30Nm836UPQSFBUZHbaL6NN jn76bakg2vhvJ8h9xXUdgvEhGP4X+NcMyUENXzG6BPQFdnRP21728dNGIv9G4tRs QS6LxXWFAOcbG1x9Dhx4nI1AgVIZv1IrPlVVWIZSgZREliqJXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZm57REkSVTq4E+S0b/mloDPT1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNTQyZTg0N2MtMzcxNS0z YjI3LTlmNzQtYWRlNzdhMGZiMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6n/+YHlQ2sMdIXq6BYVVWM6iplL8MxqB5/xJsKOkVoUQlTe1bzja9B nrlXdCNUoDhyHD9pqoyGaCXBW5YSX/bliYsh4GjiDOvGmDBUSwVM3vXLq6ye2BrP FnarwFX2WxsvOsvqRWqnxTNnTqKCCVIfnOb7ryV5Nmi/7HEh0GRf3eiGstkmf/wh dv/h6/QzDdsZMiTmnLJ5Wb021ZQN2EIC2mGVXnvS2z6X6j64cGqoMSKCdL9oh/wj P8zwzJt+2CzZh23fp5sjVAweHaUsxJUOyfQ/8Z5kpNxy0eUUZmjwIViYbVUTSZfd IrIp1rafPnktP64M8JPWe8qDnKThA0k= -----END CERTIFICATE-----Generated at Sat Oct 11 15:11:44 2025 by rpki-client