$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa File: 59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa (raw, json) Hash identifier: AGOP5aO3jiwH7JmoHeGUfSMMV6lId1y+ofDJ6CjDy14= Subject key identifier: 42:C0:8C:6C:A9:8B:05:A8:CE:B5:C0:0D:83:0A:DD:67:7A:4B:B1:24 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584B2B91948BCB886AA5827D2C80 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 22142 IP address blocks: 170.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:94:8b:cb:88:6a:a5:82:7d:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=afb8320f-f821-4902-98a5-3c0c4e0dd8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:58:2f:d8:ce:13:5d:58:72:3c:16:62:bb: a5:d1:d8:cd:0e:c6:42:13:bd:99:cc:ce:54:ed:da: 1f:6b:b5:fa:63:4d:c8:1a:84:b4:ed:4b:51:90:8e: e0:6d:31:ee:5d:5c:cf:01:13:2a:06:eb:19:ed:15: 8f:a9:b3:8c:5e:34:af:fa:b8:6a:d8:c8:5c:71:c3: 16:ff:86:c4:dc:12:ed:cc:b3:fd:54:0e:23:b0:de: c8:30:d0:da:0d:21:e0:31:7d:08:2f:69:56:1c:38: 1a:e8:51:24:86:e1:37:5e:52:8d:c0:c8:a6:dc:9f: 2c:ff:39:a4:b1:21:1c:1b:d3:9f:1c:b9:35:ee:2d: db:3f:a4:00:8c:71:94:37:3b:68:79:33:d3:31:c6: bf:28:e2:25:8d:47:87:1a:99:00:63:d5:29:0c:c3: 6e:a9:11:a9:82:1f:24:3b:b6:a9:2e:d3:cb:ad:80: 16:8b:8e:07:95:74:8c:37:dc:bc:0a:57:68:aa:87: 24:09:87:7c:c7:0d:d9:25:cc:3f:7d:6f:bf:aa:c7: 2c:dd:9f:89:3d:a2:01:74:cb:93:dd:f9:5f:76:aa: 6a:3e:36:19:57:d0:c5:85:c1:b2:b8:45:ed:39:3c: f2:73:a6:aa:9e:cf:b5:a1:bb:68:aa:64:3a:ba:7d: 6a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C0:8C:6C:A9:8B:05:A8:CE:B5:C0:0D:83:0A:DD:67:7A:4B:B1:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d8:c4:39:a1:f6:2b:85:84:34:6c:95:4f:1b:47:d1:3b:26: 12:b0:23:50:fa:d2:db:77:b5:76:bb:41:31:3e:9a:97:7d:3e: 91:9e:79:f1:88:6c:f7:e6:b7:d5:13:a3:51:30:f4:de:72:46: 75:f7:ed:ac:75:80:12:8a:fa:a4:75:61:34:6b:3b:53:f4:03: a9:f7:7f:82:f7:07:60:dc:22:96:ca:a1:92:6f:c1:0d:eb:b8: 52:96:53:f4:ce:a8:64:1a:1c:6e:34:4c:59:9f:eb:62:80:d9: 34:85:ff:00:6a:b5:4d:99:f8:15:0f:3f:19:42:03:30:4f:38: fa:82:9d:91:9b:e1:30:24:26:c1:4b:59:c8:16:cb:82:55:40: b0:5c:b6:27:1a:62:9e:7e:53:85:23:a4:e2:b3:db:f5:b9:af: f0:2c:7b:f2:ea:85:db:46:85:ea:be:81:91:dd:cf:dc:bd:34: e1:3b:8e:b7:23:c3:e9:0b:bd:43:84:b9:25:c6:2e:89:9b:e0: 29:13:cd:d9:91:3a:1b:c0:37:79:65:50:09:d2:1a:49:f6:1c: 47:1d:48:86:b6:1e:bb:a9:63:3f:c5:4c:00:25:84:84:8f:2a: bc:5c:75:b6:8d:d3:05:8b:a1:5c:9d:5b:21:8f:23:3c:0a:f8: 1c:8f:ee:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZSLy4hqpYJ9LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YWZiODMyMGYtZjgyMS00OTAyLTk4YTUtM2MwYzRlMGRkOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgNYL9jOE11YcjwWYrul0djNDsZCE72ZzM5U 7dofa7X6Y03IGoS07UtRkI7gbTHuXVzPARMqBusZ7RWPqbOMXjSv+rhq2MhcccMW /4bE3BLtzLP9VA4jsN7IMNDaDSHgMX0IL2lWHDga6FEkhuE3XlKNwMim3J8s/zmk sSEcG9OfHLk17i3bP6QAjHGUNztoeTPTMca/KOIljUeHGpkAY9UpDMNuqRGpgh8k O7apLtPLrYAWi44HlXSMN9y8CldoqockCYd8xw3ZJcw/fW+/qscs3Z+JPaIBdMuT 3flfdqpqPjYZV9DFhcGyuEXtOTzyc6aqns+1obtoqmQ6un1qewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELAjGypiwWozrXADYMK3Wd6S7EkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNTljNTY0ZjEtNGJhNS0z MmIwLTlmNWMtMDYwNDcyNWNkY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzYxDmh9iuFhDRslU8bR9E7JhKwI1D60tt3tXa7QTE+mpd9PpGeefGI bPfmt9UTo1Ew9N5yRnX37ax1gBKK+qR1YTRrO1P0A6n3f4L3B2DcIpbKoZJvwQ3r uFKWU/TOqGQaHG40TFmf62KA2TSF/wBqtU2Z+BUPPxlCAzBPOPqCnZGb4TAkJsFL WcgWy4JVQLBcticaYp5+U4UjpOKz2/W5r/Ase/LqhdtGheq+gZHdz9y9NOE7jrcj w+kLvUOEuSXGLomb4CkTzdmROhvAN3llUAnSGkn2HEcdSIa2HrupYz/FTAAlhISP KrxcdbaN0wWLoVydWyGPIzwK+ByP7sM= -----END CERTIFICATE-----Generated at Sat Oct 11 15:11:44 2025 by rpki-client